Implementing IOA Security

This section describes the steps required to install the IOA security interface.

The IOA security interface can be installed either as part of the customized installation path, or during the Customization process after installation. Both options use the INCONTROL Installation and Customization Engine (ICE) application. If you are not familiar with the ICE interface, see the INCONTROL for z/OS Installation Guide: Installing.

During run time, the IOASECUR module determines which security product the site is using, and invokes the proper interface module (IOARACF for RACF, IOATSS for TopSecret, or IOAACF2 for ACF2/SAF) to create the security environment or clean up the security environment, and to make all necessary authorization checking. Therefore, one installation supports all three security products.

The IOA administrator must make several changes when TopSecret or ACF2 are the security products used by the site.

• To install the IOA TopSecret interface, make the following changes in the Build IOA TopSecret Interface job that you generate through ICE:
  • Specify correct library names in the lines marked with “MODIFY”.
  • For TopSecret version 14 or later, specify the name of the additional macro library as the value of the SECMACF= parameter in JCL procedure IOASMP.
• To install the IOA ACF2 interface, do the following:
  1. Edit the IOASMP member in the IOA PROCLIB library.
  2. Add the following line, ensuring that the DSN parameters points to the correct library:
     //ACFMOD DD DISP=SHR,DSN=ACF2.LOAD.LIBRARY
  3. Change the library name of the SECMACF parameter to point to the ACF2 macro library.
  4. Save the member.

To install the IOA security interface

1. Enter the main ICE screen.
2. Select Customization.
3. Enter IOA in the Product field.
4. Select Security Customization.
5. Perform all major and minor steps required to install the security product.