Defining security for CA-TOP SECRET

This task defines security settings to integrate the monitoring server with an external security system such as CA-TOP SECRET. It ensures proper configuration of security records and facilities so the server can operate securely within your environment.

About this task

Complete the following steps to implement CA-TOP SECRET security.

Procedure

  1. Stop the Tivoli Enterprise Monitoring Server started task.
  2. Define the Tivoli Enterprise Monitoring Server as a started task in the STC record and relate it to a master facility accessor identifier. For example:
    TSS ADD(STC) PROC(taskname) ACID(master_facility_acid)

    where taskname is the name of your Tivoli Enterprise Monitoring Server started task. The value for master_facility_acid might be the same as taskname.

  3. Define the name of your Tivoli Enterprise Monitoring Server started task as a FACILITY in the CA-TOP SECRET Facility Matrix Table. Set the SIGN parameter as SIGN(M) and set MODE to MODE=FAIL. Make sure the name of your Tivoli Enterprise Monitoring Server started task and the FACILITY name match.
    Example
    This example shows FACILITY statements for a site that uses CA-TOP SECRET. Some statements might not be relevant to your site or might need to be modified to fit the standards and configuration of your site.
    
    FACILITY(USER3=NAME=task)               &#SPACE 
    FACILITY(task=MODE=FAIL,ACTIVE,SHRPRF)           &#SPACE 
    FACILITY(task=PGM=KLV,NOASUBM,NOABEND,NOXDEF)    &#SPACE 
    FACILITY(task=ID=3,MULTIUSER,RES,WARNPW,SIGN(M)) &#SPACE 
    FACILITY(task=NOINSTDATA,NORNDPW,AUTHINIT,NOPROMPT,NOAUDIT,NOMRO) 
    FACILITY(task=NOTSOC,LOG(INIT,SMF,MSG,SEC9))     &#SPACE
  4. Start the Tivoli Enterprise Monitoring Server started task.