IBM Support

CA Top Secret Security not initializing in CICS TS

Question & Answer


Question

What could stop CICS Transaction Server for z/OS (CICS TS) security from initializing when using using CA Top Secret (CA-TSS) as the external security manager?

My CICS region is starting, and I am seeing the following CICS messages indicating that the security domain is initializing and that the security profiles are being built:

 DFHXS1100I <applid> Security initialization has started.  
 DFHXS1105 <applid> Resource profiles for class ACICSPCT have been built.  
 DFHXS1105 <applid> Resource profiles for class CCICSCMD have been built.  
 DFHXS1105 <applid> Resource profiles for class MCICSPPT have been built.  
 DFHXS1105 <applid> Resource profiles for class TCICSTRN have been built.  
 DFHXS1103I <applid> Default security for userid CICSUSER has been established.
 DFHXS1101I <applid> Security initialization has ended.

and then I see a message showing that CA-ENF is being started:

 DFHXS0206 - CA-ENF INSTALLING THE CICS INTERFACE

but I do not see a message indicating that CA Top Secret initialization is complete, and security does not work in the region.

Answer

The problem could be with the CA-ENF CICSREL parameter. If you check your CA-ENF started task output, you might find a message similar to the following right after the CICSREL(xx,xx,xx,...) parameter:

 CAS9216E - Invalid command - too many variables  

Security should initialize after you correct this error and restart the CICS region. For further assistance on this type of error, contact CA Top Secret support at CA Technologies.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"Security","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Product Synonym

CICS/TS CICSTS CICS TS CICS Transaction Server

Document Information

Modified date:
05 October 2017

UID

dwa1405312