On Wed, 28 Jun 2006 14:53:45 -0400, Jim Mulder <[EMAIL PROTECTED]> wrote:
> > When you see a z/OS 1.8 MVS Initialization and Tuning Reference, >under the DIAGxx parmlib member, it will say: > >VSM ALLOWUSERKEYCSA(YES|NO) > > NO prevents user key CSA from being allocated by failing any >attempt to obtain user key from a CSA subpool (via GETMAIN or >STORAGE OBTAIN) with a B04-5C, B0A-5C, or B78-5C abend. The >default is YES, but IBM recommends that you specify NO to prevent >user key CSA from being obtained. User key CSA creates a security >risk because any unauthorized program can modify it. IBM plans >to change the default to NO in a future release of z/OS. > Now that's what I call "supported"! -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group mailto: [EMAIL PROTECTED] z/OS and OS390 expert at http://searchDataCenter.com/ateExperts/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
