This document describes the steps for installing Natural SAF Security (product code NSF) on z/OS.

• Prerequisites

• Installation Medium

• Installation Procedure

• Installation Verification

Related Topic:

For information on the features and functions provided by Natural SAF Security, see the Natural SAF Security documentation.

Notation vrs or vr:

When used in this document, the notation vrs or vr represents the relevant product version (see also Version in the Glossary).

---

Prerequisites

Supported versions of the following products must be installed before you can install Natural SAF Security:

• Natural Security

• Adabas

• Adabas Limited Libraries

• SAF-compliant security system

See also General Prerequisites and System Support in the section Overview of the Installation Process.

Installation Medium

The installation medium contains the following data sets required for product installation:

Data Set	Contents
NSFvrs.LOAD	Load modules
NSFvrs.INPL	Natural objects

Copy the data sets into your environment as described in Copying Data Sets to a z/OS Disk in the section Installing Natural.

Sample Jobs

Sample installation jobs are contained in the NATvrs.JOBS data set and are prefixed with the product code. The data set is provided on the installation medium supplied for base Natural.

Installation Procedure

Be sure to read Installation Process and Major Natural Features before you start the installation procedure.

• Step 1: Load the Natural Objects

• Step 2: Build the Natural Parameter Module

• Step 3: Relink the Nucleus

• Step 4: Install the SAF Server

Step 1: Load the Natural Objects

(Job I005)

• Load the Natural objects specific to Natural SAF Security from the NSFvrs.INPL data set into the appropriate Natural libraries in your FNAT system file by using the Natural INPL utility.

Step 2: Build the Natural Parameter Module

(Job I060, Step 0010)

Build the Natural parameter module. The parameters and macros mentioned in this section are described in the Parameter Reference documentation.

1. Specify the following with the NTDS macro:

   NTDS NSFSIZE,8

   8 KB is the minimum NSFSIZE value. Depending on your usage of Natural SAF Security, a higher value may be required, which can be calculated as follows:

   4 KB + (e * 17 bytes) + ((p + r) * 8 bytes), rounded up to the next KB

   where:
   e is the number of protected environments,
   p is the number of protected Natural objects,
   r is the number of protected RPC services.

   You can also use the dynamic profile parameter DS to specify NSFSIZE at the start of a Natural session:

   DS=(NSFSIZE,8)

2. If you want to use Natural SAF Security to control the execution of Natural objects, specify the following in the NTRDC macro of the Natural parameter module:

   NTRDC SIZE=2,EXIT=(RDCEX3,2000)

   You can also use the corresponding dynamic profile parameter RDC to specify the parameter at the start of a Natural session:

   RDC=(SIZE=2,EXIT=(RDCEX3,2000))

   Note:
   If this feature is used, you have to either link the Natural SAF Security module NSFNUC to the Natural parameter module or to the nucleus (in the case of an environment-independent nucleus, to the environment-independent part).

3. Assemble and link the Natural parameter module.

Step 3: Relink the Nucleus

(Job I060, I080)

Adapt the link steps for Natural:

1. Add the following INCLUDE statement to the link of the nucleus to include Natural SAF Security modules:

   INCLUDE NSFLIB(NSFNUC)

   If you are using a shared nucleus, include this statement in the link of the shared part.

2. Add the corresponding DD statement:

   //NSFLIB DD DSN=NSFvrs.LOAD,DISP=SHR

3. Relink your nucleus as described in Link the Nucleus in Installing Natural.

Step 4: Install the SAF Server

The SAF server (SAF Security Kernel) is delivered with Adabas Limited Libraries.

• Install and configure the SAF server and its associated Daemon as described in the SAF Security Kernel documentation.

You may have to set the following Natural SAF Security options in the configuration module of the SAF server:

Number of Cached Resource Checks

Natural SAF Security allows you to have resource checks cached. If you want resource checks to be cached, you have to specify the number of successful resource checks to be cached for each resource class using the following parameters of the configuration module:

Parameter	Default Value	Function
NANUSF	0	Number of cached environment checks
NANUTC	0	Number of cached library checks
NANURP	0	Number of cached RPC service checks

Alternate Resource Names

If you want to change the default names for the resource classes, you have to change the following parameters of the configuration module:

Parameter	Default Value	Function
NACLSF	SAGNSF	Resource-class name for environments
NACLTC	SAGNTC	Resource-class name for libraries
NACLPG	SAGNPG	Resource-class name for Natural objects
NACLRP	SAGNRP	Resource-class name for RPC services
NACLAP	SAGNRP	Resource-class name for user-defined resources

Installation Verification

Natural SAF Security is operational after Step 4: Install the SAF Server of the Installation Procedure has been completed successfully.

After the installation, proceed as described in Activating Natural SAF Security in the Natural SAF Security documentation.