Hi Wendell,

Yes, CDA will look in two locations for the required configuration files.  It 
first looks at the home directory as defined to the user invoking DSS in their 
OMVS segment, then in the system location: /usr/lpp/dfsms/gdk - Exactly where 
you stated.  This is described by CDA publications here: 
https://www.ibm.com/docs/en/zos/3.2.0?topic=files-provider-file

Each user (MVSUserId) must have their credentials added to the gdkkeyf (key 
File)  as they are encrypted at the user level.  No user can share another 
user’s credentials entry (even if the clear values are the same).

I hope this helps.

Ernesto E. Figueroa
DFSMSdss Product Owner


Date:    Tue, 12 May 2026 17:54:44 -0500
From:    Wendell Lovewell <[email protected]>
Subject: ADRDSSU Restore CLOUD without ~/gdk files?

The job below will restore a file backed up logically by ADRDSSU, if it is 
submitted with the requisite files in the submitting user's home directory:

~/gdk/config.json
~/gdk/gdkkeyf.json
~/gdk/providers/AZURE.json

//CDARESTF  JOB CLASS=B,MSGCLASS=L
//********************************************************************
//* RESTORE A DATASET FROM AZURE LOGICAL DUMP OF A SPECIFIC VOLUME
//********************************************************************
//RESTFL   EXEC PGM=ADRDSSU,REGION=0M
//SYSPRINT DD  SYSOUT=L
//SYSIN    DD  *
  RESTORE SPHERE -
       DATASET(INCLUDE(MY.TEST.DATA)) -
       LOG(DEBUG) -
       CLOUD(AZURE) -
       CONTAINER('dssdump') -
       OBJECTPREFIX('TEST/M04.LOGICAL.VOL001') -
       CDAPROVIDERFILE -
       REPLACE
//

However, I don't want to set up those files into everyone's home folder.

Is there a way to use a common/production set of files instead of requiring the 
files in ~/gdk?

I'd prefer to store them under /usr/lpp/dfsms/gdk and let them be shared.

Also, there is a userid in the Credentials section of the gdkkeyf.json file.  
Are there an consequences of other users sharing a file with a different userid 
there?

Thanks for your help.

~ Wendell

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN



----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to