UNIX Security Policies

On the UNIX operating system, Policy Tables are implemented in ASCII text Policy Files in standard .INI format. Policy Tables are stored PLC (file extension *.plc) files, which are located in the following directories:

  • Control-M/EM: <Control-M/EM home Directory>/etc/site/resource/ssl/cert

  • Control-M/Server: <Control-M/Server home directory>/data/SSL/cert

  • Agent: <Control-M/Agent home directory>/ctm/data/SSL/cert

  • Control-M/Agent for IBM i (AS/400): <Control-M/Agent home directory>/data/SSL/cert

Stanzas in the Site Policy and Application Policy files define the security module that supports the role defined by the stanza. If an application acts like a network server, security attributes are obtained from the [server] stanza. If an application acts like a network client, security attributes are obtained from the [client] stanza.

After the communication type is established, as listed in the table below, the values (if any) in the relevant application PLC file override the values in the site.plc file.

Application PLC File

Type of Communication

cmsg.plc

Control-M Configuration Server to Control-M Configuration Agent

em.plc

Control-M/EM internal encryption purposes

gtw.plc

Control-M/EM Gateway to Control-M/Server

ca.plc

Control-M/Server Configuration Agent to CCM

co.plc

Control-M/Server to Control-M/EM

ns.plc

Control-M/Server to Control-M/Agent

ag.plc

Control-M/Agent to Control-M/Server

ru.plc

Control-M/Agent and Agentless Host utilities

ruj.plc

Control-M/Agent and Agentless Host utilities