Previous Topic: TSSPROT JCL RequirementsNext Topic: TSSPROT Examples


TSSPROT Keywords

The following keywords can be used with the TSSPROT PROTECT and UNPROTECT verbs:

Use PROTECT or UNPROTECT to begin coding options. You can code more than one statement but CA Top Secret processes each one separately. The following operands apply to the TSSPROT keywords:

              [ Dsnprx(dsn,...)        ]
              [ MSS                    ]
              [ PASSWORD(IGNORE)       ]
              [         (PROTECT)      ]
              [ SIM                    ]
              [ UNIT                   ]
{Protect  }   [ USERCAT({AIX        }) ]
{Unprotect}   [        ({CLUSTER    }) ]
              [        ({DATA       }) ]
              [        ({GDG        }) ]
              [        ({INDEX      }) ]
              [        ({PATH       }) ]
              [        ({SPACE      }) ]
              [        ({USERCATALOG}) ]
              [ Volume                 ]

In the syntax, verbs and keywords can be entered in free format, separated by spaces. A verb must be the first operand per request. A request is considered one statement. To continue a statement, supply a dash (‑) at the end of the last operand, then continue from position one of the next statement. For example:

P CAT(CATALOG.VSYSA01)  DSN('GCC.TCTTT11.RESLIB') ‑
VOL(PROD)

PROTECT

Requests that TSSPROT secure the data sets identified by keywords. PROTECT with no keywords protects all non‑VSAM data sets on all accessible volumes. (The keywords are described in the next section.)

UNPROTECT

Requests that TSSPROT remove its protection (turn off the MVS protection indicator) from data sets identified by the keywords. UNPROTECT with no keywords removes protection from all non‑VSAM data sets on all accessible volumes.

Note: This utility will only (un)protect data sets and volumes that are accessible to the caller. Only the MSCA can use this utility.

To get VSAM protection, the catalog itself must be protected via TSSPROT. MVS does not properly recognize individual data set protection if the associated catalog is not secured.

The following keywords identify the data sets to be processed by TSSPROT to dynamically allocate selected volumes.

DSNPRX

Identifies a data set for processing.

P DSNPRX(datasetname)
datasetname

A list of up to 20 full data set names or data set prefixes. TSSPROT processes the single data set or all data sets that match the prefix. A specific data set is supplied within single quotes.

MSS

Indicates that the (un)protect operation is carried out against a specific mass storage volume. The VOLUME keyword must specify a specific volume and not a volume prefix. The UNIT value should refer to your MSS volume.

P MSS

PASSWORD

Requests the type of processing to be performed for data sets that are password protected through the operating system. When a password‑protected data set is protected, it loses its MVS password protection and gains CA Top Secret protection. Therefore, these data sets should only be secured when about to run in FAIL or IMPLEMENT mode.

P PASSWORD(IGNORE|PROTECT)
PROTECT

CA Top Secret will control password‑protected data sets.

IGNORE

(Default) Data sets will retain their MVS passwords.

SIM

Requests that no changes be made to the selected DSCBs and VSAM catalogs for testing or auditing purposes. When you specify this option, the operation will proceed but no processing is performed. A simulated report is generated.

P SIM

UNIT

Is the unit name used by TSSPROT to limit processing to selected volumes.

P UNIT(name)
name

The unit name. The default is SYSALLDA.

USERCAT

Indicates a target catalog for processing.

P USERCAT(catalogname)
catalogname

The catalog name. The following are valid for processing:

If a USERCATALOG is processed, all valid entries in the USERCATALOG is processed. If a CLUSTER is processed, all VSAMDSETs (system‑generated names) associated with the CLUSTER is processed. Only one VSAM catalog may be processed with each execution of TSSPROT.

Note: To protect a catalog or a user catalog, it must be protected as a data set and the PROTECT statement must include a CAT reference to the catalog or user catalog.

VOLUME

Identifies a volume for processing.

P VOLUME(volser)
vol

A full volume serial or volume prefix. TSSPROT processes the single volume or all volumes that match the prefix. If you omit the VOLUME option, TSSPROT selects all resident volumes for processing.