Installing Natural Security on z/OS

This document describes the steps for installing Natural Security (product code NSC) on z/OS.

Related Topic:

For information on the features and functions provided by Natural Security, see the Natural Security documentation.

Notation vrs or vr:

When used in this document, the notation vrs or vr represents the relevant product version (see also Version in the Glossary).

Prerequisites

See General Prerequisites and System Support in the section Overview of the Installation Process.

Additional Prerequisites for Natural Security in a Heterogeneous Environment

In addition to the prerequisites referred to above, the following software must be installed to use Natural Security in a heterogeneous environment:

  • Entire Net-Work

  • Natural Security for z/OS

The following software must be installed as required:

  • Natural Security for Linux

  • Natural Security for Windows

For further information, see Using Natural Security on Multiple Platforms in the Natural Security documentation.

Installation Medium

The installation medium contains the following data sets required for product installation:

Data Set Name Contents
NSCvrs.LICS Load modules for the z/OS license check software containing the LICUTIL license utility

The placeholder vrs in the library name represents the version of the license check software, which is not necessarily the same as the version of Natural.

For detailed information on the license check software and the LICUTIL utility, see Mainframe Product Licensing.

NSCvrs.SYSL Natural Security log file
NSCvrs.INPL Natural objects
NSCvrs.VINI Natural Security FDIC initialization file for VSAM system files

Copy the data sets into your environment as described in Copying Data Sets to a z/OS Disk in the section Installing Natural.

Sample Jobs

Sample installation jobs are contained in the NATvrs.JOBS data set and are prefixed with the product code. The data set is provided on the installation medium supplied for base Natural.

Installation Procedure

Be sure to read Installation Process and Major Natural Features before you start the installation procedure.

Note for the Reinstallation:

  • When you repeat a Natural Security installation, only the Natural objects are replaced; the Natural Security data defined for SYSSEC and DBA is not reset to the values defined after the initial installation. You can use the Natural Security Recover function of the Natural INPL utility to reset the data.

This section describes the actual installation steps.

Step 1: Prepare, Convert, Assemble and Link the License File

(Job I007, Steps 9901, 9902, 9904)

You must install a valid Natural Security license file. For detailed information on the license file and product licensing, see Mainframe Product Licensing.

  1. Copy the license file from the installation medium to disk or transfer it from the PC as described in Transferring a License File from PC to a z/OS Host Using FTP in Mainframe Product Licensing.

  2. Check, convert, assemble, and link the license file:

    Step 9901 Check the license file NSCvrs.LICS. This job executes the CHECK function of the LICUTIL license utility.
    Step 9902 Convert the license file into an assembler source. This job executes the MAKE function of the LICUTIL license utility.
    Step 9904 Assemble and link the assembler source to generate load module NSCLIC. This module is then linked to the nucleus in Job I060 (see below).

    The functions and option settings provided by LICUTIL are described in Using the License Utility: LICUTIL in Mainframe Product Licensing.

Warning:
Natural Security is not enabled unless you install a valid Natural Security license file. Trying to activate Natural Security without a valid license file results in warnings or errors at session start.

Step 2: Load the FSEC System File Definition

(Job I050, Step 9900)

Skip this step if you want to use an existing Natural FSEC system file.

Skip this step if you want to load the FSEC system file into a VSAM file system. In this case, refer to Installing Natural for VSAM. See also Natural for VSAM with Natural Security in the Database Management System Interfaces documentation for restrictions on the use of the FSEC system file in a VSAM environment.

  • Load the new Natural FSEC system file definition:

    1. Set the System Maintenance Aid (SMA) parameter NSC-FIRST-INSTALL to Y (Yes). This is the default setting.

    2. Specify the database ID and file number of the Adabas file where to load the FSEC system file by using the Adabas ADALOD utility.

      In addition, you must specify this database ID and file number in the Natural parameter module as described in Step 5: Build the Natural Parameter Module.

    3. Load the FSEC system file definition contained in the NATvrs.SYSF data set by using the Adabas ADALOD utility.

      The following ADALOD utility parameter must not be changed: 

      ISNREUSE=YES

Step 3: Load the Log File

(Job I050, Step 9901)

This step only applies if Adabas is installed and if the Natural Security function Logging of maintenance functions (see the Natural Security documentation) is to be used. It creates the log file to be used by the function.

  • Load the log file by using the Adabas ADALOD utility. Input for ADALOD is the NSCvrs.SYSL data set.

Step 4: Load the Logon and Error Log File

(Job I050, Step 9902)

This step only applies if Adabas is installed and if the Natural Security function Store Logon and Error Data on Separate System Files (see the Natural Security documentation) is to be used. It creates the logon and error log file to be used by the function.

  • Load the logon and error log file by using the Adabas ADALOD utility. Input for ADALOD is the NATvrs.SYSF data set.

Step 5: Build the Natural Parameter Module

(Jobs I060, I080)

  1. Specify the following profile parameter in your Natural parameter module:

    FSEC=(database-id,file-number)

    where database-id and file-number are the database ID and file number of either the new FSEC system file loaded in Step 2 or your existing FSEC system file.

    The FSEC profile parameter is described in the Parameter Reference documentation.

    Repeat Job I080 for all your TP monitors.

  2. Assemble and link your Natural parameter module.

Step 6: Load New Natural Objects

(Job I061, Step 0102 or Step 9905)

For the migration installation (Step 0102):

  1. Set the System Maintenance Aid (SMA) parameter NSC-FIRST-INSTALL to N (No). The default setting is Y (Yes).

  2. Load the Natural objects specific to Natural Security from the NSCvrs.INPL data set into the appropriate Natural libraries in your FNAT system file by using the Natural INPL utility.

    Once this step has been performed, it is not possible to remove Natural Security from the Natural system file; to remove Natural Security from the system file, you would have to delete the entire contents of the system file and reinstall all Natural components again.

For the initial installation (Step 9905):

  1. Set the System Maintenance Aid (SMA) parameter NSC-FIRST-INSTALL to Y (Yes).

  2. Load the Natural objects specific to Natural Security from the NSCvrs.INPL data set into the appropriate Natural libraries in your FNAT system file by using the Natural INPL utility.

    When you load the contents of the NSCvrs.INPL data set for the first time, this step creates the following security profiles and relationships:

    • A library security profile with the library ID SYSSEC. The library is people-protected (People-protected set to Y and Terminal-protected set to N).

    • A user security profile with the user ID DBA, the user type Administrator, and the password set to DBA.

      The user DBA is linked to the library SYSSEC (ordinary link, no special link).

Installation Verification

Natural Security is operational after Step 6: Load New Natural Objects of the Installation Procedure has been completed successfully.

For the initial installation, proceed as described in the section First Steps After the Installation in the Natural Security documentation. If you upgrade from a previous Natural Security version, you can skip the steps described in this section.

On this page