Database templates

Table 1 lists the new and changed RACF® database templates. See z/OS Security Server RACROUTE Macro Reference or z/OS Security Server RACF Macros and Interfaces for more detailed information.

Table 1. Summary of RACF database template changes
Segment name Release Description of change Reason for change
User template
TSO z/OS® V1R13 The description of the four-byte TPERFORM field is updated to indicate that the performance group value is stored as a two-byte value. APAR OA35112
General template
CERTDATA z/OS V2R1 Updated to include updated and new associated key types for the CERTPRVT field in the CERTDATA segment. Enterprise PKCS #11 secure key support
z/OS V2R1 Updated to include the CERTGREQ field that is added to indicate if the certificate has been used for generating a request. RACDCERT GENREQ certificate deletion support
z/OS V1R13 The CERTPRVT field is updated to include additional key types. Hardware keys generated with elliptic curve cryptography (ECC) algorithms
z/OS V1R12
  • The descriptions of the CERTSTRT and CERTEND fields are updated.
  • The CERTPRVT field is updated to include additional key types.
  • Long certificate validity periods. Also, APAR OA30951.
  • Keys generated with elliptic curve cryptography (ECC) algorithms
ICSF z/OS V1R12 The CSFSCPW field is added. Support of ICSF encrypted symmetric keys and CP Assist for Cryptographic Function (CPACF). Also, APAR OA29193.
KERB z/OS V1R13 The CHECKADDRS field is added. Support for Network Authentication Service
Parent topic: Security Server summary of interface changes