IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Using ISPF zSecure Audit Option to Setup Configuration File and VERIFY

    Posted Mon June 09, 2025 09:16 AM
    Edited by Lynn Gilson Tue June 10, 2025 01:28 PM

    Hello TechXchange!

    Duplicate thread - just started using TechXchange and wasn't seeing the 'Post'ings.  Disregard or delete if possible?

    Trying to setup a new AUDIT Configuration file from a 'copy' that has errors in it produced when the VERIFY function is invoked.  Modifying the original does not seem to work as the VERIFY consistently pulls in the old statements.  How to 'edit', 'save', and VERIFY with a modified copy of the 'Act'ive file?  Using the document for zSecure Alert User Reference doesn't mention how to do this.  

    Thanks for your help!



    ------------------------------
    Lynn Gilson
    HCL Technologies
    ------------------------------



  • 2.  RE: Using ISPF zSecure Audit Option to Setup Configuration File and VERIFY

    Posted Tue June 10, 2025 04:37 PM

    I got the 'Verify' to complete RC0.  I tried to 'F' REFRESH the file and use it to startup C2POLICE but the ISPF interface fails me with message text:

    ISF024I USER CZLYGI1  NOT AUTHORIZED TO SDSF, CONNECT FAILED

    This site uses ACF2 and IOF for it's JES SPOOL display.  Was there some configuration that had to be done to get this to work?  I've inherited this implementation and am unsure if all the right steps were performed.  This is a sandbox luckily but would like to get zSecure Alert working with the defaults (Alerts).  

    Thanks for your help!

    Lynn



    ------------------------------
    Lynn Gilson
    ------------------------------



  • 3.  RE: Using ISPF zSecure Audit Option to Setup Configuration File and VERIFY

    Posted Wed June 11, 2025 03:13 AM
    Edited by Rob van Hoboken Wed June 11, 2025 03:13 AM

    The F line command in SE.A.A tries to open an EMCS console using the TSO command CONSOLE.  If the user is not authorized to use CONSOLE, it attempts to use the SDSF API for executing operator commands.  Check the installation manual.

    In your case, with IOF, you must give your user ID a permit on TSOAUTH CONSOLE, and obviously on the OPERCMDS resources for MODIFY C2POLICE,DISPLAY and MODIFY C2POLICE,REFRESH.
    ------------------------------
    Rob van Hoboken
    ------------------------------