> If you have BMC Cross-System Image Manager (XIM) you will need to take > action to run it when you set ALLOWUSERKEYCSA(NO). > > The provided solution seems awkward to me. Don't you think an ISV > authorized tool should be able to handle it's own storage key management > without needing you to give it a helping hand with a PPT entry? > > Most other BMC and vendor products we have run into have dealt with this > without requiring additional z/OS customization.
In full and fair disclosure I had nothing to do with this product before or after I left BMC and I am not intending to disparage this product or anyone associated with it... they're all good people. The origin of many of these USERKEY CSA problems is that a lot of typical ISV products have a STC server address space that "does the business" and one or more user address spaces - a.k.a. TSO address spaces running an ISPF dialog application. The code that runs in EITHER of those address spaces typically runs in the key in which it originally received control from the operating system and UNLESS the vendor went to the trouble of specifying a PPT entry, that key is guaranteed to be the MVS default key - 8. So unless the developers go out of their way to use a different key, either by a PPT entry or explicitly specifying and using a system key, GETMAIN is going to give them key 8 storage. Call it a dumb (and ancient) default choice for authorized programs. Now could the BMC developers have done it differently? Sure!! And obviously they should have, but even today many vendors still reel back in terror from the idea of requiring an MVS customization step to get their code to work correctly. Ask me some time about the customer bollicking I was given for following MVS rules in the first place! Honestly sometimes the poor vendor just can't win. In this case just be glad the product developers are stepping up and addressing the problem in the proper MVS fashion. The fix could have been a lot worse than the disease. CC ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
