Manage and administer security authorizations for CICS mainframes
Overview
Security and control for CICS mainframes
The IBM® zSecure CICS® Toolkit enhances CICS® mainframe transaction processing by enabling CICS applications to use RACF® to set access policies in the database. This API facilitates access authorization management checks, improving application security and performance.
Features
Enhance security with flexible controls
The API enables access checks on over 2,000 resources, allowing you to switch an application's security to IBM RACF, boosting performance through the zSecure application interface. The zSecure CICS Toolkit supports third-party resource checks across various classes.
The zSecure CICS Toolkit eases maintenance and administration tasks for CICS developers. By using RACF, the CICS Toolkit lets applications retrieve access policies directly from the database, separating duties to prevent unauthorized management of application authorities and privileges by support staff.
Easily customize zSecure CICS Toolkit screens and control displayed information for decentralized administrators that use the API. Customize supported RACF commands and enable authorized applications to verify user passwords. Select specific options and fields displayed to local administrators on the screens.
The advanced API in zSecure CICS Toolkit can run specific RACF security functions when your web server application communicates with CICS on the mainframe. These functions involve verifying user credentials with the RACF database and using RACF security functions to manage your web server and applications.
Local administrators can efficiently manage tasks through a user-friendly menu within the CICS application by using the zSecure CICS Toolkit. The menu eliminates the need for application programmers to understand the RACF database, enabling them to create tailored security applications promptly.
V2.2.1 allows storage above the 2 GB boundary to process more data, impacting paging and storage needs. This frees up memory below the bar for other programs. Models z196+ automatically activate 64-bit addressing, with the option to revert to 31-bit. Choose programs in SE.0 (SETUP RUN).
Use cases
Streamline CICS security and admin control
Empower teams to manage mainframe security more efficiently through simplified interfaces, tailored access, and focused functionality. These capabilities reduce reliance on deep RACF expertise, accelerate administration, and improve consistency across decentralized environments.
When development teams need to deliver secure applications quickly, they can create customized authorization solutions without relying on RACF specialists. This helps accelerate delivery timelines while reducing bottlenecks tied to limited security expertise.
In operational workflows that demand efficiency, teams can execute selected RACF functions directly through CICS APIs. This reduces manual effort, embeds security into processes, and ensures consistent execution of key tasks on the mainframe.
For organizations with distributed administrators, interfaces can be tailored to show only relevant information. This helps each team focus on their responsibilities, improves productivity, and reduces errors caused by unnecessary or complex data.
In environments requiring strict governance, administrators can ensure users access only the functions assigned to them. This supports compliance efforts, reduces risk, and allows organizations to maintain clear control over who can perform specific actions.
Resources
Discover expert resources
Stay up to date with the latest IBM zSecure CICS Toolkit information. Access the user guide to understand product capabilities, review technical reports for deeper insights, and explore product documentation that supports deployment, configuration, and ongoing security operations on IBM zSecure CICS Toolkit.
IBM zSecure is a complete family of cybersecurity products for your IBM mainframe