Use of a fresh CKFREEZE and UNLOAD each day

For all functions of zSecure™ Audit, and for many functions of zSecure Admin, a CKFREEZE data set is required. For several functions, an UNLOAD is also a good idea. To make fresh copies available, embed job C2RJPREP in your production process.

Do not schedule job CKRJPREP to run concurrently with DFSMShsm (or DFHSM) data set migration. Doing so might result in an incomplete CKFREEZE.

When you have multiple images, you must create a CKFREEZE data set from each system. For a shared security database, create the UNLOAD data set from the system with the highest level of z/OS®. You might have to specify NJE routing, system affinity, or both to ensure that each job runs on the intended system.

You might want to use a CKFREEZE data set as secondary input to a process that handles SMF records. An example of such a process is the generation of QRadar® LEEF data. If your installation writes DB2 audit records to SMF, the SMF records can be enhanced with information from the CKFREEZE data set. To allow resolution of DB2 Object IDs (OBID) to table and database names, ensure that the CKFCOLL program uses option DB2CAT=YES. This option can be explicitly specified as an input parameter to the CKFCOLL program, or it can be defaulted.