IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  zSecure evaluation standards configure error

    Posted 06/28/21 08:26 AM

    When I tried configure my CKACUST members, define assert compliance rules using AU.R.C (Rule-basedcompliance evaluation) for STIG and zSecure Extra, I received messages CKR0925 and CKR0330 as follows:

    CKR0925 16 Member C2RISYMV DDname CKR2CRL DSname CKR.CKACUST

    Member not found.

    CKR0330 12 Open failed for imbedded member C2RISYMV of file CKR2CRL data set CKR.CKACUST at CKR2CRL(CKAGMV00) line 30

    CKR0925 16 Member C2RISYMV DDname CKR2CRL DSname CKR.CKACUST

    Member not found.

    CKR0330 12 Open failed for imbedded member C2RISYMV of file CKR2CRL data set CKR.CKACUST at CKR2CRL(CKAGMV01) line 29

    I run the CKAZCUST job as documented in the Installation and Deployment Guide:

    I specified a CKACUST data set in the CO.1 panel as follows:

    Menu Options Info Commands Setup .

    sssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss .

    zSecure Admin+Audit for RACF - Setup - C Row 1 from 3 .

    Command ===> Scroll ===> CSR .

    .

    Select CARLa library or work with a library (S, U, E, R, I, or D) .

    .

    CARLa library Type Status .

    'CKR.CKACUST' CKACUST site .

    'CKR.CKACUST' CKRCARLA selected .

    DD:CKRCARLA CKRCARLA default .

    ******************************* Bottom of data ******************************** .

    .

    Regards,

    Kayhan Tanriverir


    #Support
    #SupportMigration
    #ZSecurity


  • 2.  RE: zSecure evaluation standards configure error

    Posted 06/28/21 08:38 AM
    Hello Kayhan, C2RISYMV is a member in SCKRCARL, not (S)CKACUST. If you have applied the PTFs for APARs OA60419 and OA60459 then running CKAZCUST is no longer required, see here: https://www.ibm.com/support/pages/node/6352999

    We would need to understand exactly what you are doing and to see the complete sysprint so you may wish to open a case with zSecure support.

    Regards, Mike


    #SupportMigration
    #ZSecurity
    #Support


Related Content