SAF interface to an external security product

If RACF® is not present in the system, an installation can use an external (non-RACF) security product to provide system security functions. An external security product supplies module ICHRFR00 (called the security product router) as the entry for security processing from SAF.

The MVS™ router passes control to ICHRFR00 when a control point issues the RACROUTE macro to request a security function that is not completely processed by SAF.

In addition to supplying module ICHRFR00, the external security product must also place the address of ICHRFR00 into field SAFVRACR in the router vector table (mapped by ICHSAFV). The router vector table is built during SAF initialization, but the field SAFVRACR should be filled during the initialization of the external product. The following illustration describes the location of the field SAFVRACR.

ieaa8saf