Troubleshooting IBM Engineering Workflow Management ISPF client security

This section provides information to help you troubleshoot problems with the IBM® Engineering Workflow Management ISPF client security setup.

Check the following items to ensure that they are correct:
  1. In Systems Display And Search Facility Display Active users panel (SDSF DA), locate the started task name and the user ID of the OWNER of the Engineering Workflow Management ISPF daemon started task. Are these the expected task and owner names?
  2. The OWNER of the started task needs to have UPDATE access to FACILITY BPX.SERVER. Verify this by issuing the following RACF command:
    RLIST FACILITY BPX.SERVER ALL
    Does OWNER have UPDATE access to FACILITY BPX.SERVER?
  3. The default name of APPL is BLZAPPL. If another name is being used, ensure that the APPL name is defined. Verify this by issuing the following RACF command:
    RLIST APPL BLZAPPL ALL
    Note: If the default APPL name has been changed, replace BLZAPPL in the command with your APPL name.
    Is the APPL name correct?
  4. The APPL must have SSIGNON defined. Verify this by issuing the following RACF command:
    RLIST   PTKTDATA BLZAPPL ALL
    Does APPL have SSIGNON capability?
  5. The passticket requestor must have read access to BLZ.CONNECT.BLZAPPL. The access should be available assuming that the BLZAPPL default name for APPL is used. If a generic profile BLZ.CONNECT.* is set up, the requestor must have read access to the generic profile. Verify this by issuing the following RACF command:
    RLIST   FACILITY BLZ.CONNECT.BLZAPPL ALL
    Does passticket requestor have read access to BLZ.CONNECT.BLZAPPL?
  6. If you are not using the BLZAPPL default name for APPL, the name you defined for APPL must match the _ISPF_DAEMON_APPLID property in the ispfdmn.conf and must match your RACF definitions. Does the APPL name match the _ISPF_DAEMON_APPLID property in the ispfdmn.conf?
  7. Program control must be given for the key libraries SYS1.LINKLIB, CEE.SCEERUN, and CEE.SCEERUN2. Verify this by issuing the following RACF command:
    RLIST  PROGRAM *
    Do these three key libraries have program control?
  8. Have any RACF SETROPTS commands been issued after any updates?