Enabling basic SOM support

Edit online

Basic SOM support is available for RACF, CA ACF2, and CA Top Secret.

Procedure

You can configure basic SOM support by using the MODIFY PARM command to set the following parameters that are located in the AVZSIN00 configuration member: 
if DoThis then
  do
    “MODIFY PARM NAME(SECURITYOPTIMIZATION) VALUE(YES)”
    “MODIFY PARM NAME(SECOPTRETAIN) VALUE(28800)”
    “MODIFY PARM NAME(SECOPTTARGET) VALUE(5000)”
    “MODIFY PARM NAME(SECOPTTHRESHINT) VALUE(1200)”
    “MODIFY PARM NAME(SECOPTTHRESHOLD) VALUE(10)”
    “MODIFY PARM NAME(TRACESECOPTINT) VALUE(NO)”
    “MODIFY PARM NAME(TRACESECOPTOPS) VALUE(NO)”
    “MODIFY PARM NAME(TRACESECOPTSUM) VALUE(NO)”
The following table lists the parameters for configuring basic SOM support:
Parameter Description Valid values
SECURITYOPTIMIZATION Controls whether to cache the security environments for successful remote user logons.
YES
(default) Caches the security environments.
NO
SECOPTRETAIN Specifies the amount of time, in seconds, that a cached security environment remains valid. 28800 (default value)

Minimum Value: 0

Maximum Value: 86400 (24 hours)
SECOPTTARGET Specifies the target number of security environments to keep in the user security cache.
Note: This target number increases if there are not enough available cache entries to maintain an entry for all currently logged-on users.
 5000 (default value)

Minimum Value: 500

Maximum Value: 100000
SECOPTTHRESHINT Amount of time, in seconds, that the security cache is scanned to find entries to delete.

Valid values are integers that divide evenly into 3600 (one hour). For example, 60 is a valid value, but 33 is not because it does not divide evenly into 3600.

 1200 (default value)

Minimum Value: 60

Maximum Value: 43200 (12 hours)
SECOPTTHRESHOLD

Specifies the percentage of cache entries that are available after threshold interval process runs.

 10 (default value)

Minimum Value: 5 (percent)

Maximum Value: 50 (percent)
TRACESECOPTINT Controls tracing of intervals.
YES
NO
(default) Do not trace intervals.
TRACESECOPTOPS Controls tracing of operations.
YES
NO
(default) Do not trace operations.
TRACESECOPTSUM Controls tracing of summary and statistical information.
YES
NO
(default) Do not trace summary and statistical information.