Re: XCFAS and TRUSTED

2023-08-21 Thread Seymour J Metz
m-main...@ldworen.net] Sent: Monday, August 21, 2023 3:39 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: XCFAS and TRUSTED Andrew Rowley wrote on 8/20/2023 4:40 PM: > On 21/08/2023 9:28 am, Lennie Dymoke-Bradshaw wrote: > >> Secondly, when IBM states that a task should be given the attribute >

Re: XCFAS and TRUSTED

2023-08-21 Thread Leonard D Woren
Andrew Rowley wrote on 8/20/2023 4:40 PM: On 21/08/2023 9:28 am, Lennie Dymoke-Bradshaw wrote: Secondly, when IBM states that a task should be given the attribute of Trusted, then I take it to mean that IBM is saying that the task can be trusted that this attribute cannot be the source of an

Re: XCFAS and TRUSTED

2023-08-21 Thread Radoslaw Skorupka
y Subject: Re: XCFAS and TRUSTED On 21/08/2023 9:28 am, Lennie Dymoke-Bradshaw wrote: Secondly, when IBM states that a task should be given the attribute of Trusted, then I take it to mean that IBM is saying that the task can be trusted that this attribute cannot be the source of an exposure for

Re: XCFAS and TRUSTED

2023-08-21 Thread Robert S. Hansel (RSH)
/roberthansel www.rshconsulting.com -Original Message- Date:Mon, 21 Aug 2023 09:40:20 +1000 From:Andrew Rowley Subject: Re: XCFAS and TRUSTED On 21/08/2023 9:28 am, Lennie Dymoke-Bradshaw wrote: > Secondly, when IBM states that a task should be given the attribute of > Trusted,

Re: XCFAS and TRUSTED

2023-08-21 Thread Seymour J Metz
IBM-MAIN@LISTSERV.UA.EDU] on behalf of Andrew Rowley [and...@blackhillsoftware.com] Sent: Sunday, August 20, 2023 7:20 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: XCFAS and TRUSTED On 20/08/2023 8:53 pm, Mike Cairns wrote: > I worked at one site many years ago where the local specialist had ac

Re: XCFAS and TRUSTED

2023-08-21 Thread Allan Staller
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Radoslaw Skorupka Sent: Saturday, August 19, 2023 4:54 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: XCFAS and TRUSTED [CAUTION: This Email is from outside the Organization. Unless you trust the sender, Don’t click links or o

Re: XCFAS and TRUSTED

2023-08-21 Thread Lennie Dymoke-Bradshaw
Subject: Re: XCFAS and TRUSTED On 21/08/2023 9:28 am, Lennie Dymoke-Bradshaw wrote: > Secondly, when IBM states that a task should be given the attribute of > Trusted, then I take it to mean that IBM is saying that the task can be > trusted that this attribute cannot be the source of an

Re: XCFAS and TRUSTED

2023-08-20 Thread Andrew Rowley
On 21/08/2023 9:28 am, Lennie Dymoke-Bradshaw wrote: Secondly, when IBM states that a task should be given the attribute of Trusted, then I take it to mean that IBM is saying that the task can be trusted that this attribute cannot be the source of an exposure for that task. I think when IBM

Re: XCFAS and TRUSTED

2023-08-20 Thread Lennie Dymoke-Bradshaw
: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: XCFAS and TRUSTED On 20/08/2023 8:53 pm, Mike Cairns wrote: > I worked at one site many years ago where the local specialist had actually > tested across multiple IPL's the necessity for each and every one of these > tasks to actually have the TR

Re: XCFAS and TRUSTED

2023-08-20 Thread Andrew Rowley
On 20/08/2023 8:53 pm, Mike Cairns wrote: I worked at one site many years ago where the local specialist had actually tested across multiple IPL's the necessity for each and every one of these tasks to actually have the TRUSTED attribute and the conclusion was that many of these did not actual

Re: XCFAS and TRUSTED

2023-08-20 Thread Mark A. Brooks
"Setting Up A Sysplex" mentions the previously cited suggestion that XCFAS be TRUSTED so ARM will work. It also mentions using TRUSTED so XCF can access ICSF services (for CF structure encryption) and BCPii services (so XCF can automatically detect and isolate failed systems). A search of the bo

Re: XCFAS and TRUSTED

2023-08-20 Thread Peter Relson
> Is the requirement of the TRUSTED status documented anywhere? I searched z/OS 2.5 for XCFAS trusted and this was the first hit: https://www.ibm.com/docs/en/zos/2.5.0?topic=tailoring-assigning-racf-trusted-attribute I'd guess that you cannot fix this without re-IPL. You can do the "assignment"

Re: XCFAS and TRUSTED

2023-08-20 Thread Radoslaw Skorupka
oslaw Skorupka Subject: XCFAS and TRUSTED I'm setting up some sysplex and found some healthcheck is not OK, the reason was XCFAS was not TRUSTED. Questions: 1. Is the requirement of the TRUSTED status documented anywhere? That's good to know before auditor asked. 2. Is there any way to fix i

Re: XCFAS and TRUSTED

2023-08-20 Thread Robert S. Hansel (RSH)
Date:Sat, 19 Aug 2023 23:53:55 +0200 From:Radoslaw Skorupka Subject: XCFAS and TRUSTED I'm setting up some sysplex and found some healthcheck is not OK, the reason was XCFAS was not TRUSTED. Questions: 1. Is the requirement of the TRUSTED status documented anywhere? That'

Re: XCFAS and TRUSTED

2023-08-20 Thread Mike Cairns
Hi Radoslaw, You can find the list that IBM recommends in the MVS Init and Tuning Guide: https://www-40.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R3sa231380/$file/ieae200_v2r3.pdf I worked at one site many years ago where the local specialist had actually tested across multiple IPL'

XCFAS and TRUSTED

2023-08-19 Thread Radoslaw Skorupka
I'm setting up some sysplex and found some healthcheck is not OK, the reason was XCFAS was not TRUSTED. Questions: 1. Is the requirement of the TRUSTED status documented anywhere? That's good to know before auditor asked. 2. Is there any way to fix it without reIPL? 3. Somehow related to 2.  -