You specify installation options in the installation options data set. The CHECKAUTH installation option provides additional security checking, but affects performance.
In ICSF, the Security Server (RACF) always checks non-Supervisor State callers. The CHECKAUTH option allows you to specify whether CSF performs access control checking of Supervisor State and System Key callers. Specify CHECKAUTH(NO) if you do not want CSF to check Supervisor State and System Key callers. Specify CHECKAUTH(YES) if you want CSF to check Supervisor State callers. Checking Supervisor State and System Key callers significantly affects performance.
The SYSPLEXCKDS, SYSPLEXPKDS and SYSPLEXTKDS options specify whether sysplex-wide data consistency for the CKDS, PKDS, and TKDS is desired. For a description of the subkeywords, see Parameters in the installation options data set.
The RNGCACHE option specifies whether ICSF should maintain a cache of random numbers for services that return or use random numbers. Specifying RNGCACHE(NO) turns off this caching which will decrease performance for services that use random numbers.