Installing Natural Security on z/OS

#### Search Results

Search

# Installing Natural Security on z/OS

This document describes the steps for installing Natural Security (product code NSC) on z/OS.

- Prerequisites

- Installation Medium

- Installation Procedure

- Installation Verification

#### Related Topic:

For information on the features and functions provided by Natural Security, see the Natural Security documentation.

#### Notation vrs or vr:

When used in this document, the notation `vrs` or `vr` represents the relevant product version (see also Version in the Glossary).

## Prerequisites

See General Prerequisites and System Support in the section Overview of the Installation Process.

### Additional Prerequisites for Natural Security in a Heterogeneous Environment

In addition to the prerequisites referred to above, the following software must be installed to use Natural Security in a heterogeneous environment:

- Entire Net-Work

- Natural Security for z/OS

The following software must be installed as required:

- Natural Security for Linux

- Natural Security for Windows

For further information, see Using Natural Security on Multiple Platforms in the Natural Security documentation.

## Installation Medium

The installation medium contains the following data sets required for product installation:

Data Set Name | Contents
--- | ---
`NSCvrs.LICS` | Load modules for the z/OS license check software containing the LICUTIL license utility The placeholder `vrs` in the library name represents the version of the license check software, which is not necessarily the same as the version of Natural. For detailed information on the license check software and the LICUTIL utility, see Mainframe Product Licensing.
`NSCvrs.SYSL` | Natural Security log file
`NSCvrs.INPL` | Natural objects
`NSCvrs.VINI` | Natural Security `FDIC` initialization file for VSAM system files

Copy the data sets into your environment as described in Copying Data Sets to a z/OS Disk in the section Installing Natural.

#### Sample Jobs

Sample installation jobs are contained in the `NATvrs.JOBS` data set and are prefixed with the product code. The data set is provided on the installation medium supplied for base Natural.

## Installation Procedure

Be sure to read Installation Process and Major Natural Features before you start the installation procedure.

#### Note for the Reinstallation:

- When you repeat a Natural Security installation, only the Natural objects are replaced; the Natural Security data defined for `SYSSEC` and `DBA` is not reset to the values defined after the initial installation. You can use the Natural Security Recover function of the Natural INPL utility to reset the data.

This section describes the actual installation steps.

- Step 1: Prepare, Convert, Assemble and Link the License File

- Step 2: Load the FSEC System File Definition

- Step 3: Load the Log File

- Step 4: Load the Logon and Error Log File

- Step 5: Build the Natural Parameter Module

- Step 6: Load New Natural Objects

### Step 1: Prepare, Convert, Assemble and Link the License File

(Job I007, Steps 9901, 9902, 9904)

You must install a valid Natural Security license file. For detailed information on the license file and product licensing, see Mainframe Product Licensing.

1. Copy the license file from the installation medium to disk or transfer it from the PC as described in Transferring a License File from PC to a z/OS Host Using FTP in Mainframe Product Licensing.

2. Check, convert, assemble, and link the license file:

   Step 9901 | Check the license file `NSCvrs.LICS`. This job executes the CHECK function of the LICUTIL license utility.
   Step 9902 | Convert the license file into an assembler source. This job executes the MAKE function of the LICUTIL license utility.
   Step 9904 | Assemble and link the assembler source to generate load module `NSCLIC`. This module is then linked to the nucleus in Job I060 (see below).

   The functions and option settings provided by LICUTIL are described in Using the License Utility: LICUTIL in Mainframe Product Licensing.

| Warning: Natural Security is not enabled unless you install a valid Natural Security license file. Trying to activate Natural Security without a valid license file results in warnings or errors at session start.

### Step 2: Load the FSEC System File Definition

(Job I050, Step 9900)

Skip this step if you want to use an existing Natural `FSEC` system file.

Skip this step if you want to load the `FSEC` system file into a VSAM file system. In this case, refer to Installing Natural for VSAM. See also Natural for VSAM with Natural Security in the Database Management System Interfaces documentation for restrictions on the use of the `FSEC` system file in a VSAM environment.

- Load the new Natural `FSEC` system file definition:

  1. Set the System Maintenance Aid (SMA) parameter `NSC-FIRST-INSTALL` to `Y` (Yes). This is the default setting.

  2. Specify the database ID and file number of the Adabas file where to load the `FSEC` system file by using the Adabas ADALOD utility.

     In addition, you must specify this database ID and file number in the Natural parameter module as described in Step 5: Build the Natural Parameter Module.

  3. Load the `FSEC` system file definition contained in the `NATvrs.SYSF` data set by using the Adabas ADALOD utility.

     The following ADALOD utility parameter must not be changed:

         ISNREUSE=YES

### Step 3: Load the Log File

(Job I050, Step 9901)

This step only applies if Adabas is installed and if the Natural Security function Logging of maintenance functions (see the Natural Security documentation) is to be used. It creates the log file to be used by the function.

- Load the log file by using the Adabas ADALOD utility. Input for ADALOD is the `NSCvrs.SYSL` data set.

### Step 4: Load the Logon and Error Log File

(Job I050, Step 9902)

This step only applies if Adabas is installed and if the Natural Security function Store Logon and Error Data on Separate System Files (see the Natural Security documentation) is to be used. It creates the logon and error log file to be used by the function.

- Load the logon and error log file by using the Adabas ADALOD utility. Input for ADALOD is the `NATvrs.SYSF` data set.

### Step 5: Build the Natural Parameter Module

(Jobs I060, I080)

1. Specify the following profile parameter in your Natural parameter module:

       FSEC=(database-id,file-number)

   where `database-id` and `file-number` are the database ID and file number of either the new `FSEC` system file loaded in Step 2 or your existing `FSEC` system file.

   The `FSEC` profile parameter is described in the Parameter Reference documentation.

   Repeat Job I080 for all your TP monitors.

2. Assemble and link your Natural parameter module.

### Step 6: Load New Natural Objects

(Job I061, Step 0102 or Step 9905)

> For the migration installation (Step 0102):

>   1. Set the System Maintenance Aid (SMA) parameter `NSC-FIRST-INSTALL` to `N` (No). The default setting is `Y` (Yes).

>   2. Load the Natural objects specific to Natural Security from the `NSCvrs.INPL` data set into the appropriate Natural libraries in your `FNAT` system file by using the Natural INPL utility.

>      Once this step has been performed, it is not possible to remove Natural Security from the Natural system file; to remove Natural Security from the system file, you would have to delete the entire contents of the system file and reinstall all Natural components again.

> For the initial installation (Step 9905):

>   1. Set the System Maintenance Aid (SMA) parameter `NSC-FIRST-INSTALL` to `Y` (Yes).

>   2. Load the Natural objects specific to Natural Security from the `NSCvrs.INPL` data set into the appropriate Natural libraries in your `FNAT` system file by using the Natural INPL utility.

>      When you load the contents of the `NSCvrs.INPL` data set for the first time, this step creates the following security profiles and relationships:

>      - A library security profile with the library ID `SYSSEC`. The library is people-protected (People-protected set to `Y` and Terminal-protected set to `N`).

>      - A user security profile with the user ID `DBA`, the user type Administrator, and the password set to `DBA`.

>        The user `DBA` is linked to the library `SYSSEC` (ordinary link, no special link).

## Installation Verification

Natural Security is operational after Step 6: Load New Natural Objects of the Installation Procedure has been completed successfully.

For the initial installation, proceed as described in the section First Steps After the Installation in the Natural Security documentation. If you upgrade from a previous Natural Security version, you can skip the steps described in this section.

### On this page

- Prerequisites
- Installation Medium
- Installation Procedure
- Installation Verification