Maintaining Special Security Records › SDT Record

SDT Record

The SDT record is a reserved ACID for internal, non‑volatile data. The SDT stores:

CALENDAR records

Controls access to calendars

EIM PROFILE records (EIMPROF)

Specifies information used by EIM to connect to an EIM domain

KERBLINK records

Define and map foreign principal names to CA Top Secret user Ids.

KEYSMSTR records

Specifies encryption keys.

MAP records (MAPREC)

Controls access to the MAP record associated with an OTRAN or PPT resource. MAP records support Screen Level Protection (SLP).

MASK records (MASKREC)

Controls access to a MASK record associated with the FCT.

RLP records (RECORD)

Provides Record Level Protection for the FCT.

SELECT records

Controls access to a SELECT record associated with an FCT PPT, or OTRAN resource.

TIME records (TIMEREC)

Controls access to the TIME record associated with any resource.

These unique user‑defined record IDs are added to the SDT using TSS ADDTO(SDT). When CA Top Secret is initialized, the record elements currently defined are loaded into memory. They are then used as part of the security enforcement based on the appropriate authorizations.