Securing access to the Energizer ISPF interface


The IPRCMDS0 exit is required to process Energizer commands when you use the Energizer ISPF interface.

  1.  On the IPRCMDS0 Virtual Exit panel, change the IPRCMDS0 virtual exit as follows:

    • Make Password a required field
    • Select Enable userid authentication
    • Select Enable IMS Connect authentication
    • Select Enable transaction authentication
    • Specify an IMS Connect resource
    IRM security fields      Offset Status  (offset=0 for default)         
      Userid . . . . . . . . 0____ REQUIRED (Always required)              
      Group  . . . . . . . . 0____ OPTIONAL (REQUIRED or OPTIONAL or NONE)
      Password . . . . . . . 0____ REQUIRED (REQUIRED or OPTIONAL or NONE)
      New password . . . . . 0____ OPTIONAL (OPTIONAL or NONE)             
                                                                          
      Select (type a '/') any of the following.                            
      / Enable userid authentication                                       
      / Enable IMS Connect authentication                                  
      / Enable transaction authentication                                  
                                                                          
      IMS Connect resource . NAME____ (used for IMS Connect authentication)
  2. Ensure that the options for any IMS Connects that need to be secured have a security class name and, optionally, a resource prefix.
  3.  Create resource rules in the appropriate security class for the following resources (where rprefix is the prefix from the IMS Connect options and connres is the IMS Connect resource from the IPRCMDS0 exit):

    Resource

    Controls

    rprefix.connres

    Overall access to the IMS Connect

    rprefix.-DIS

    Access to display commands (ISPF options 2 and 3)

    rprefix.-SET

    Access to set commands (ISPF option 3)

    rprefix.-REL

    Access to reload commands (ISPF options 1 and 3)

    rprefix.-RES

    Access to reset commands (ISPF option 3)

    rprefix.-EXEC

    Access to IMS Connect commands (ISPF option 3)

    When you have completed steps Step 1 through Step 3, ISPF users are prompted for a password which is authenticated within IMS Connect.

    Note

    If Password is an optional field, it still validates against the user ID.

    You can abbreviate Energizer and IMS commands to three characters. To protect all forms of the command, write rules such as rprefix.-EXE*.



 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*