Previous Topic: Command ReferenceNext Topic: Logon Password Prompts


Command Introduction

The table below lists and briefly describes the CA VM:Secure commands. The authorizations chapter in the Administration Guide lists the authorizations users must have in the AUTHORIZ CONFIG file to use these commands for the purposes listed in that table. (Commands followed by an asterisk are part of the Application Programming Interface.)

Command

Function

ABEND

Terminates CA VM:Secure operation abnormally

ACITRACE

Dynamically traces ACI security events

ADDENTRY*

Creates a user ID or directory profile

ADDMDISK*

Adds a minidisk for a user ID

ADMIN

Creates or opens for edit a directory pool definition, a directory profile, or a skeleton file, or opens the VMSECURE GLOBALS file, the VMSECURE MANAGERS file, the VMSECURE POSIX file, or the SFS Managers Configuration Menu

ASSIGN

Assigns a user ID to a different manager

AUDITEXT

Extracts current audit information

CAN

Queries the CA VM:Secure rules database about authorizations

CHANGE

Renames a user ID

CHGMDISK*

Moves or changes a minidisk

CHGVOLNM

Changes all references to the volser of any DASD volume controlled by CA VM:Secure

CLASS

Assigns a CP privilege class

CMD

Routes another command to an Agent product server in a Single System Image environment

CMS

Executes a CMS or CP command on the CA VM:Secure service virtual machine

COMPRESS

Defragments disk storage

CONFIG

Opens the configuration files for editing or updates the SFS configuration

CPFMTXA

Allows authorized users to run the CP DASD FORMAT/ALLOCATE utilities CPFMTXA/ICKDSF

DELENTRY*

Deletes an existing user ID or directory profile

DELETE*

Deletes file spaces for an active user ID

DELMDISK*

Deletes a user ID’s minidisk

DISPLINK

Displays links to a user ID’s minidisks

DUPENTRY

Creates a directory entry for a new user ID, based on the directory entry for an existing user ID

DUPMDISK*

Creates an exact duplicate of an existing minidisk

EDIT

Opens a user directory entry for editing

EDX

Opens a user directory entry for editing, expanding any INCLUDE statement in that directory entry

END

Terminates CA VM:Secure operation normally

ENROLL*

Enrolls a user ID in an SFS file pool

ENTRY

Updates or queries an attribute or statement in a directory entry. Subcommands specify the type of attribute or statement that is affected.

EXPIRE

Expires a user ID’s logon password

EXTRACT

Extracts directory information

GENACI

Places a user ID in a security group

GENHS

Adds history records to a user ID’s directory entry

GENINCL

Adds an INCLUDE statement to a user ID’s directory entry

GETENTRY*

Retrieves a current copy of a user ID’s directory entry or a directory profile

GETPWEXP

Displays user ID password expiration information

GRANT AUTHORITY

Authorizes users to gain access to SFS directories or the files in them

GROUP

Makes a user ID a temporary member of a new security group

HISTORY

Displays a user ID’s history records

IPLDISKX

Converts user IDs whose passwords were expired before the Rules Facility was installed to the Rules Facility method of password expiration

JOURNAL

Displays password violations or resets a password violation count to zero

LISTAUTH

Lists all authorizations in the AUTHORIZ CONFIG file that pertain to an individual user ID or authority

LOCAL (prefix)

Directs that the CA VM:Secure product server on the local node execute the command

LOCK*

Prevents updates to a CMS file, user ID, or directory profile

LOGMSG

Creates messages to send to user IDs at specific events

MACLOAD

Copies a macro from your A‑disk to the CA VM:Secure service virtual machine’s A‑disk

MAINT

Performs line‑mode USER command and MANAGE command functions

MANAGE

Displays screens that let you define new user IDs and modify existing ones

MAP

Maps a volume

MAY

Queries an authorization in the AUTHORIZ CONFIG file

MDSKSCAN

Scans a user ID’s minidisks

MODIFY*

Modifies the SFS allocation limits for a user ID

MOVE2SFS

Copies data from minidisks to SFS

MULTIPLE

Performs user ID management functions on many user IDs at the same time

NEWIPL

Changes an IPL system name or device in all directory entries to a new IPL system name or device

NOLOG

Changes a user ID’s password to NOLOG

OVERRIDE

Alters privilege classes without shutting down CA VM:Secure

PAINT

Changes a CA VM:Secure or CA VM:Director screen

PASSWORD

Sets a password for a user ID

QCPCFG

Displays information about the CP component configuration

QLOCK

Displays all CA VM:Secure locks

QPCB

Lists active CA VM:Secure processes

QRULES

Queries the rules set up for a user ID

QSTART

Displays the time CA VM:Secure was most recently started

QUERY

Provides information about a number of CA VM:Secure functions

REBUILD

Condenses and defragments the CP object directory. Use this command only under the direction of Technical Support

RECLAIM

Reclaims DASD space from MOVERO minidisks

REPENTRY*

Replaces a directory entry or a directory profile

RESET

Resets password violation counts for user IDs and terminal addresses

REVOKE AUTHORITY

Revokes access to SFS directories and the files in them from users

RULEMAP

Displays rules of various kinds

RULES

Changes a user ID’s rules, a group’s override or default rules, or the system override or system default rules

SCAN*

Searches and returns information about records in the VM source directory.

SYSWORD

Queries and sets the system word

TAG*

Adds or manipulates user or installation specific named directory comment records.

TAKEOVER

Recovers from an outage of the member node running the Master product server virtual machine in a Single System Image environment.

TRACE

Traces execution of a CA VM:Secure macro

TRANSFER

Transfers a minidisk from one user ID to another

ULIST

Displays information about user IDs

UNLOCK*

Removes a lock from a CMS file, profile, or user ID

USER

Lets users modify values in their own directory entry