Previous Topic: Authorizations for Command ProcessingNext Topic: Security Impact


ESM Configuration Statement

External security manager support is enabled using a configuration file statement that requests rule-based command authorization from an ESM product. This statement requests that an ESM product be used to validate that a requesting user ID meets the specified criteria to issue the command and operands defined by the resource name.

The syntax for the ESM configuration statement is:

ESM  resourceclass resourceprefix
resourceclass

A one- to eight-character name that groups similar resources.

A suggested resource class name for CA products is CAVMCMD.

resourceprefix

A one- to eight-character name used as the first‑level qualifier in the resource name. A RACROUTE resource name is a character string formed by tokens separated by a period delimiter. The first token is the resource prefix.

A suggested resource prefix name for the CA VM:Director application is CADIRECT.