Previous Topic: Step 6: Configure and Generate the CA VM:Secure CP ComponentNext Topic: Step 8: Re–IPL Using the New CP Component


Step 7: Modify the PRODUCT CONFIG File

You need to modify the PRODUCT CONFIG file to identify the rules database minidisk and the product interfaces.

To modify the PRODUCT CONFIG File

  1. Log on to VMSECURE.
  2. Bring CA VM:Secure down by entering:
    end
    
  3. Edit the PRODUCT CONFIG file by entering:
    xedit product config
    
  4. Optionally add these records if they are not already there:
    DELAYHIS seconds
    DELAYLOG seconds
    

    The DELAYHIS record specifies the amount of time for CA VM:Secure to wait before updating the last logon (*LL), last (x)autolog (*LA), and history (*HS) special comments. The DELAYLOG record imposes a minimum wait between a user’s invalid logon attempt and the next attempt.

    Note: For more information about the DELAYHIS record and DELAYLOG record, see the Reference Guide. For more information about the special comments, see the Administration Guide.

  5. Add the ACCESS record:
    ACCESS RULE 1B4 R
    

    This record identifies the rules minidisk with a label of RULE to the service virtual machine, and specifies the access filemode to use when initializing CA VM:Secure.

    Note: This ACCESS record turns the Rules Facility on and off. If you want to disable the Rules Facility during testing, bring down CA VM:Secure and edit the PRODUCT CONFIG file to remove the ACCESS RULE record.

  6. Optionally add PRODUCT records for CA VM:Schedule and CA VM:Tape:
    PRODUCT VMSCHEDULE userid
    PRODUCT VMTAPE userid
    

    Replace userid with the user ID of the CA VM:Schedule and CA VM:Tape service virtual machines, respectively.

    CA VM:Secure supports rules that provide additional security for CA VM:Schedule. These rules control canceling, querying, and scheduling of these requests.

    CA VM:Secure also supports rules that provide additional security for CA VM:Tape. These rules control catalog updates, listings, and tape mounts.

    After the Rules Facility is installed, you must also add the following record to the VMSCHED CONFIG and VMTAPE CONFIG files:

    PRODUCT VMSECURE userid
    

    Replace userid with the user ID of the service virtual machine.

    Note: For more information about using the PRODUCT record, see the Reference Guide. For more information about the CA VM:Schedule and CA VM:Tape interfaces to CA VM:Secure, see the CA Mainframe VM Product Manager Product Interface Guide.

  7. Save the changes and exit the file.
  8. Log off from VMSECURE.