Hi,
If you have BMC Cross-System Image Manager (XIM) you will need to take action
to run it when you set ALLOWUSERKEYCSA(NO).
The provided solution seems awkward to me. Don't you think an ISV authorized
tool should be able to handle it's own storage key management without needing
you to give it a helping hand with a PPT entry?
Most other BMC and vendor products we have run into have dealt with this
without requiring additional z/OS customization.
++PTF(BPY7302) REWORK(06255010).
++VER(BMCS,BOOL)
FMID(BBYXM13)
SUP(BAY7228)
/*
PROBLEM DESCRIPTION(S):
BAY7228 - MODIFY XIM TO SUPPORT CSA STORAGE IN KEYS OTHER THAN KEY 8
COMPONENT: BBYXM13
APARS FIXED: BAY7228
TECHNICAL DESCRIPTION:
DOCUMENTATION:
LAST UPDATED: 24.APR.06 12:50:21 LGN1 */.
++HOLD(BPY7302) SYSTEM DATE(06114)
FMID(BBYXM13) REASON(DOC) CLASS(DOC)
COMMENT(UPDATED DOCUMENTATION FOR THIS PTF:
IBM has closed a MVS security issue resulting from applications
acquiring CSA in Key 8 as this is believed to be a serious security
problem. With this change, all applications acquiring CSA storage
must acquire this storage in other than Key 8. This is implemented
within Cross-System Image Manager (XIM) by initiating XIM in a key
other than Key 8. Initiation of XIM in another key is accomplished
via a Program Properties Table (PPT) entry defining the program to be
executed and the desired key. The entry must be placed in a SCHEDxx
member within SYS1.PARMLIB, where xx will be a unique value. As both
the BMC DB/2 and BMC IMS utilities execute in key 7 it is suggested
that XIM be initiated in Key 7. The actual key in which XIM will
execute is user selectable. The PPT entry defining this to MVS would
be as indicated:
PPT PGMNAME(XIMMAIN) KEY(7)
To cause MVS to implement this change the operator would issue the
MVS command
SET SCH=(xx,L)
The xx value would be the suffix of the SCHED member added to
SYS1.PARMLIB defining the PPT entry for XIM. This will result in MVS
implementing the new PPT entries immediately. The "L" operand (an
optional parameter) will cause the system to display the SYS1.PARMLIB
statements processed as a result of this command. This command is
documented in the MVS System Commands publication within the
description of the SET command.
).
Best Regards,
Sam Knutson, GEICO
System z Performance and Availability
mailto:[EMAIL PROTECTED]
(office) 301.986.3574
"Think big, act bold, start simple, grow fast..."
====================
This email/fax message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution of this
email/fax is prohibited. If you are not the intended recipient, please
destroy all paper and electronic copies of the original message.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
