Defining the SNMP community name

BCPii uses an SNMP community name to provide a minimal level of security between the z/OS image executing the BCPii service and the support element itself.

An SNMP community name is associated with a particular CPC. You must define the same community name in the following locations:

  • The support element configuration for the CPC
  • The security product for each CPC (RACF or other security product) to which communication is required

BCPii extracts the community name from the security product and transfers the name to the support element for the CPC. The support element then validates the community name before proceeding with the request. For more information about defining the SNMP community name, or extracting the predefined SNMP community name, see the IBM manual z/OS V1R13.0 MVS Programming: Callable Services for High Level Languages.

Note

You must define an SNMP community definition for at least the local CPC. Otherwise, BCPii cannot continue with initialization of its address space, and BCPii services are not available.

To define the SNMP community name in RACF and CA Top Secret

  1. Define the following syntax for your security product:

    For RACF syntax, click here to expand...
    RALTER FACILITY HWI.TARGET.netID.nau APPLDATA('SNMPCOMMUNITYNAME')
    SETROPTS RACLIST(FACILITY) REFRESH
    For CA Top Secret syntax, click here to expand...
    TSS PERMIT(acID) IBMFAC(HWI.TARGET.netID.nau) ACCESS(READ) APPLDATA('SNMPCOMMUNITYNAME')
    TSS REFRESH(acID) JOBNAME(jobname|*)
Warning

Due to restrictions with the security products on z/OS, the BCPii SNMP community name must not contain lowercase characters. The APPLDATA field accepts only uppercase letters and numbers.


Examples

The following examples assigns the SNMP community name XYZ123 to an existing CPC definition for CPC name NET1.CPC001:

RACF

RALTER FACILITY HWI.TARGET.NET1.CPC001 APPLDATA('XYZ123')
SETROPTS RACLIST(FACILITY) REFRESH

CA Top Secret

TSS PERMIT(DYCSTC) IBMFAC(HWI.TARGET.NET1.CPC001) ACCESS(READ) APPLDATA('XYZ123')
TSS REFRESH(DYCSTC) JOBNAME(JOB1)

If you receive any errors in the master PAS, see the IBM manuals z/OS V1R13.0 MVS Programming: Callable Services for High-Level Languages and z Systems Application Programming Interfaces.

Related topic

BCPii-and-SAF-security-requirements



 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*