IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  ZSECURE Access Monitor Collection Timestamp

    Posted Wed October 16, 2019 01:48 PM
      |   view attached
    Reviewing resource accesses in AM, we notice event timestamps are posted in GMT, not local time. The ZSECURE display panel (C2RP3@@D) shows current TOD, but the "First occurrence / Last occurrence" is local time +5 or GMT-   5 hours into the future.


    We've found nothing in any of the manuals or the parmlib or CKRINST which shows how to specify local time for Access Monitor collections. 
     
    Product is ZSECURE 2.3.1 Admin.
      


    ------------------------------
    David Malbuff
    ------------------------------


  • 2.  RE: ZSECURE Access Monitor Collection Timestamp

    Posted Thu October 17, 2019 05:04 AM
    Go look at the discussion on this subject at this link: 
    https://www.ibm.com/developerworks/community/forums/html/topic?id=c7c2ee4c-b59d-464d-b8c7-089fac751e98&ps=25

    ------------------------------
    ANTON NIEMAND
    ------------------------------



  • 3.  RE: ZSECURE Access Monitor Collection Timestamp

    Posted Thu October 17, 2019 08:40 AM
    Did you specify Local Timezone in the output section of the selection panel?

    Guus Bonnes


    ------------------------------
    Guus Bonnes
    ------------------------------



  • 4.  RE: ZSECURE Access Monitor Collection Timestamp

    Posted Thu October 17, 2019 08:41 AM
    On the AM.1 selection panel there is a field in the "Output/run options" area, in the lower right corner that shows
    Timezone (U/L/H)
    Specify the timezone used for the reports. Valid values are:
    U Time of day (UTC) that the event last took place (default).
    L Local time zone of the system where the event occurred.
    H Local time zone of the system where the report is being run (here).
    Can you specify "L" to show the timezone of the target system?

    ------------------------------
    Rob van Hoboken
    ------------------------------



  • 5.  RE: ZSECURE Access Monitor Collection Timestamp

    Posted Thu October 17, 2019 08:59 AM

    Thanks, Rob. Of course I can do that. But that will only affect my individual session.

    I need to be able to set the default time to local for all ZSECURE users. 

    I apologize for not making that clear.

     

    David Malbuff

    Senior Technical Administrator, Mainframe

    FBL Financial Group, Inc.

    Farm Bureau Financial Services

    5400 University Avenue, West Des Moines, IA  50266

    Phone: 515-225-5757 | Mobile: 540-335-7892

     



    Disclaimer:

    This email message and any attachments are intended only for the use of the intended recipient, and may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to this email, and delete or destroy all copies of the original message and attachments thereto. Email sent to or from FBL Financial Group, Inc. and its Affiliates may be retained as required by law, regulation or business practice.

    For security reasons we strongly discourage the submission of sensitive or personal information, such as credit card numbers, social security numbers, or bank account information, through email. Email may not be a secure method of communication. Any email may be copied and held by various computers as it makes its way from our server to yours. Persons not participating in our communications may be able to intercept the communications while being transmitted or stored. If you prefer that we communicate with you via a non-electronic method, please advise us of the same.






  • 6.  RE: ZSECURE Access Monitor Collection Timestamp

    Posted Fri October 18, 2019 04:18 AM
    That is an excellent idea, unfortunately this is a local option (not part of SE.D).  Could you open an RFE?
    As a short term work-around you could write a CLIST or Rexx to set ISPF variable CKREAMTZ to L, and save it into the ISPF profile data set.  Run it for each zSecure user.  Something like:
    SET CKREAMTZ=L
    ISPEXEC VPUT CKREAMTZ PROFILE

    Note: ISPF variable names are not a documented interface, so this may stop working or may have side effects in some future release.  It works with zSecure 2.3.1 and 2.4.0, though.

    ------------------------------
    Rob van Hoboken
    ------------------------------



  • 7.  RE: ZSECURE Access Monitor Collection Timestamp

    Posted Fri October 18, 2019 09:14 AM

    Thanks.   I think I will open a RFE, my ZSECURE users will be confounded by this.

     

    David Malbuff

    Senior Technical Administrator, Mainframe

    FBL Financial Group, Inc.

    Farm Bureau Financial Services

    5400 University Avenue, West Des Moines, IA  50266

    Phone: 515-225-5757 | Mobile: 540-335-7892

     



    Disclaimer:

    This email message and any attachments are intended only for the use of the intended recipient, and may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to this email, and delete or destroy all copies of the original message and attachments thereto. Email sent to or from FBL Financial Group, Inc. and its Affiliates may be retained as required by law, regulation or business practice.

    For security reasons we strongly discourage the submission of sensitive or personal information, such as credit card numbers, social security numbers, or bank account information, through email. Email may not be a secure method of communication. Any email may be copied and held by various computers as it makes its way from our server to yours. Persons not participating in our communications may be able to intercept the communications while being transmitted or stored. If you prefer that we communicate with you via a non-electronic method, please advise us of the same.






  • 8.  RE: ZSECURE Access Monitor Collection Timestamp

    Posted Mon October 21, 2019 06:27 AM
    You could probably add those two CLIST lines to the CKR CLIST/Rexx that is used to start zSecure for all users.  Like so:
    address 'ISPEXEC'
    'VGET CKREAMTZ PROFILE'
    if ckreamtz = '' then do
      ckreamtz = 'L'
      'VPUT CKREAMTZ PROFILE'
    end

    ------------------------------
    Rob van Hoboken
    ------------------------------