Use the VMXSYSRL record to enable support for CA VM:Secure system rules. By default, the CA VM:Secure SYSTEM Rules Support is disabled. As a result, when CAN command is issued from an invalid user ID, CA VM:Secure is unable to process the request (ACCEPT or REJECT the request) and an RC=28 (user ID does not exist) is sent to CA VM:Tape. After receiving the RC=28, CA VM:Tape treats the case as RC=12; which, means that security checking is set to normal VM:Tape authorization checking.
You can use the VMXSYSRL record to protect tape data that is created on a non-VM:Tape managed system (like z/OS) in a shared TMC environment.
To enable the support for VM:Secure SYSTEM Rule, add the VMXSYSRL record in the VMTAPE CONFIG file. Additionally, add the PRODUCT VMSECURE record in the VMTAPE CONFIG file. The VMXSYSRL record has one option, the valid values for the option are: ON or OFF.
|
Copyright © 2013 CA.
All rights reserved.
|
|