Security definitions required for subsystem initialization

Overview

Before you initialize a subsystem, the following additional definitions are required for your security system (normally RACF):

• Definition of a STARTED profile for the STC/user BETAssid or equivalent in started procedures table (ICHRIN03)
• Definition of a user profile BETAssid with the following access rights:
  • READ access for the STC/user BETAssid to the parmlib that contains the initialization member to be used
  • READ access of the STC/user BETAssid to the load libraries of the corresponding Beta product, including BSA

To grant the above-mentioned access rights to a user, we advise you to create a generic STARTED profile.

Example:

Profile => BETA*.* Class => STARTED UACC => NONE STDATA: USER= BETAINIT GROUP= BETAGRP TRUSTED= NO PRIVILEGED= NO TRACE= NO

This defines user BETAINIT / group BETAGRP with the corresponding READ access rights

Parameter SN=

The parameter SN= enables you to specify the name to be used as identifier when starting the system procedure IEESYSAS. The maximum length of the name is 8 characters. The first character must be alphabetic. If no value is coded, the default BETAssid is used.

Coding the parameter SN= enables the following:

• To use a STARTED profile (for example, BETAINIT.*)
• To keep the number of required RACF definitions to a minimum when running numerous Beta product STCs (subsystems) in parallel

You can use parameter SN= when coding the required entries for Beta product subsystems in the IEFSSNxx member. When coded, this parameter overwrites the identifier BETAssid in the start command with the specified value. SN= can also be used with operator command SETSSI.

SN= in IEFSSNxx

The extension for entries in the IEFSSNxx member looks like this:

SUBSYS SUBNAME(ssid) /* BETA Subsystem ID */ INITRTN(BST01ARI) INITPARM('parmlib(member)[,SN=stcname]')

Example:

SUBSYS SUBNAME(BnnT) /* BETAnn */ INITRTN(BST01ARI) INITPARM('BETA.PARMLIB(BnnSSI00),SN=stcname')

This will generate the following command:

IEESYSAS.stcname,PROG=BST01ARI,PARM='BnnT,BETA.PARMLIB(BnnSSI00)'

SN= with SETSSI:

This extension can also be used when a subsystem is initialized by means of operator command SETSSI:

SETSSI ADD,SUB=ssid[,INITRTN=BST01ARI,INITPARM='BETA.PARMLIB(BnnSSIxx)[,SN=stcname]']

Note on RACF message IEE296I

If RACF does not find a matching STARTED profile, message IEE296I may be generated with corrupt values. IBM provides APAR (OA36604), which ensures that the values in the message are correct. We advise you to apply this APAR:

URL: https://www-304.ibm.com/support/docview.wss?uid=isg1OA36604&crawler=1&wv=1

Example of IEFSSNxx member

This example defines several Beta product systems in the IEFSSNxx member using BEGINPARALLEL, and initializes the subsystems with the corresponding parameter values:

..... BEGINPARALLEL ..... SUBSYS SUBNAME(B07T) /* BETA07 */ INITRTN(BST01ARI) INITPARM('BETA.PARMLIB(B07SSI00)') SUBSYS SUBNAME(B88T) /* BETA88 */ INITRTN(BST01ARI) INITPARM('BETA.PARMLIB(B88SSI00),SN=') SUBSYS SUBNAME(B09T) /* BETA09 */ INITRTN(BST01ARI) INITPARM('BETA.PARMLIB(B09SSI00),SN=B09STC') SUBSYS SUBNAME(B92T) /* BETA92 */ INITRTN(BST01ARI) INITPARM('BETA.PARMLIB(B92SSI00),SN=BETAINIT') SUBSYS SUBNAME(B93T) /* BETA93 */ INITRTN(BST01ARI) INITPARM('BETA.PARMLIB(B93SSI00),SN=BETAINIT') SUBSYS SUBNAME(B97T) /* BETA97 */ INITRTN(BST01ARI) INITPARM('BETA.PARMLIB(B97SSI00),SN=BETAINIT')