Access Control Tracking

Beginning with CCA 5.2, CCA host crypto modules can keep track of the access control points that are checked as applications run. Tracking is done on a per domain basis. The tracking information can be used to tailor the domain controls that are enabled for the domain.

To enable tracking and to view the tracking data, click on the ACP Tracking button. This brings up a secondary panel with tracking information displayed in a tree format and buttons at the bottom of the panel to control tracking. A signature key must be loaded in order to obtain and display the tracking data.

Beginning with TKE 9.2 and CCA 7.0, additional information about the tracking data is displayed at the top of the panel. When tracking started and when tracking ended is shown, as well as the number of times tracking was suspended during that interval. If tracking is currently active, the text indicates 'Still tracking...'. If tracking has never been active for the domain or has not been active since the last time the tracking data was cleared, the text indicates 'Tracking data has not been collected for this domain'.

A check mark next to the tracking information indicates that an application running in the domain attempted to run a function that required the access control point to be enabled. A check mark indicates only that execution was attempted and not that the execution request was granted.