Previous Topic: Create the Recovery FileNext Topic: How to Create a Mirror Copy of Your Security File


Enable Automatic Backup for the Security File

You can automatically back up the security file to DASD. In addition to a recovery file, a daily backup of the security file protects you from data loss.

You can manually back up the security file by issuing the command F TSS,BACKUP. However, we recommend that you use automatic backup. An automated process ensures that backup occurs consistently.

Even with automatic backup in effect, you might need to use TSSBCKUP to copy the backup security file to tape. If your site has only one copy of the backup security file, run TSSBCKUP prior to using the TSSRECVR utility. This method prevents loss of data in the case of hardware malfunction and provides a reserve copy of the backup security file on tape.

Follow these steps:

  1. Schedule an automatic backup by performing one of the following actions:
    hhmm

    Backs up the security file at the specified time (if the BACKUP DD statement is in the CA Top Secret STC procedure). We recommend including this command specification in the PARMFILE DD statement of the TSS started task procedure.

    Default: 0100 (1:00 a.m.)

    The product will back up the security file at the specified time.

  2. Issue the following command to confirm that the RECOVER(ON) control option setting is in effect:
    TSS MODI STATUS
    

    Active recovery file status information indicates that the RECOVER option is ON, which activates the recovery file and records security database changes in the recovery file. Absence of the status information indicates that the option is OFF, in which case you can activate the option.

    If the RECOVER control option is omitted at CA Top Secret startup, RECOVER(ON) is in effect if the RECFILE DD statement is in the CA Top Secret started task JCL.

Your automatic backup is configured. You have now implemented a backup and recovery plan to protect your site from data loss. If you experience a security file failure, you can restore the security file.