Implementing security with CA-TOP SECRET

If you have enabled security on the hub and specified CA-TOP SECRET as the security system, you must take additional steps to implement it.

About this task

Follow these steps to implement CA-TOP SECRET security.

If your Tivoli Enterprise Monitoring Server is running, stop it by entering:
```
P cccccccc
```
where cccccccc is the name of the monitoring server started task.
Define the monitoring server as a started task in the STC record and relate it to a master facility accessor identifier. For example:
```
TSS ADD(STC) PROC(cccccccc) ACID(master_facility_acid)
```
where cccccccc is the name of your monitoring server started task. The value for master_facility_acid can be the same as cccccccc.
Define the name of your Tivoli Enterprise Monitoring Server started task as a FACILITY in the CA-TOP SECRET Facility Matrix Table. Set the SIGN parameter as SIGN(M) and set MODE to MODE=FAIL. Make sure the name of your Tivoli Enterprise Monitoring Server started task and the FACILITY name match.
Example: This example shows FACILITY statements for a site that uses CA-TOP SECRET. Some statements might not be relevant to your site or might require modification to fit the standards and configuration of your site.
```
FACILITY(USER3=NAME=task)                                        
FACILITY(task=MODE=FAIL,ACTIVE,SHRPRF)                           
FACILITY(task=PGM=KLV,NOASUBM,NOABEND,NOXDEF)                    
FACILITY(task=ID=3,MULTIUSER,RES,WARNPW,SIGN(M))     
FACILITY(task=NOINSTDATA,NORNDPW,AUTHINIT,NOPROMPT,NOAUDIT,NOMRO)
FACILITY(task=NOTSOC,LOG(INIT,SMF,MSG,SEC9))                     
```
Restart your Tivoli Enterprise Monitoring Server by entering:
```
S cccccccc
```
where cccccccc is the name of your Tivoli Enterprise Monitoring Server started task.