The JES3 Exit IATUX30 must allow the Control‑M monitor to issue subsystem requests. JES3 has a special security exit for controlling subsystem requests. The exit controls the following types of subsystem requests:

• Job status subsystem requests

  The Control‑M monitor issues status requests for jobs that were submitted by it, using the job status subsystem request. JES3 Exit IATUX30 can prevent the Control‑M monitor from receiving the status of the job.

• Sysout read/purge subsystem requests

  The Control‑M monitor reads and purges the sysout from the spool using the regular MVS subsystem interface. JES3 Exit IATUX30 can prevent the Control‑M monitor from reading the output of jobs from the spool.

If JES3 Exit IATUX30 is used to check and prevent subsystem requests by unauthorized users, it must be modified to allow the Control‑M monitor to issue subsystem requests for all the jobs. The recommended method is to place a check at the beginning of the exit for the started task name of the Control‑M monitor, and to bypass all the special checks in the exit when the request originates from the monitor.

Note: Verify that Exit IATUX30 is set up correctly in all computers in the complex where the Control‑M monitor may run.

TSO Exit IKJEFF53 is mentioned several times in conjunction with Exit IATUX30. Exit IKJEFF53 does not have control over Control‑M because Control‑M does not make use of the TSO OUTPUT, TSO STATUS or TSO CANCEL commands.