Administering Your Security Environment › Modifying Your Security Environment › Using Control Options

Using Control Options

At installation, your CA Top Secret security environment is automatically defined by the control option default values set in the Parameter File.

As part of the installation process, you are asked to view the contents of this file to verify that the default values listed are the values you want. At this point, changes made to control options in the Parameter File are automatically in effect the moment CA Top Secret is activated.

To view the contents of this file, you would simply edit/browse the sample Parameter File distributed with CA Top Secret.

In MVS, issuing a TSS MODIFY(STATUS) command would present you with a list of control options similar to the list on the following page. For a VM example, see the “Monitoring Your Security Environment” chapter.

TSS MODIFY(STATUS)                                                              
TSS9501I SECURITY FILE(014%)  ID=PRIMARY   SHRFILE(NO)        ENQSIZE(03072)    
TSS9502I LAST CHANGED ON 03/21/95 AT 08:15  BACKUP(ACTIVE-15:00)                
TSS9503I AUDIT FILE(006%)  RECOVERY FILE(003%)                                  
TSS9504I TIMER(015)  SYSOUT(A,LOCAL)  CANCEL(NO)  SWAP(NO)                      
TSS9505I AUTH(OVERRIDE,ALLOVER)  MODE(WARN)  DOWN(BB,SB,TB,OW)                  
TSS9505I FACMODE(B W,S W,T W,I F,J W,5 W,A W,6 W,7 W,4 W,3 F,2 F,1 W,APW,HSW,CNW)
TSS9506I LOG(ACC, INIT,SEC9,MSG)   LOGBUF(0032)  CURRBUF(0013)                  
TSS9507I JOBACID(U,7,0)  SUBACID(U,7)                                           
TSS9508I JES(SSID=JES2,TYPE=JES2,LEVEL=SP 4.3.0,VERIFY)                         
TSS9509I JCT(INDEV=0320,ROUTE=0316,NJHDR=0000)                                  
TSS9534I NJEUSR(*NONE*)   JESNODE(A51SJES2)                                     
TSS9510I TEMPDS(NO)  ADSP(NO)  AUTOERASE(YES)  TAPE(OFF)                        
TSS9511I PWEXP(030)  PWHIST(03)  HPBPW(002)  PWVIEW(YES)                        
TSS9512I NEWPW(MIN=4,WARN=03,MINDAYS=01,ID,TS,RS)                               
TSS9513I PTHRESH(003)  VTHRESH(002,NOT)  INACTIVE(030)                          
TSS9514I NPWRTHRESH(2)  MSUSPEND(YES)                                           
TSS9515I EXIT(OFF)  DATE(MM/DD/YY)                                              
TSS9516I CPF(ON)  CPFWAIT(NO)  CPFTARGET(LOCAL)                                 
TSS9533I CPFRCVUND(NO)                                                          
TSS9517I CPFNODE(XE14)      STATUS(ACTIVE,SPOOL,PRE50)                          
TSS9517I CPFNODE(XE38)      STATUS(ACTIVE,SPOOL,PRE50)                          
TSS9517I CPFNODE(XA25)      STATUS(ACTIVE,SPOOL,PRE50)                          
TSS9517I CPFNODE(XA10)      STATUS(ACTIVE,SPOOL,PRE50)                          
TSS9517I CPFNODE(XE05)      STATUS(INACTIVE,SPOOL,RETRY,SEND-ONLY,PRE50)        
TSS9518I PRODUCTS(TSO/E)                                                        
TSS9519I ADABAS(N/A)  DL1B(NO)                                                  
TSS9520I DUFPGM(*NONE*)                                                         
TSS9521I DB2FAC(DSNK=DB2PROD,DSNL=DB2PROD)                                      
TSS9522I TEXTTSS(QA MACHINE MVSXE51)                                            
TSS9525I PCADMIN(SYSADM)                                                        
TSS9526I PCIDLE(00)       PCDSDAYS(*NULL*)                                      
TSS9527I PCMINPWD(1)      PCLGTYPE(1)                                           
TSS9528I PCOPTS(NOCONNECT,SGNOFFMSG)                                            
TSS9529I MFACCESS(DORM)                                                         
TSS1304I ------ CACHE STATISTICS -----                                          
TSS1305I MAXSIZE ( 000002000K ) SIZE ( 000000914K )                             
TSS1306I CALLS ( 000010259 ) SATISFIED ( 000008144 )                            
TSS1307I CLEARED ( 000000000 )                                                  
TSS0300I MODIFY  FUNCTION SUCCESSFUL     

In addition to changing control option values in the Parameter File, you also have the option to temporarily override those values by using any of the following four methods. However, since changes made through these methods are temporary, they will not be reflected in the event CA Top Secret is brought down and restarted.

• PARM File (MVS only)-When the CA Top Secret started task procedure is executed this method can be used to override control option default or Parameter File specifications. The PARM field is limited to 100 characters,
• O/S console with O/S start TSS Command (MVS only)-This method can be used when the CA Top Secret started task procedure is started up, and overrides changes made through the Parameter File or the PARM field.
• O/S console with O/S modify TSS command (MVS only)- This method can be used at any time while CA Top Secret is running and it overrides changes made through any of the previous three options.
• TSS Modify Command (VSE, MVS, and VM)-In addition to displaying the contents of the Parameter File, TSS MODIFY can also be used, at any time, to override the values specified by any of the previous methods. TSS MODIFY is used the the same way as any other TSS command. For example:

  TSS MODIFY(FAC(TSO=MODE=IMPL))
  

  tells CA Top Secret to modify the FACILITY control option (discussed later in this chapter and in the "Administering Facility Security" chapter) so that users on the TSO Facility will be in IMPL MODE (also discussed later in this chapter).