For the z Security Compliance Centre, the started task CKCS1154 to collect compliance record (SMF type 1154), when it is installed in a sysplex, does this started task need to run on each LPAR?

Is there a way that I can have CKCS1154 running on one LPAR to collect the compliance records from all LPARs in the sysplex?

------------------------------
SALLY KWOK
------------------------------

Hi Sally,

The documentation says at https://www.ibm.com/docs/en/zscc/1.2.0?topic=task-installation-compliance-evidence
that "You must run the Compliance Evidence task on all systems where the reported services are active."

I read "systems" there as "LPARs".

Furthermore, CKCS1154 does not so much "collect" compliance records--it writes them.

"Several z/OS components write their own SMF 1154 records. Other components rely on the z/OS Compliance Integration Manager to write these records. See the following sections for information about setting up and operating the Compliance Evidence task of the z/OS Compliance Integration Manager component." -- https://www.ibm.com/docs/en/zscc/1.2.0?topic=environment-setup-compliance-evidence-started-task

Regards,

------------------------------
Jeroen Tiggelman
IBM - Software Development Manager IBM Security zSecure Suite
Delft
------------------------------

Original Message:
Sent: Tue October 29, 2024 07:06 AM
From: SALLY KWOK
Subject: zSCC - Compliance Evidence started task in a sysplex

For the z Security Compliance Centre, the started task CKCS1154 to collect compliance record (SMF type 1154), when it is installed in a sysplex, does this started task need to run on each LPAR?

Is there a way that I can have CKCS1154 running on one LPAR to collect the compliance records from all LPARs in the sysplex?

------------------------------
SALLY KWOK
------------------------------