Generating the Test System › Task KVC0I020—Select Optional Features

Task KVC0I020—Select Optional Features

This task selects optional features for your CA Top Secret security system.

CP‑level OS/DOS Volume and Data Set Protection

(Optional) This feature provides OS/DOS data set and volume protection from access by virtual machines, regardless of the guest operating system. This protection is implemented through the interception of virtual machine input and output operations by CA Top Secret’s CP component.

If you select this feature, use the (NO)SIOCHK suboption of the FACILITY control option to activate or deactivate CP‑level OS/DOS data set/volume protection.

Caution should be used when initially implementing this feature. In DORMANT mode with the SIOCHK option specified, CP level OS/DOS data set protection may deny access to a resource (or fail an I/O request) if it is unable to determine the resource being accessed.

CP level OS/DOS data set and volume protection may be installed concurrently with the CMS level database and volume protection feature.

To have CP-level OS/DOS volume and data set protection for z/VM 5.2.0 and above, put Options(19) in the Startup Parameter file.

RACF Compatibility Mode

This feature provides a mode in which the CA Top Secret server can be activated for creation of the CA Top Secret Security File only, while your current security software continues to protect your z/VM system.

To select optional features for your CA Top Secret security system

1. From the Task Selection Menu, select panel KVC0‑I020.
2. Select CP‑level OS/DOS data set/volume protection:
   • To select this feature, enter 1 and press F2
   • If this feature is not to be implemented, enter 2 and press F2

   Panel KVC0‑I021 appears.

3. Select RACF Compatibility Mode requirement:
   • To select this feature, enter 1 and press F2
   • If this feature is not to be implemented, enter 2 and press F2
4. Press F3.