I know very little of how TSS works, but until there is an active security system present, OMVS will not initiate, because it relies on the security system to provide it with UID's and GID's for all (including the root) OMVS processes. Waiting until after JES2 is active to start TSS probably means that you have an outstanding message BPXP006E WAITING FOR SECURITY PRODUCT INITIALIZATION
Also, I would strongly suggest that you should ensure that NO jobs or STC's that run without APF authorization are allowed to start before you start the security product. Wayne Driscoll Product Developer JME Software LLC NOTE: All opinions are strictly my own. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Rick Fochtman Sent: Wednesday, April 11, 2007 6:37 PM To: [EMAIL PROTECTED] Subject: Re: When to start security product? -----------------------<snip>---------------------- We use Top Secret. A consultant made a recommendation late last year that Top Secret should be the first task started during the IPL procedure. The Security Administrator has requested this change. Currently, we start Top Secret after JES2 completes its start procedure. I really don't see the merit in moving the start of Top Secret earlier in the IPL procedure. Can anyone explain why starting Top Secret/security product is more advantageous? -----------------------<unsnip>----------------------- IMHO, as long as it's up and initialized before any users can get access, the detailed timing doesn't matter. Before or after JES2 shouldn't matter a whit. Consider this: if there's a JCL error in the proc, starting it AFTER JES2 will allow you to capture the error without too much trouble. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
