Using an External Security Manager

The file pool server lets you augment or replace its security manager with your own. A security manager that is not part of the file server code included with z/VM® is called an external security manager (ESM).

Note: ESMs deal only with file pool server activity, not CRR recovery server activity or FIFO server activity.

If an ESM is installed on your system, you can have a file pool server use it by specifying the ESECURITY startup parameter in the server's DMSPARMS file. The type of authority checking routed to the ESM is determined by how certain flags are set in the DMSESM PROFILE, discussed later in this chapter. For a description of the startup parameter, see ESECURITY.

Note: ESMs are not used in dedicated maintenance mode. If the ESECURITY startup parameter is specified for a dedicated maintenance mode command, it is ignored.