IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  CKFREEZE

    Posted Wed March 25, 2020 03:58 AM
    ​Hi everyone at home,
    I Need a short description about CKFREEZE for what is it used?
    Thanks

    ------------------------------
    [Rachid B.] [Kebbi]
    [Security Administrator]
    [C&A]
    [Düsseldorf/Germany]
    ------------------------------


  • 2.  RE: CKFREEZE

    Posted Wed March 25, 2020 04:27 AM
    Hi Rachid,

    On a very high level I would technically describe the CKFREEZE data set as a "system snapshot" (where "system"="LPAR") that contains "I/O configuration" information. Exactly what is in the data set depends on many parameters that can be specified when it is created, and what purposes it is used for depends on which zSecure products you are using and what functions in those products. Among the things it can contain is information on all data sets in the system, and if you are running a zSecure product geared towards RACF, it will contain information about the in-storage RACF configuration on the particular LPAR (information that together with the content of the RACF database influences how RACF processes access requests).

    To fit your answer to your particular situation, you might want to start reading a part of the Installation Guide:
    - section DASD storage capacity planning: https://www.ibm.com/support/knowledgecenter/en/SS2RWS_2.4.0/com.ibm.zsecure.doc_2.4.0/installation/dasd_storage_cap_planning.html
    - subsection Different types of CKFREEZE data sets https://www.ibm.com/support/knowledgecenter/en/SS2RWS_2.4.0/com.ibm.zsecure.doc_2.4.0/installation/diff_types_ckfreeze_datasets.html

    The former might directly provide you the short description you want.

    Regards,
    Jeroen

    ------------------------------
    Jeroen Tiggelman
    Software Development and Level 3 Support Manager IBM Security zSecure Suite
    IBM
    Delft
    ------------------------------

    Original Message


  • 3.  RE: CKFREEZE

    Posted Wed March 25, 2020 06:07 AM
    Edited by Rob van Hoboken Wed March 25, 2020 06:09 AM
    Once you have created a CKFREEZE data set, you should fill it with a batch job using CKFCOLL.  This batch job should run every day (or less frequently when you don't care about accuracy of the reports).  JCL for the batch job can be generated by using the F line command (Fresh-up) in front of the Set in SE.1.

    Once the CKFREEZE data set exists, you can create a "Set of input files" in SE.1 (or in SE.D.1, which makes it available to all users of zSecure in your system).  The user can then select (S) or unselect (U) the data set for reporting.

    If you have a recent version of zSecure installed, you could go to SE.1, enter a B in front of the Set, enter an L in front of the CKFREEZE dsname, and press Enter.  This produces a list of the record types in your CKFREEZE, with a (very) short description of their contents.

    The layout of CKFREEZE records is not documented, the data is used by zSecure to produce NEWLIST observations.  Refer to the zSecure Syntax manual for a description of the fields in NEWLISTs, or go to menu option IN.D (selection 1) to view the zSecure data dictionary.  An H in front of a field name shows the field documentation.

    ------------------------------
    Rob van Hoboken
    ------------------------------


  • 4.  RE: CKFREEZE

    Posted Thu January 26, 2023 07:03 AM
    Used primarily in the use of auditing and full system analysis of shared data (sysplex) environments.

    ------------------------------
    Tom Mertens
    ------------------------------

    Original Message


Related Content