Modifying Your Security Environment › Control Options

Control Options

CA Top Secret control options define the processing environment CA Top Secret operates under. Use control options to:

• Control how CA Top Secret normally operates and how it operates under specific MODEs and circumstances
• Indicate which features, facilities, and products are on the operating system
• Control how CA Top Secret handles individual facilities
• Specify password selection rules and violation thresholds
• Set suspension thresholds for users
• Issue commands that force CA Top Secret to reset after shutdown or reinitialize after installing CA Top Secret maintenance

All control options have default values. The default values of the FACILITY control option vary by facility. In general, these default values are consistent with a FAIL MODE security environment.

CA Top Secret protects security-sensitive control options against unauthorized entry and change. Only the MSCA or an authorized SCA can select and change all control options.

Changes to control options made through console commands (such as START and MODIFY) are temporary and end when CA Top Secret is brought down. To effect a control option change that spans shutdowns, add the entry to the parameter file or the PARM field of the CA Top Secret started task.