Implementing Security for Non-CA Products › OPC/ESA

OPC/ESA

• Define OPC/A as a facility using CA‑7 as a model.

  PGM=CSY      id=?  TYPE=099
  ATTRIBUTES=ACTIVE,SHRPRF,NOASUBM,NOABEND,MULTIUSER,NOXDEF
  ATTRIBUTES=NOLUMSG,NOSTMSG,SIGN(M),INSTDATA,NORNDPW,AUTHINIT
  ATTRIBUTES=NOPROMPT,NOAUDIT,RES,WARNPW,NOTSOC,LCFCMD
  ATTRIBUTES=MSGLC,NOTRACE,NOEODINIT,IJU,NODORMPW,NONPWR
  MODE=WARN  DOWN=GLOBAL  LOGGING=MSG,SEC9
  UIDACID=8 LOCKTIME=000 DEFACID=*NONE*   KEY=8
  MAXUSER=03000  PRFT=003
  

• To define a PROCNAME to the STC Table and an OPC/A region ACID, enter the following command:

  TSS ADDTO(STC) ACID(opca region acid) PROCNAME(OPCA)
  

• Define a resource class for OPC/A in the RDT as follows:

  TSS ADDTO(RDT) RESCLASS(OPCCLASS) RESCODE(nn) ATTR(LONG)
  or
  TSS ADDTO(RDT) RESCLASS(IBMOPC) RESCODE(nn) ATTR(LONG)
  TSS REPLACE(RDT) RESCLASS(OPCCLASS) ACLST(ALL,UPDATE,READ,NONE)
  or
  TSS REPLACE(RDT) RESCLASS(IBMOPC) ACLST(ALL,UPDATE,READ,NONE)
  

  Failure to add this RDT entry will result in one of the following errors:

  TSS9410E Unknown classname(OPCCLASS) for SVC(SVCNAME)

  TSS9410E	Unknown classname(IBMOPC) for SVC(SVCNAME)
  

• There are calls against predefined resource classes SURROGAT, APPLICATION, and JESJOBS. The resource entity used in the APPLICATION resource class is the OPC/A subsystem name, expressed as follows:

  TSS PERMIT(ACID) APPLICATION(opca subsystem name)
  

Note: In Step 3, the class names are derived from OPC/ESA documentation. Either class will work exactly the same, regardless of the release of CA Top Secret. If you are currently using OPC/ESA with a classname of OPCCLASS, there is no reason to change to the new classname of IBMOPC.