>am I correct in assuming that the API provides IBM with >a way to start an address space (via one of the IBM >IRIMs used for initializing the system) by using a CA >module in the ASCRE?
I'd say "no, not correct". IBM code does not do an ASCRE such as this. >So essentially the first CA module kicking everything >else off gets called by IBM code? I'd say "sort of". But only when you are running ACF2 or Top Secret. That interface provides a call to a routine owned by the alternate security product in effect for this IPL. If there's a security product other than owned by IBM or CA, the interface would be for them in that case. It can be important that a security product start before anything "normal" can start. Another "early" opportunity to start an address space is by an exit routine associated with the CNZ_MSIEXIT exit. z/OS does not have any control over what happens in this exit. Peter Relson z/OS Core Technology Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
