About the z/OS Standard Interface

Extending Security Through the z/OS Security Interface › About the z/OS Standard Interface

About the z/OS Standard Interface

The z/OS Standard Security Interface:

Drives access authorization checking for CA Top Secret
Can perform specialized security checking with CA Top Secret

Although the original SSI macros are supported, CA recommends that all security checks are performed with the z/OS SAF interface. Use the RACROUTE macro to interface with CA Top Secret.

The examples in this section reference only the z/OS SAF interface macros, but equivalent functionality is obtained using the z/OS Standard Security Interface versions. Use the standard IBM security macros to:

Validate access to all standard resources recognized by CA Top Secret
Validate access to an installation‑defined resource (for example, CPUs)
Provide security support for your tape management system

Supported SU32 Forms

The following z/OS Standard Security Interface (SU32) forms are supported.

Important! CA recommends that the RACROUTE macro be used.

The macros and their associated RACROUTE forms are:

For This Macro	Use This RACROUTE Form
FRACHECK	RACROUTE REQUEST=FASTAUTH
RACDEF RAC	ROUTE REQUEST=DEFINE
RACHECK	RACROUTE REQUEST=AUTH
RACINIT	RACROUTE REQUEST=VERIFY
RACXTRT	RACROUTE REQUEST=EXTRACT

The security macro, RACLIST, although used by CICS and IMS for security initiation, is not available for user customization.