IBM Security Z Security

Hello - i have always installed Command Verifier separately but with z/Secure 3.1, I decided to install Admin, Audit, Alert, and Cmd Verifier at same time. 

My SHOPZ order included all 4 products. After the install, I could not find the C4R modules (Cmd Verifier). I went back to the apply and noticed JC4R310 was not in the sample apply job (but HC4R310 was - Command Verifier Base). I started over and re-did the install and included JC4R310 for the apply but the apply check failed because there is missing DDDEFs, etc for C4R.

What is the best path forward ? Do i find the sample ZALL, and ZDDD jobs for Command Verifier and run those before the APPLY using my existing 3.1 SMPE environment ? Or is Command Verifier meant to be a separate install ?

thanks. Joe

Hello - i have always installed Command Verifier separately but with z/Secure 3.1, I decided to install Admin, Audit, Alert, and Cmd Verifier at same time. 

My SHOPZ order included all 4 products. After the install, I could not find the C4R modules (Cmd Verifier). I went back to the apply and noticed JC4R310 was not in the sample apply job (but HC4R310 was - Command Verifier Base). I started over and re-did the install and included JC4R310 for the apply but the apply check failed because there is missing DDDEFs, etc for C4R.

What is the best path forward ? Do i find the sample ZALL, and ZDDD jobs for Command Verifier and run those before the APPLY using my existing 3.1 SMPE environment ? Or is Command Verifier meant to be a separate install ?

thanks. Joe

Hi Joe,

The CKRZ* install jobs are for the so-called "CARLa-driven components", which are those products that use the CARLa engine. zSecure Command Verifier is not one of them. 

zSecure Command Verifier shares some code to parse RACF commands with the CKGRACF program that is part of zSecure Admin and zSecure Visual. For that reason, the code in HC4Rvrm is included in the CKRZ* jobs, while the rest of the Command Verifier code in JC4Rvrm is not. (HCKRvrm has a REQ for HC4Rvrm.)

Command Verifier also does not follow the naming convention that install jobs have a Z in position 4, but has C4RJ* jobs in SC4RINST.

It is up to you if you want the product in the same SMP/E zones or not. But indeed, because of the overlap some adjustments need to be made if you do install them "together".

Regards,
Jeroen

P.S. "CARLa-driven components" may be a somewhat awkward term, but the original meaning of "zSecure" in Consul parlance was only Admin and Audit, while in IBM parlance it refers to the entire suite.

Hello - i have always installed Command Verifier separately but with z/Secure 3.1, I decided to install Admin, Audit, Alert, and Cmd Verifier at same time. 

My SHOPZ order included all 4 products. After the install, I could not find the C4R modules (Cmd Verifier). I went back to the apply and noticed JC4R310 was not in the sample apply job (but HC4R310 was - Command Verifier Base). I started over and re-did the install and included JC4R310 for the apply but the apply check failed because there is missing DDDEFs, etc for C4R.

What is the best path forward ? Do i find the sample ZALL, and ZDDD jobs for Command Verifier and run those before the APPLY using my existing 3.1 SMPE environment ? Or is Command Verifier meant to be a separate install ?

thanks. Joe