RACF® creates and maintains
the TVTOC for tape volumes that:
- Are defined using the RDEFINE command with the TVTOC operand
- Contain tape data sets protected by using the ADDSD command
- Contain tape data sets protected by specifying PROTECT=YES on
the JCL DD statement
- Contain tape data sets created by a RACF-defined user who has
the ADSP attribute
The TVTOC contains the following information:
- The number of data sets on the volume
- The full 44-character name used when creating the data set (from
the DSN operand of the JCL DD statement)
- The volume serial number of each volume on which the data set
resides (from the VOL operand of the DD statement)
- The file (data set) sequence number (from the LABEL operand of
the JCL DD statement)
- The RACF internal data
set name (from the naming conventions table or an installation exit
routine)
- The data set creation date
- For each data set on the volume, an indicator that is set if the
data set is protected by a discrete profile
You can list the information in the TVTOC of a tape volume profile by
using the RLIST command. For more information, see z/OS Security Server RACF Command Language Reference.
RACF makes entries in the
TVTOC when a user:
- Opens a new data set on a predefined tape volume, or
- Protects a new or existing tape data set using RACF
RACF then uses the information
during access checking.
Note: - The maximum number of entries for data sets that
a TVTOC can contain is 500.
Important: Processing
that creates large numbers of TVTOC entries and large access lists
might result in an attempt to exceed the maximum profile size.
- The maximum number of volumes that any data set on the tape with
an entry in the TVTOC can span is 42.
- The maximum number of volumes that any data set on tape without
a TVTOC can span is limited only by the maximum profile size.
When both TAPEDSN and TAPEVOL are active, RACF can create two different types of TVTOC
profiles:
- An automatic TVTOC tape volume profile
- A nonautomatic TVTOC tape volume profile
- The NOSET option on the DELDSD command can be used to remove a
discrete tape data set profile without deleting the tape volume profile.
For more information, see z/OS Security Server RACF Command Language Reference.
The sections that follow describe these profiles.