Command Propagation Facility › About CPF › CPF Architecture › Implicit and Explicit Targeting

Implicit and Explicit Targeting

CPF lets you automatically synchronize Security Files on multiple nodes through the propagation of TSS commands as well as user‑initiated changes— such as suspension and password changes. Security administration propagation can be implicit (by using the CPF control options to set system‑wide propagation rules) or explicit (by using the CPF command keywords to set propagation rules on a command‑by‑command basis).

The designated CPF control option values specified in each Parameter File determine the implicit target nodes to be used when a command is issued from that particular node. For example, if the CPF control options for NODEA identify implicit target nodes of NODEB, NODEC, and NODED, whenever a command is issued from NODEA that command is automatically sent to NODEB, NODEC, and NODED.

By using the CPF command keywords, a security administrator can override the targets designated by the control options. For example, even though the control options for NODEA identify implicit targets of NODEB, NODEC, and NODED, the security administrator can use the TARGET keyword to indicate that a particular command should only be propagated to NODEB. For more details about the TARGET keyword, see CA‑Top Secret Command Keywords Used With CPF, later in this chapter.