Updating SMFPRMxx (optional)

If you want DFSMSrmm security-type SMF records or audit-type SMF records, update the SMFPRMxx member to ensure that the DFSMSrmm SMF records are generated. Define the SMF records you require in the DFSMSrmm parmlib member EDGRMMxx using the OPTION command and the SMFAUD operand for auditing records and the SMFSEC operand for security records. For more information on these commands, see Using the parmlib member EDGRMMxx.

IBM recommends that you use the IBM assigned SMF record type of 42, the audit records subtype of 22, and the security records subtype of 23. To use the IBM record type, you specify OPTION SMFAUD(YES) and SMFSEC(YES). Alternatively, to use SMF record types from the user-written range, select two SMF record types in the user-written range 128 through 255 that your installation is not currently using. For example:

OPTION SMFAUD(128) SMFSEC(129)

Add your record types to the SMFPRMxx parmlib member as described in z/OS MVS System Management Facilities (SMF).