Installing Natural SAF Security on z/OS

This document describes the steps for installing Natural SAF Security (product code NSF) on z/OS.

Related Topic:

For information on the features and functions provided by Natural SAF Security, see the Natural SAF Security documentation.

Notation vrs or vr:

When used in this document, the notation vrs or vr represents the relevant product version (see also Version in the Glossary).


Supported versions of the following products must be installed before you can install Natural SAF Security:

  • Natural Security

  • Adabas

  • Adabas Limited Libraries

  • SAF-compliant security system

See also General Prerequisites and System Support in the section Overview of the Installation Process.

Installation Medium

The installation medium contains the following data sets required for product installation:

Data Set Contents
NSFvrs.LOAD Load modules
NSFvrs.INPL Natural objects

Copy the data sets into your environment as described in Copying Data Sets to a z/OS Disk in the section Installing Natural.

Sample Jobs

Sample installation jobs are contained in the NATvrs.JOBS data set and are prefixed with the product code. The data set is provided on the installation medium supplied for base Natural.

Installation Procedure

Be sure to read Installation Process and Major Natural Features before you start the installation procedure.

Step 1: Load the Natural Objects

(Job I005)

  • Load the Natural objects specific to Natural SAF Security from the NSFvrs.INPL data set into the appropriate Natural libraries in your FNAT system file by using the Natural INPL utility.

Step 2: Build the Natural Parameter Module

(Job I060, Step 0010)

Build the Natural parameter module. The parameters and macros mentioned in this section are described in the Parameter Reference documentation.

  1. Specify the following with the NTDS macro:


    8 KB is the minimum NSFSIZE value. Depending on your usage of Natural SAF Security, a higher value may be required, which can be calculated as follows:

    4 KB + (e * 17 bytes) + ((p + r) * 8 bytes), rounded up to the next KB

    e is the number of protected environments,
    p is the number of protected Natural objects,
    r is the number of protected RPC services.

    You can also use the dynamic profile parameter DS to specify NSFSIZE at the start of a Natural session:

  2. If you want to use Natural SAF Security to control the execution of Natural objects, specify the following in the NTRDC macro of the Natural parameter module:


    You can also use the corresponding dynamic profile parameter RDC to specify the parameter at the start of a Natural session:


    If this feature is used, you have to either link the Natural SAF Security module NSFNUC to the Natural parameter module or to the nucleus (in the case of an environment-independent nucleus, to the environment-independent part).

  3. Assemble and link the Natural parameter module.

Step 3: Relink the Nucleus

(Job I060, I080)

Adapt the link steps for Natural:

  1. Add the following INCLUDE statement to the link of the nucleus to include Natural SAF Security modules:


    If you are using a shared nucleus, include this statement in the link of the shared part.

  2. Add the corresponding DD statement:

  3. Relink your nucleus as described in Link the Nucleus in Installing Natural.

Step 4: Install the SAF Server

The SAF server (SAF Security Kernel) is delivered with Adabas Limited Libraries.

  • Install and configure the SAF server and its associated Daemon as described in the SAF Security Kernel documentation.

You may have to set the following Natural SAF Security options in the configuration module of the SAF server:

Number of Cached Resource Checks

Natural SAF Security allows you to have resource checks cached. If you want resource checks to be cached, you have to specify the number of successful resource checks to be cached for each resource class using the following parameters of the configuration module:

Parameter Default Value Function
NANUSF 0 Number of cached environment checks
NANUTC 0 Number of cached library checks
NANURP 0 Number of cached RPC service checks
Alternate Resource Names

If you want to change the default names for the resource classes, you have to change the following parameters of the configuration module:

Parameter Default Value Function
NACLSF SAGNSF Resource-class name for environments
NACLTC SAGNTC Resource-class name for libraries
NACLPG SAGNPG Resource-class name for Natural objects
NACLRP SAGNRP Resource-class name for RPC services
NACLAP SAGNRP Resource-class name for user-defined resources

Installation Verification

Natural SAF Security is operational after Step 4: Install the SAF Server of the Installation Procedure has been completed successfully.

After the installation, proceed as described in Activating Natural SAF Security in the Natural SAF Security documentation.