Information

This site will undergo a brief period of maintenance on Friday, 18 December at 12:30 AM Central/12:00 PM IST. During a 30 minute window, site availability may be intermittent.

Enabling security in the IMS Connect address space


In this task, you will enable security within the IMS Connect address space. You must be using RACF or an equivalent security method.

To enable security in the IMS Connect address space

  1. Edit the IMS Connect options module. From Energizer ISPF user interface primary menu select option 1. Configure Energizer.

    File  Display  Help                                                           
    ------------------------------------------------------------------------------
                       BMC AMI Energizer for IMS Connect - Primary Menu            
                                                                        More:     +
    Select one of the following.  Then press Enter.                                
                                                                                  
    _ 1. Configure Energizer                                                       
            Options library __________________________________                     
            Options module  ________ (Blank or pattern for selection list)         
                                                                                  
       2. Query IMS Connect                                                        
       3. Issue Commands                                                           
       4. Verify IMS Connectivity (test transactions)                              
          Choose an IMS Connect for options 2,3, or 4                              
            IMS Connect . . ________ + (Blank or pattern for selection list)       
            TCP/IP Host . . ________________________________________
            TCP/IP Port . . _____
                                                                                  
       5. Set BMC Software Product Authorization by CPU ID   
            Product Code. . _____

    '+' following an entry field indicates that the PROMPT action is available.                                 
  2. Select IMS Connect options on the Configuration panel to update.
    Configuration panel will be displayed as follows:

                                      Configuration                  
                                               Commands: ADD COPY Locate Select SORT
     Options library . . . : BOLNXC.IPR.OPTIONS                                      
                                                                                    
     Type one or more action codes.  Then press Enter.                               
       S=Display/Update   C=Copy   D=Delete   I=Insert   R=Reload Connect            
     A Name     Type     Saved             User    Description                       
       SD5DELNK eLink    17/11/17 03:08    MVSSYD  Elink for energizer               
       SD5DEGRP eGroup   20/07/16 04:35    MVSSYD  R15 EGRP                          
     s SD5DBCON Connect  20/05/12 07:21    MVSSYD  IMS Connect
       SD5DIMS  IMS      17/10/17 07:25    MVSSYD  R15 control region                
       SD5DODBM ODBM     19/12/02 04:42    MVSSYD  ODBM                              
       SD5DR15  Router   20/12/17 01:37    MVSSYB  router                            
       IPREXT15 Exits    23/02/09 04:37    BOLNXC  exit services                     
     ******************************* Bottom of data ********************************  
                                                                                
                                                                                    
     Command ===>                                                  Scroll ===> PAGE  

  3. Locate Exit Security options.

                               IMS Connect Options                          
                                                                More:   - +
       Group name . . . . . . SD5DEGRP +(Use Prompt for list)               
       Router options name  . SD5DR15  +                                    
       Exit options name  . . SD5DEX15 +                                    
       ODBM options name  . . SD5DODBM +                                    
       Execute cmds member  . SD5DCMDS (in PROCLIB)                         
       Auto cancel clients  . ________ (in PROCLIB)                         
       Host name  . . . . . . IMSA____________________________________                                          
       Port number  . . . . . 11733 (1 to 65535) / Enable exclusive port    
                                                                           
     Exit Security Options                                                  
       Security class name. . IPA#2___                                         
       Security application . ________                                              
       Resource prefix  . . . MVSSYD.______________________________       

     Transport Layer Security (TLS/AT-TLS) Options                  
       / Propagate UserID associated with Digital Certificate       
       _ Validate UserID in IRM/OTMA headers vs Certificate UserID  
       _ Cache Certificate associated UserID                        
       _ All Ports 1. 19233 2.       3.       4.       5.           
                                                             
     Governor Options                                                       
       Transaction limit  . . 0_________ (transactions per second)          
       Warning threshold  . . 0__  (0 to 99 percent of transaction limit)     
     Command ===> _________________________________________________________


    1. In the Class field, enter a valid RACF (or equivalent) class name.
    2. In the Application field, specify the one- to eight-character RACF (or equivalent) application name that is passed to the installed RACF (or equivalent) exit on all RACF (or equivalent) macro (RACROUTE) calls – applicable only when Exit Services security is enabled.
    3. In the Resource profile prefix field, specify a one- to 36-character name that is used as a prefix for any resource names which are associated with the Exit Services security. If specified, this field is used as a prefix for any resource name that is checked.
    4. Select the Cache resource profiles to specify whether the Exit Services security resource profiles are brought into storage (RACLIST). If yes, all resource names that are defined in the Class field are loaded into storage during Energizer initialization.

                                  IMS Connect Options                           
                                                                  More:   - +  
       Select (type a '/') any of the following:                               
         / Cache security resource profiles                                    
         / Activate tracing for types selected below                           
         / Activate journaling for types selected below                        
         _ Pass IMS Connect data to Logger                                     
         _ Activate IBM IMS Connect RSM RTN/RSN Codes          
Warning

Important

Caching resource profiles improves performance of authorization calls. If caching is not specified, each authorization call results in I/O to the RACF (or equivalent) database.

Any changes to the security resource profiles will require a reload of profiles before they take effect.

       4. Press PF3 to Save options.The updated information is saved.

Warning

Important

IMS Connect security fields are available on this panel. Exit level security options are available in the Exit Services Options member. 

       5. (Optional) Reload the IMS Connect. For information on reloading the IMS Connect configuration member, see Reloading-IMS-Connect-configurations.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Energizer for IMS Connect 1.8