IBM Security Z Security

 View Only

 zSecure Alert Import/Export Function

Nathan Shrive's profile image
Nathan Shrive posted Mon January 06, 2025 01:34 AM

Hi, we're setting up zSecure alert in our environment and trying to make use of the export and import functions mentioned in chapter 4 of zSecure Alert documentation to make the definitions consistent across our 30+ lpars.  The problem I have encountered is our alert configurations have been setup with a different configuration name <lpar>A1 (eg. AABPA1, AABDA1 etc) on each lpar.  Is there a way, after exporting the config, to import it but use a different name to the original export? (eg. export AABPA1, import it over the top of AABDA1)

Assuming that is not possible, would our best option be to update the config names across the lpars to have the same name?

One other query I have is what does the set parm refer to in the import and export commands?

Thanks very much. 

Rob van Hoboken's profile image
Rob van Hoboken

To start with the easier answer, the SET( ) parameter in the EXPORT and IMPORT commands is used to specify the alert set that you wish to transfer.  If you omit the SET( ) parameter, all alert sets are exported, and all alert sets from the transfer file are imported.  If you specify, e.g., EXPORT SET(AABP*), only sets starting with AABP are exported.

The EXPORT and IMPORT commands do not have a rename function.

However, you can use the C line command in SE.A.A to create a copy of a set, for example, to create a new set PRODA in each C2PCUST data set from the prevailing set AABPA1.

Remember, you can also use the same C2PCUST data set for multiple C2POLICE instances, thus reducing the number of update actions needed.

Nathan Shrive's profile image
Nathan Shrive

Thanks Rob.

I tried creating a template config that I could copy to each lpar, then clone to the name I required. For example on an lpar it looked like this:

Name      Description                              Set Des Sel Ver Ref  Act
C2PDFL    zSecure Alert default alert configurati  Req Req Req Req Req
--------------------------------------------------------------------------
AABPA1    zSecure Alert configuration for AABP     Ok  Ok  Ok  Ok  Ok   Y
--------------------------------------------------------------------------
RTMPLT    zSecure Alert configuration template     Ok  Ok  Ok  Req  Req

What I planned to do then was delete the AABPA1 definition and recreate it by copying from the template. However, I found I am unable to delete AABPA1 because its the active definition.

Would you have any suggestions on the best way to use the import/export function so I can update the existing configurations to be consistent?

Rob van Hoboken's profile image
Rob van Hoboken

Hi Nathan,

An alert set is marked as Active when there is an active C2POLICE instance in the LPAR, and this C2POLICE instance is using this set.  That means, at the start of each configuration interval it reads several of the members that the set is comprised of.  So deleting an active set may cause C2POLICE to abend 013-18.

If you wish to delete the active set, you just stop the local C2POLICE.  Then you use D, clone from your template, make any remaining changes, Verify, Refresh, and finally restart C2POLICE.

Alternatively.... import the installation defined alert definitions from the transport file, edit your active set, select the alerts that you just imported and that you need on this LPAR, Verify and Refresh.

You could of course create a whole new set in C2PCUST, Verify and Refresh, and then edit the C2POLICE PROCLIB member so PPARM points to the new set.  Then cycle C2POLICE.