System Entry Security › Controlling Access to Terminals › Controlling Access to Virtual Machines › VMMACH Authorization for Alternate ACID Logon

VMMACH Authorization for Alternate ACID Logon

By default, when a user logs on to VM, an ACID is created based upon the name of the virtual machine. The ACID which the virtual machine runs under can be overridden at logon by use of the “ACID=“ parameter in the CP LOGON command.

LOGON userid ACID=alternate-acid

In order for the ACID specified to log on to the virtual machine, it must first be permitted use of that virtual machine.

TSS PERMIT(alternate-acid) VMMACH(userid) ACCESS(LOGON)

The password which is verified at logon is that of the alternate ACID. Once the logon is authorized, the virtual machine assumes all of the authority of the alternate ACID.

By using VMMACH, each user of the machine could be set up with a unique ACID and password without having to be defined in the VM directory. All actions and/or violations logged for the user by CA Top Secret reflect the alternate ACID, as well as the userid logged on, thereby maintaining individual accountability.