IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Change zSecure Alert Set at C2POLICE startup?

    Posted Mon July 03, 2023 09:18 AM

    I did not find any references to this requirement in the manuals, but have been asked if it is possible to control the zSecure alert set used by C2POLICE by passing a startup parameter?

    Something along the lines of:
    START C2POLICE,PPARM=<required pparm>

    Thanks in advance



    ------------------------------
    Matt Ross
    ------------------------------


  • 2.  RE: Change zSecure Alert Set at C2POLICE startup?

    Posted Mon July 03, 2023 10:58 AM
    Edited by Rob van Hoboken Mon July 03, 2023 11:07 AM

    Hi Matt!

    I had to resort to google, search the keyword PPARM, but it is here:

    In the zSecure Alert JCL, you must update the PPARM parameter to reflect the name of the Alert configuration with which you intend to run. The PPARM parameter must be equal to the zSecure Alert configuration name, with a P appended. You can also use a system symbol in the name of the zSecure Alert configuration to be used. For example, you might change

       // PPARM=C2PDFLP        C2POLICE parameter member <setname>P

    to

       // PPARM=&SYSNAME.P     C2POLICE parameter member <setname>P


    Your START command is an excellent override of the installation default parameter value.  However, to make life of the sysprogs easier and, not to mention, to improve reliability, the value in the proclib member should reflect the production alert set name (with a P appended).  So, if the background of your question has to do with flexibility in the name of the alert config member, you had best use system and JCL symbols with or without conditional assignment in the C2POLICE proclib member, to set the necessary PPARM value.

    ------------------------------
    Rob van Hoboken
    ------------------------------



  • 3.  RE: Change zSecure Alert Set at C2POLICE startup?

    Posted Mon July 03, 2023 11:18 AM
    Edited by Matt Ross Mon July 03, 2023 11:39 AM

    Hi Rob, good to hear from you.

    Edit: I think I replied without seeing the bottom portion of your message

    I did review that portion of the manual and we do actually have the sysname symbol configured in some environments for the PPARM in the config file.  I'm actually trying to determine that in a testing scenario if we can flip between our production and backup alert configurations by passing it to the startup of the C2POLICE task.

    If I have a set called PROD and a set called TEST could I flip between the 2 at C2POLICE startup by passing a startup parameter rather than modifying the started task JCL?

    Like START C2POLICE,PPARM=PRODP or START C2POLICE,PPARM=TESTP

    Thanks



    ------------------------------
    Matt Ross
    ------------------------------



  • 4.  RE: Change zSecure Alert Set at C2POLICE startup?

    Posted Mon July 03, 2023 11:41 AM

    Yes, you can select the configuration member by using the PPARM keyword as you showed.  Note, of course the previous C2POLICE instance has to be stopped first, as C2POLICE does not allow switching configuration members in a running STC.  Also, mistakes in the PPARM value lead to abend 013-18.



    ------------------------------
    Rob van Hoboken
    ------------------------------