KERBEROSUSER

The KERBEROSUSER system initialization parameter specifies the user ID that is associated with the Kerberos service principal for the CICS® region. This parameter is optional. For information about Kerberos support in CICS, see How it works: Kerberos.

Specify this parameter if you want the region to support the Kerberos service. If this parameter is not specified, the Kerberos service is disabled in the region.

KERBEROSUSER={kerberos_userid}: You can specify any valid user ID to be associated with the Kerberos service principal for the CICS region.

Recommendation: The user ID associated with the Kerberos service principal for the CICS region must not be a protected user ID. Because the CICS region user ID is protected to prevent revocation, do not use it for the Kerberos service principal.