IBM Support

OA68103: ZSECURE AUDIT SUPPORT FOR: Z/OS RACF STIG V9R4, Z/OS ACF2 STIG V9R4, AND Z/OS TSS STIG V9R4.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • zSecure Audit support for: z/OS RACF STIG V9R4, z/OS ACF2 STIG
    V9R4, and z/OS TSS STIG V9R4.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit Compliance Testing    *
    *                 Framework.                                   *
    ****************************************************************
    * PROBLEM DESCRIPTION: Update to support z/OS STIG:            *
    *                                                              *
    *                       o IBM z/OS RACF Version 9, Release: 04 *
    *                       o IBM z/OS ACF2 Version 9, Release: 04 *
    *                       o IBM z/OS TSS  Version 9, Release: 04 *
    *                                                              *
    *                      Update to support the following z/OS    *
    *                      Products STIG:                          *
    *                                                              *
    *                       o z/OS BMC CONTROL-O for ACF2          *
    *                         Version 7, Release: 01               *
    *                       o z/OS BMC CONTROL-O for RACF          *
    *                         Version 7, Release: 01               *
    *                       o z/OS BMC CONTROL-O for TSS           *
    *                         Version 7, Release: 01               *
    *                       o z/OS BMC CONTROL-M/Restart for ACF2  *
    *                         Version 7, Release: 01               *
    *                       o z/OS BMC CONTROL-M/Restart for RACF  *
    *                         Version 7, Release: 01               *
    *                       o z/OS BMC CONTROL-M/Restart for TSS   *
    *                         Version 7, Release: 01               *
    *                       o z/OS IBM Hardware Configuration      *
    *                         Definition (HCD) for ACF2 Version 7, *
    *                         Release: 01                          *
    *                       o z/OS IBM Hardware Configuration      *
    *                         Definition (HCD) for RACF Version 7, *
    *                         Release: 01                          *
    *                       o z/OS IBM Hardware Configuration      *
    *                         Definition (HCD) for TSS  Version 7, *
    *                         Release: 01                          *
    *                       o z/OS BMC Integrated Operations       *
    *                         Architecture (IOA) for ACF2          *
    *                         Version 7, Release: 01               *
    *                       o z/OS BMC Integrated Operations       *
    *                         Architecture (IOA) for RACF          *
    *                         Version 7, Release: 01               *
    *                       o z/OS BMC Integrated Operations       *
    *                         Architecture (IOA) for TSS           *
    *                         Version 7, Release: 01               *
    *                       o z/OS IBM MQ for ACF2 Version 7,      *
    *                         Release: 01                          *
    *                       o z/OS IBM MQ for RACF Version 7,      *
    *                         Release: 01                          *
    *                       o z/OS IBM MQ for TSS  Version 7,      *
    *                         Release: 01                          *
    *                       o z/OS CA Management Information       *
    *                         Control System (MICS) Resource       *
    *                         Management for ACF2 Version 7,       *
    *                         Release: 01                          *
    *                       o z/OS CA Management Information       *
    *                         Control System (MICS) Resource       *
    *                         Management for RACF Version 7,       *
    *                         Release: 01                          *
    *                       o z/OS CA Management Information       *
    *                         Control System (MICS) Resource       *
    *                         Management for TSS  Version 7,       *
    *                         Release: 01                          *
    *                       o z/OS CA Multi-image Manager (MIM)    *
    *                         Resource Sharing for ACF2 Version 7, *
    *                         Release: 01                          *
    *                       o z/OS CA Multi-image Manager (MIM)    *
    *                         Resource Sharing for RACF Version 7, *
    *                         Release: 01                          *
    *                       o z/OS CA Multi-image Manager (MIM)    *
    *                         Resource Sharing for TSS  Version 7, *
    *                         Release: 01                          *
    *                       o z/OS BMC MainView Systems Management *
    *                         for ACF2 Version 7, Release: 01      *
    *                       o z/OS BMC MainView Systems Management *
    *                         for RACF Version 7, Release: 01      *
    *                       o z/OS BMC MainView Systems Management *
    *                         for TSS Version 7, Release: 01       *
    *                       o z/OS Quest NC-Pass for ACF2          *
    *                         Version 7, Release: 01               *
    *                       o z/OS Quest NC-Pass for RACF          *
    *                         Version 7, Release: 01               *
    *                       o z/OS Quest NC-Pass for TSS           *
    *                         Version 7, Release: 01               *
    *                       o z/OS IBM Z NetView for ACF2          *
    *                         Version 7, Release: 01               *
    *                       o z/OS IBM Z NetView for RACF          *
    *                         Version 7, Release: 01               *
    *                       o z/OS IBM Z NetView for TSS           *
    *                         Version 7, Release: 01               *
    *                       o z/OS CA Roscoe Interactive           *
    *                         Environment for ACF2 Version 7,      *
    *                         Release: 01                          *
    *                       o z/OS CA Roscoe Interactive           *
    *                         Environment for RACF Version 7,      *
    *                         Release: 01                          *
    *                       o z/OS CA Roscoe Interactive           *
    *                         Environment for TSS  Version 7,      *
    *                         Release: 01                          *
    *                       o z/OS IBM System Display and Search   *
    *                         Facility (SDSF) for ACF2 Version 7,  *
    *                         Release: 01                          *
    *                       o z/OS IBM System Display and Search   *
    *                         Facility (SDSF) for RACF Version 7,  *
    *                         Release: 01                          *
    *                       o z/OS IBM System Display and Search   *
    *                         Facility (SDSF) for TSS  Version 7,  *
    *                         Release: 01                          *
    *                       o z/OS SRRAUDIT for ACF2 Version 7,    *
    *                         Release: 01                          *
    *                       o z/OS SRRAUDIT for RACF Version 7,    *
    *                         Release: 01                          *
    *                       o z/OS SRRAUDIT for TSS  Version 7,    *
    *                         Release: 01                          *
    *                       o z/OS IBM Tivoli Asset Discovery      *
    *                         (TADz) for ACF2 Version 7,           *
    *                         Release: 01                          *
    *                       o z/OS IBM Tivoli Asset Discovery      *
    *                         (TADz) for RACF Version 7,           *
    *                         Release: 01                          *
    *                       o z/OS IBM Tivoli Asset Discovery      *
    *                         (TADz) for TSS  Version 7,           *
    *                         Release: 01                          *
    *                       o z/OS Vanguard Security Solutions     *
    *                         (VSS) for RACF Version 7,            *
    *                         Release: 01                          *
    *                       o z/OS CA Vtape Virtual Tape System    *
    *                         for ACF2 Version 7, Release: 01      *
    *                       o z/OS CA Vtape Virtual Tape System    *
    *                         for RACF Version 7, Release: 01      *
    *                       o z/OS CA Vtape Virtual Tape System    *
    *                         for TSS  Version 7, Release: 01      *
    *                                                              *
    *                      Update to support the following IBM     *
    *                      zSecure STIG:                           *
    *                                                              *
    *                       o IBM zSecure STIG: Version 1,         *
    *                         Release: 03                          *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided and review the        *
    *                 documentation updates.                       *
    ****************************************************************
    The fix for this APAR provides compliance
    evaluation support for:
    
     o z/OS STIG:
    
      - IBM z/OS RACF Version 9, Release: 04
      - IBM z/OS ACF2 Version 9, Release: 04
      - IBM z/OS TSS  Version 9, Release: 04
    
     o z/OS Products STIG:
    
      - z/OS BMC CONTROL-O for ACF2 Version 7, Release: 01
      - z/OS BMC CONTROL-O for RACF Version 7, Release: 01
      - z/OS BMC CONTROL-O for TSS  Version 7, Release: 01
      - z/OS BMC CONTROL-M/Restart for ACF2 Version 7, Release: 01
      - z/OS BMC CONTROL-M/Restart for RACF Version 7, Release: 01
      - z/OS BMC CONTROL-M/Restart for TSS  Version 7, Release: 01
      - z/OS IBM Hardware Configuration Definition (HCD) for ACF2
        Version 7, Release: 01
      - z/OS IBM Hardware Configuration Definition (HCD) for RACF
        Version 7, Release: 01
      - z/OS IBM Hardware Configuration Definition (HCD) for TSS
        Version 7, Release: 01
      - z/OS BMC Integrated Operations Architecture (IOA) for ACF2
        Version 7, Release: 01
      - z/OS BMC Integrated Operations Architecture (IOA) for RACF
        Version 7, Release: 01
      - z/OS BMC Integrated Operations Architecture (IOA) for TSS
        Version 7, Release: 01
      - z/OS IBM MQ for ACF2 Version 7, Release: 01
      - z/OS IBM MQ for RACF Version 7, Release: 01
      - z/OS IBM MQ for TSS  Version 7, Release: 01
      - z/OS CA Management Information Control System (MICS)
        Resource Management for ACF2 Version 7, Release: 01
      - z/OS CA Management Information Control System (MICS)
        Resource Management for RACF Version 7, Release: 01
      - z/OS CA Management Information Control System (MICS)
        Resource Management for TSS  Version 7, Release: 01
      - z/OS CA Multi-image Manager (MIM) Resource Sharing for ACF2
        Version 7, Release: 01
      - z/OS CA Multi-image Manager (MIM) Resource Sharing for RACF
        Version 7, Release: 01
      - z/OS CA Multi-image Manager (MIM) Resource Sharing for TSS
        Version 7, Release: 01
      - z/OS BMC MainView Systems Management for ACF2 Version 7,
        Release: 01
      - z/OS BMC MainView Systems Management for RACF Version 7,
        Release: 01
      - z/OS BMC MainView Systems Management for TSS  Version 7,
        Release: 01
      - z/OS Quest NC-Pass for ACF2 Version 7, Release: 01
      - z/OS Quest NC-Pass for RACF Version 7, Release: 01
      - z/OS Quest NC-Pass for TSS  Version 7, Release: 01
      - z/OS IBM Z NetView for ACF2 Version 7, Release: 01
      - z/OS IBM Z NetView for RACF Version 7, Release: 01
      - z/OS IBM Z NetView for TSS  Version 7, Release: 01
      - z/OS CA Roscoe Interactive Environment for ACF2 Version 7,
        Release: 01
      - z/OS CA Roscoe Interactive Environment for RACF Version 7,
        Release: 01
      - z/OS CA Roscoe Interactive Environment for TSS  Version 7,
        Release: 01
      - z/OS IBM System Display and Search Facility (SDSF) for ACF2
        Version 7, Release: 01
      - z/OS IBM System Display and Search Facility (SDSF) for RACF
        Version 7, Release: 01
      - z/OS IBM System Display and Search Facility (SDSF) for TSS
        Version 7, Release: 01
      - z/OS SRRAUDIT for ACF2 Version 7, Release: 01
      - z/OS SRRAUDIT for RACF Version 7, Release: 01
      - z/OS SRRAUDIT for TSS  Version 7, Release: 01
      - z/OS IBM Tivoli Asset Discovery (TADz) for ACF2 Version 7,
        Release: 01
      - z/OS IBM Tivoli Asset Discovery (TADz) for RACF Version 7,
        Release: 01
      - z/OS IBM Tivoli Asset Discovery (TADz) for TSS  Version 7,
        Release: 01
      - z/OS Vanguard Security Solutions (VSS) for RACF Version 7,
        Release: 01
      - z/OS CA Vtape Virtual Tape System for ACF2 Version 7,
        Release: 01
      - z/OS CA Vtape Virtual Tape System for RACF Version 7,
        Release: 01
      - z/OS CA Vtape Virtual Tape System for TSS  Version 7,
        Release: 01
    
     o IBM zSecure STIG:
    
      - IBM zSecure STIG: Version 1, Release: 03
    

Problem conclusion

  • zSecure Audit has been updated to support compliance evaluation
    for:
    
     o z/OS STIG:
    
      - IBM z/OS RACF Version 9, Release: 04
      - IBM z/OS ACF2 Version 9, Release: 04
      - IBM z/OS TSS  Version 9, Release: 04
    
     o z/OS Products STIG:
    
      - z/OS BMC CONTROL-O for ACF2 Version 7, Release: 01
      - z/OS BMC CONTROL-O for RACF Version 7, Release: 01
      - z/OS BMC CONTROL-O for TSS  Version 7, Release: 01
      - z/OS BMC CONTROL-M/Restart for ACF2 Version 7, Release: 01
      - z/OS BMC CONTROL-M/Restart for RACF Version 7, Release: 01
      - z/OS BMC CONTROL-M/Restart for TSS Version 7, Release: 01
      - z/OS IBM Hardware Configuration Definition (HCD) for ACF2
        Version 7, Release: 01
      - z/OS IBM Hardware Configuration Definition (HCD) for RACF
        Version 7, Release: 01
      - z/OS IBM Hardware Configuration Definition (HCD) for TSS
       Version 7, Release: 01
      - z/OS BMC Integrated Operations Architecture (IOA) for ACF2
        Version 7, Release: 01
      - z/OS BMC Integrated Operations Architecture (IOA) for RACF
        Version 7, Release: 01
      - z/OS BMC Integrated Operations Architecture (IOA) for TSS
        Version 7, Release: 01
      - z/OS IBM MQ for ACF2 Version 7, Release: 01
      - z/OS IBM MQ for RACF Version 7, Release: 01
      - z/OS IBM MQ for TSS  Version 7, Release: 01
      - z/OS CA Management Information Control System (MICS)
        Resource Management for ACF2 Version 7, Release: 01
      - z/OS CA Management Information Control System (MICS)
        Resource Management for RACF Version 7, Release: 01
      - z/OS CA Management Information Control System (MICS)
        Resource Management for TSS  Version 7, Release: 01
      - z/OS CA Multi-image Manager (MIM) Resource Sharing for ACF2
        Version 7, Release: 01
      - z/OS CA Multi-image Manager (MIM) Resource Sharing for RACF
        Version 7, Release: 01
      - z/OS CA Multi-image Manager (MIM) Resource Sharing for TSS
        Version 7, Release: 01
      - z/OS BMC MainView Systems Management for ACF2 Version 7,
        Release: 01
      - z/OS BMC MainView Systems Management for RACF Version 7,
        Release: 01
      - z/OS BMC MainView Systems Management for TSS  Version 7,
        Release: 01
      - z/OS Quest NC-Pass for ACF2 Version 7, Release: 01
      - z/OS Quest NC-Pass for RACF Version 7, Release: 01
      - z/OS Quest NC-Pass for TSS  Version 7, Release: 01
      - z/OS IBM Z NetView for ACF2 Version 7, Release: 01
      - z/OS IBM Z NetView for RACF Version 7, Release: 01
      - z/OS IBM Z NetView for TSS  Version 7, Release: 01
      - z/OS CA Roscoe Interactive Environment for ACF2 Version 7,
        Release: 01
      - z/OS CA Roscoe Interactive Environment for RACF Version 7,
        Release: 01
      - z/OS CA Roscoe Interactive Environment for TSS  Version 7,
        Release: 01
      - z/OS IBM System Display and Search Facility (SDSF) for ACF2
        Version 7, Release: 01
      - z/OS IBM System Display and Search Facility (SDSF) for RACF
        Version 7, Release: 01
      - z/OS IBM System Display and Search Facility (SDSF) for TSS
        Version 7, Release: 01
      - z/OS SRRAUDIT for ACF2 Version 7, Release: 01
      - z/OS SRRAUDIT for RACF Version 7, Release: 01
      - z/OS SRRAUDIT for TSS  Version 7, Release: 01
      - z/OS IBM Tivoli Asset Discovery (TADz) for ACF2 Version 7,
        Release: 01
      - z/OS IBM Tivoli Asset Discovery (TADz) for RACF Version 7,
        Release: 01
      - z/OS IBM Tivoli Asset Discovery (TADz) for TSS  Version 7,
        Release: 01
      - z/OS Vanguard Security Solutions (VSS) for RACF Version 7,
        Release: 01
      - z/OS CA Vtape Virtual Tape System for ACF2 Version 7,
        Release: 01
      - z/OS CA Vtape Virtual Tape System for RACF Version 7,
        Release: 01
      - z/OS CA Vtape Virtual Tape System for TSS  Version 7,
        Release: 01
    
     o IBM zSecure STIG:
    
      - IBM zSecure STIG: Version 1, Release: 03
    
    Please note the documentation changes as provided by the APAR
    tracking comment data.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA68103

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    310

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2025-06-24

  • Closed date

    2025-07-10

  • Last modified date

    2025-08-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ97566

Modules/Macros

  • C2RH@    C2RH@DEF C2RH@STD C2RHCO40 C2RHCO41 C2RHCO60 C2RHMI40
    C2RHNV40 C2RHOA60 C2RHSF40 C2RHSH20 C2RHSM60 C2RHWM20 C2RHZ020
    C2RHZ200 C2RHZ220 C2RHZ240 CKA$INDX CKAHAD00 CKAHCO00 CKAHCO20
    CKAHCR00 CKAHCR02 CKAHF065 CKAHHD00 CKAHHD02 CKAHHD20 CKAHMC00
    CKAHMC02 CKAHMI00 CKAHMI20 CKAHMV00 CKAHMV20 CKAHMV40 CKAHNC00
    CKAHNC20 CKAHNV00 CKAHNV20 CKAHOA00 CKAHOA02 CKAHOA20 CKAHOA40
    CKAHRS00 CKAHRS20 CKAHRS40 CKAHSF00 CKAHSF02 CKAHSF20 CKAHSF21
    CKAHSR00 CKAHT065 CKAHVA00 CKAHVS00 CKAHVS02 CKAHVS20 CKAHWM40
    CKAHWM52 CKAHZ040 CKAHZ060 CKAHZ080 CKAHZ100 CKAHZ120 CKAHZ140
    CKAHZ160 CKAHZ260 CKAIRULE
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R310 PSY UJ97566

       UP25/07/11 P F507  

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB70","label":"Z TPS"}}]

Document Information

Modified date:
02 August 2025