Re: z/OSMF & TSS
This is good to know, I wonder why TSS tech support did not point me in that direction unfortunately I have no TSS access to any TSS datasets :( thanks Carmen Vitullo - Original Message - From: "Thomas Chicklon" <01fbdb5fcb44-dmarc-requ...@listserv.ua.edu> To: IBM-MAIN@LISTSERV.UA.EDU Sent: Friday, May 22, 2020 9:12:27 AM Subject: Re: z/OSMF & TSS As long as you are relatively current with your TSS maintenance, there are TSS versions in CAKOJCL0 of the IBM samples for zOSMF setup that have had the RACF commands converted to TSS commands. Both what IBM and Broadcom provide are just samples, it still takes a bit of massaging for your environment. Also, if you have zOS 2.4, there is now a Security Configuration Assistant delivered with zOSMF. Still a hurdle to get to the point of being able to use that, but a great tool once you get there! Tom Chicklon -Original Message- From: IBM Mainframe Discussion List On Behalf Of Carmen Vitullo Sent: Friday, May 22, 2020 8:38 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z/OSMF & TSS **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** Mark, unfortunately I have a new laptop for working at home, my doc is at my work PC I cannot get to it. searching CA-Top Secret doc you will find http://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/security/ca-top-secret-for-z-os/16-0/search.html?q=z%2Fosmf HTH's Carmen Vitullo - Original Message - From: "Steely.Mark" To: IBM-MAIN@LISTSERV.UA.EDU Sent: Thursday, May 21, 2020 5:12:48 PM Subject: z/OSMF & TSS Does anyone have z/OSMF active using TSS (Top Secret) ? I have been using the "Convert z/OS 2.3 member IZUSEC from RACF to TSS commands". z/OSMF still has problems activating - I would like to see how other sites have setup the ID's IBM requires. My main concern is IZUADMIN. The documentation says to set this up as a profile but z/OSMF uses that ID as a USER. If you prefer you may contact me offline. Thank You *** Disclaimer *** This communication (including all attachments) is solely for the use of the person to whom it is addressed and is a confidential AAA communication. If you are not the intended recipient, any use, distribution, printing, or copying is prohibited. If you received this email in error, please immediately delete it and notify the sender. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF & TSS
As long as you are relatively current with your TSS maintenance, there are TSS versions in CAKOJCL0 of the IBM samples for zOSMF setup that have had the RACF commands converted to TSS commands. Both what IBM and Broadcom provide are just samples, it still takes a bit of massaging for your environment. Also, if you have zOS 2.4, there is now a Security Configuration Assistant delivered with zOSMF. Still a hurdle to get to the point of being able to use that, but a great tool once you get there! Tom Chicklon -Original Message- From: IBM Mainframe Discussion List On Behalf Of Carmen Vitullo Sent: Friday, May 22, 2020 8:38 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z/OSMF & TSS **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** Mark, unfortunately I have a new laptop for working at home, my doc is at my work PC I cannot get to it. searching CA-Top Secret doc you will find http://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/security/ca-top-secret-for-z-os/16-0/search.html?q=z%2Fosmf HTH's Carmen Vitullo - Original Message - From: "Steely.Mark" To: IBM-MAIN@LISTSERV.UA.EDU Sent: Thursday, May 21, 2020 5:12:48 PM Subject: z/OSMF & TSS Does anyone have z/OSMF active using TSS (Top Secret) ? I have been using the "Convert z/OS 2.3 member IZUSEC from RACF to TSS commands". z/OSMF still has problems activating - I would like to see how other sites have setup the ID's IBM requires. My main concern is IZUADMIN. The documentation says to set this up as a profile but z/OSMF uses that ID as a USER. If you prefer you may contact me offline. Thank You *** Disclaimer *** This communication (including all attachments) is solely for the use of the person to whom it is addressed and is a confidential AAA communication. If you are not the intended recipient, any use, distribution, printing, or copying is prohibited. If you received this email in error, please immediately delete it and notify the sender. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF & TSS
Mark, unfortunately I have a new laptop for working at home, my doc is at my work PC I cannot get to it. searching CA-Top Secret doc you will find http://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/security/ca-top-secret-for-z-os/16-0/search.html?q=z%2Fosmf HTH's Carmen Vitullo - Original Message - From: "Steely.Mark" To: IBM-MAIN@LISTSERV.UA.EDU Sent: Thursday, May 21, 2020 5:12:48 PM Subject: z/OSMF & TSS Does anyone have z/OSMF active using TSS (Top Secret) ? I have been using the "Convert z/OS 2.3 member IZUSEC from RACF to TSS commands". z/OSMF still has problems activating - I would like to see how other sites have setup the ID's IBM requires. My main concern is IZUADMIN. The documentation says to set this up as a profile but z/OSMF uses that ID as a USER. If you prefer you may contact me offline. Thank You *** Disclaimer *** This communication (including all attachments) is solely for the use of the person to whom it is addressed and is a confidential AAA communication. If you are not the intended recipient, any use, distribution, printing, or copying is prohibited. If you received this email in error, please immediately delete it and notify the sender. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: z/OSMF & TSS
I do, CA (BROADCOM) has the RACF to TSS commands on their knowledge base, If I can find what they gave me I can shoot it to you, BTW I still have issues with zosmf and jes2eds with the supplied commands Carmen Vitullo - Original Message - From: "Steely.Mark" To: IBM-MAIN@LISTSERV.UA.EDU Sent: Thursday, May 21, 2020 5:12:48 PM Subject: z/OSMF & TSS Does anyone have z/OSMF active using TSS (Top Secret) ? I have been using the "Convert z/OS 2.3 member IZUSEC from RACF to TSS commands". z/OSMF still has problems activating - I would like to see how other sites have setup the ID's IBM requires. My main concern is IZUADMIN. The documentation says to set this up as a profile but z/OSMF uses that ID as a USER. If you prefer you may contact me offline. Thank You *** Disclaimer *** This communication (including all attachments) is solely for the use of the person to whom it is addressed and is a confidential AAA communication. If you are not the intended recipient, any use, distribution, printing, or copying is prohibited. If you received this email in error, please immediately delete it and notify the sender. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
z/OSMF & TSS
Does anyone have z/OSMF active using TSS (Top Secret) ? I have been using the "Convert z/OS 2.3 member IZUSEC from RACF to TSS commands". z/OSMF still has problems activating - I would like to see how other sites have setup the ID's IBM requires. My main concern is IZUADMIN. The documentation says to set this up as a profile but z/OSMF uses that ID as a USER. If you prefer you may contact me offline. Thank You *** Disclaimer *** This communication (including all attachments) is solely for the use of the person to whom it is addressed and is a confidential AAA communication. If you are not the intended recipient, any use, distribution, printing, or copying is prohibited. If you received this email in error, please immediately delete it and notify the sender. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
