The prerequisites for the Entire Net-Work SAF Security Interface (NETSAF) are as follows:
z/OS, running the SAF security system
the current version of Entire Net-Work for Mainframes
In order for NETSAF to function correctly, the Entire Net-Work started task must run from APF authorized libraries. In addition, it must run under a user ID defined with sufficient authority to invoke the RACROUTE functions TYPE=AUTH and TYPE=VERIFY and to make third-party checks on behalf of other users.