Re: ALLOWUSERKEYCSA and Z/OS 2.4

[Elardus Engelbrecht]

Holger Noach (UHN) wrote:

>We are to migrate to Z/OS 2.4 in future, and I can see that we are hit by the 
>restriction not to be able to modify USERCSA
I have set up a SLIP and GTF trace as indicated in link :

Ah, yes, the good old friend, OA53355, resurfaced again.   ;-)

Just apply above APAR and look below for the 2 Health Checks.


>https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.e0zm100/BCP_vsm-rsm_userkeyCA_v2r3.htm

>But I am interested in a program to extract from SMF type 30 , which could 
>catch users/programs accessing this storage

>The flags are :
>SMF30_UserKeyCsaUsage
>SMF30_UserKeyCadsUsage
>SMF30_UserKeyChangKeyUsage
>SMF30_UserKeyRuCsaUsage

I have written a small Assembler program which extract above info plus other 
info.


>I canesee that it is previously suggested to use SAS/MXG to do this

It was indeed mentioned several times in IBM-MAIN. You can perhaps use 
Omegamon. Others also have written similar programs, like Tom Russell who wrote 
a REXX program just for that.

Just remember to activate these Health Checks: 

VSM_ALLOWUSERKEYCSA
ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM


>So do s anymore have some code extracting SMF type 30 for this purpose which 
>could be shared 

E-mail me offlist if you want the source code.

Groete / Greetings
Elardus Engelbrecht

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

ALLOWUSERKEYCSA and Z/OS 2.4

[Holger Noach (UHN)]

Hi List

We are to migrate to Z/OS 2.4 in future, and I can see that we are hit by the 
restriction not to be able to modify USERCSA
I have set up a SLIP and GTF trace as indicated in link :

https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.e0zm100/BCP_vsm-rsm_userkeyCA_v2r3.htm

But I am interested in a program to extract from SMF type 30 , which could 
catch users/programs accessing this storage

The flags are :
SMF30_UserKeyCsaUsage
SMF30_UserKeyCadsUsage
SMF30_UserKeyChangKeyUsage
SMF30_UserKeyRuCsaUsage


I can see that it is previously suggested to use SAS/MXG to do this

But customer does not have this installed .

So does anymore have some code extracting SMF type 30 for this purpose which 
could be shared 

Regards
Holger


Beskyttelse af dine personlige oplysninger er vigtig for os. Her finder du 
KMD’s Privatlivspolitik, der fortæller, 
hvordan vi behandler oplysninger om dig.

Protection of your personal data is important to us. Here you can read KMD’s 
Privacy Policy outlining how we process your 
personal data.

Vi gør opmærksom på, at denne e-mail kan indeholde fortrolig information. Hvis 
du ved en fejltagelse modtager e-mailen, beder vi dig venligst informere 
afsender om fejlen ved at bruge svarfunktionen. Samtidig beder vi dig slette 
e-mailen i dit system uden at videresende eller kopiere den. Selvom e-mailen og 
ethvert vedhæftet bilag efter vores overbevisning er fri for virus og andre 
fejl, som kan påvirke computeren eller it-systemet, hvori den modtages og 
læses, åbnes den på modtagerens eget ansvar. Vi påtager os ikke noget ansvar 
for tab og skade, som er opstået i forbindelse med at modtage og bruge e-mailen.

Please note that this message may contain confidential information. If you have 
received this message by mistake, please inform the sender of the mistake by 
sending a reply, then delete the message from your system without making, 
distributing or retaining any copies of it. Although we believe that the 
message and any attachments are free from viruses and other errors that might 
affect the computer or it-system where it is received and read, the recipient 
opens the message at his or her own risk. We assume no responsibility for any 
loss or damage arising from the receipt or use of this message.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN