CA Top Secret Security for z/os CA RS 1310 Service List

Transcription

1 CA Top Secret Security for z/os CA RS 1310 Service List Description Hiper 15.0 RO59749 TSS9147E VSAMFILE FILE FAILED BACKUP RO60611 S013-C0 ABEND TIME SERIES FACILITY ERROR HANDLING RO61055 JES2 AND JES3 SUPPORT FOR Z/OS 2.1 RO62473 SOC4 ABENDS ARE POSSIBLE ON USS CHECK GROUP ACCESS FUNCTION RO63014 FILE MANAGER MAY HANG WHEN PROCESSING MODIFY COMMANDS RO63134 ABEND S0C4 IN TSSCPF +00E26A The CA RS 1310 service count for this release is 6

2 CA Top Secret Security for z/os CA RS 1310 Service List Description Hiper 14.0 NO-SRVC CA RS 1310 Contains No Service For This Release of This Product. The CA RS 1310 service count for this release is 0

3 CA Top Secret Security for z/os 3 CA RS 1310 Service List for CAKOF00 FMID Service Description Hiper CAKOF00 RO59749 TSS9147E VSAMFILE FILE FAILED BACKUP RO60611 S013-C0 ABEND TIME SERIES FACILITY ERROR HANDLING RO61055 JES2 AND JES3 SUPPORT FOR Z/OS 2.1 RO62473 SOC4 ABENDS ARE POSSIBLE ON USS CHECK GROUP ACCESS FUNCTION RO63014 FILE MANAGER MAY HANG WHEN PROCESSING MODIFY COMMANDS RO63134 ABEND S0C4 IN TSSCPF +00E26A The CA RS 1310 service count for this FMID is 6

4 CA Top Secret Security for z/os CA RS PTF RO RO59749 RO59749 M.C.S. ENTRIES = ++PTF (RO59749) TSS9147E VSAMFILE FILE FAILED BACKUP During backup processing, the backup of the CA Top Secret VSAM Companion file can fail. A one-byte overlay of the TIOT, caused during initialization of the TSSCPF subtask, shows up during the backup processing. The overlay of the one byte depends on what register 6 contains at the time of CPF initialization. TSS9147E VSAMFILE FILE BACKUP FAILED IDC3300I ERROR OPENING SYS0.TSS.CS05.VSAMBKUP IDC3351I ** VSAM OPEN RETURN CODE IS 134 VSAM file not backup; CA Top Secret recovers and continues to process. Manually issue an IDCAMS REPRO of the VSAM Companion file, outside of TSS. PRODUCT(S) AFFECTED: CA-TOP SECRET-MVS Release 15.0 CA-TOP SECRET-MVS Release 14.0 TSSMVS 9451 Copyright (C) 2013 CA. All rights reserved. R00811-TSS150-SP1 DESC(TSS9147E VSAMFILE FILE FAILED BACKUP). PRE ( RO18784 RO38472 RO40240 RO48248 RO54619 ) SUP ( TR27616 RO27616 TR34286 AR27616 TR36144 AR38472 TR40412 TR40449 TR43303 BR38472 TR43948 TR44141 RO34286 RO36144 RO40412 RO40449 RO43303 RO44141 TR53711 TR54169 TR54419 TR54858 TR58095 TR58561 RO54858 RO58561 TR59749 ) ++HOLD (RO59749) SYSTEM FMID(CAKOF00) REASON (ACTION ) DATE (13255) PRODUCT: CA-TOP SECRET-MVS RELEASE: 15.0 SEQUENCE: AFTER APPLY Prevent overlay of TIOT ALL users that use TSS Backup 1- Product Administration 2- SMP/E 3- z/os Systems Programming 4- Security Administration SMP/E CSI libraries SMP APPLY, LLA REFRESH and a restart of TSS with REINIT is required to install this APAR.

5 CA Top Secret Security for z/os CA RS PTF RO RO60611 RO60611 M.C.S. ENTRIES = ++PTF (RO60611) S013-C0 ABEND TIME SERIES FACILITY ERROR HANDLING If CA Top Secret is started as a subsystem (SUB=MSTR in MVS parmlib member COMMNDxx), and CHORUSTSFDB (TSS Control Option) is set to 1,2 or 3, the following abend will occur: Abend 013-C0,IGG0199G,TSS15,TSS15,SYSPRINT With the setting of CHORUSTSFDB option turned on (values 1,2 or 3), the Time Series Facility (TSF) API that is used in conjunction with Chorus STATG (TSS control option), will attempt to write trace records to the SYSPRINT spool. But when TSS is started prior to JES, no SYSPRINT is availible. Abend 013-C0 due to TSS started as SUBSYS where there is no JES SYSPRINT ABEND 013-C0 messages will occur every CHORUSSTATGI (interval) time. Set TSS control option CHORUSTSFDB(0) PRODUCT(S) AFFECTED: TSSMVS Release 15.0 TSSMVS 9344 Copyright (C) 2013 CA. All rights reserved. R00826-TSS150-SP1 DESC(S013-C0 ABEND TIME SERIES FACILITY ERROR HANDLING). PRE ( RO25587 RO26450 RO36198 RO37109 RO38472 RO45811 RO50143 RO50925 RO55678 ) SUP ( TR16265 TR16732 TR40589 TR42155 TR42988 RO40589 RO42155 RO42988 TR31112 TR31438 TR57058 TR57652 TR58021 RO58021 TR58318 RO58318 TR60245 TR60294 TR60606 TR60611 ) ++HOLD (RO60611) SYSTEM FMID(CAKOF00) REASON (ACTION ) DATE (13183) Product: CA-TOP SECRET-MVS Release: 15.0 Sequence: SMP APPLY, LLA REFRESH and a restart of TSS with REINIT is required to install this APAR. S013-C0 ABEND TIME SERIES FACILITY ERROR HANDLING Any user leveraging Time Series. 1 - Product Administration 2 - SMP/e 3 - z/os Systems Programming 4 - Security Administration SMP/e CSI libraries Implement PTF.

6 CA Top Secret Security for z/os CA RS PTF RO RO61055 RO61055 M.C.S. ENTRIES = ++PTF (RO61055) JES2 AND JES3 SUPPORT FOR Z/OS 2.1 In CA Top Secret for z/os, the JES release is not recognized under z/os 2.1. In addition, an S0C4 ABEND in TSSFSB can occur under JES3 during startup. The following messages are issued at CA Top Secret startup: JES2 & JES3: TSS9112E UNABLE TO DETERMINE JES LEVEL For JES3 only: TSS9680A CA-TSS MAINTASK MANAGER ABEND S0C4 IN TSSMVS1+51B0 No functional impact if running with JES2. For JES3, this PTF will be required when bringing up z/os 2.1. None. PRODUCT(S) AFFECTED: CA Top Secret for z/os Release 15.0 TSSMVS 9449 Copyright (C) 2013 CA. All rights reserved. R00833-TSS150-SP1 DESC(JES2 AND JES3 SUPPORT FOR Z/OS 2.1). PRE ( RO35644 RO36198 ) SUP ( TR23540 RO23540 TR31057 TR41211 RO31057 RO41211 TR52387 TR59520 TR59700 TR61055 ) ++HOLD (RO61055) SYSTEM FMID(CAKOF00) REASON (ACTION ) DATE (13255) PRODUCT: CA-TOP SECRET-MVS RELEASE 15.0 SEQUENCE: AFTER APPLY In CA Top Secret for z/os, the JES release is not recognized under z/os 2.1. Also a S0C4 ABEND in TSSFSB can occur with JES3. All users that leverage z/os Product Administration 2- SMP/E 3- z/os Systems Programming 4- Security Administration SMP/E CSI libraries SMP APPLY, LLA REFRESH and a restart of TSS with REINIT is required to install this APAR.

7 CA Top Secret Security for z/os CA RS PTF RO RO62473 RO62473 M.C.S. ENTRIES = ++PTF (RO62473) SOC4 ABENDS ARE POSSIBLE ON USS CHECK GROUP ACCESS FUNCTION After CA Top Secret r15 PTF RO55678 is implemented, adding new GIDs will allow the new GID to be added and usable without the need to issue a TSS MODI(OMVSTABS) command. There is a defect in this new code which can cause S0C4 abends in module SAFOEGRP while the new GIDs exist in the GID table extension. CCSR010E SAFOEACC S0C4 at 2B9F1994 LMOD SAFOEDRV CSECT SAFOEGRP The call will fail causing unpredictable results. It is possible an access check may result in a failure incorrectly based upon the assigned GID number. This is read error condition so there is no chance that an overlay can occur. Issue the TSS MODI(OMVSTABS) after adding any new GIDs. PRODUCT(S) AFFECTED: CA-TOP SECRET-MVS Release 15.0 TSSMVS 9482 Copyright (C) 2013 CA. All rights reserved. R00847-TSS150-SP1 DESC(SOC4 ABENDS ARE POSSIBLE ON USS CHECK GROUP ACCESS FUNCTION). PRE ( RO45458 RO55678 ) SUP ( TR62473 FR55678 ) ++HOLD (RO62473) SYSTEM FMID(CAKOF00) REASON (ACTION ) DATE (13248) Product: CA-TOP SECRET-MVS Release 15.0 Sequence: After APPLY. Allow for proper search of GID table by GID number without abends. All USS clients performing administration to add additional GIDs. 1- Product Administration 2- SMP/e 3- z/os Systems Programming SMP/e CSI libraries F LLA,REFRESH, then restart TSS with,,,reinit then F TSS,REFRESH(OEDRV)

8 CA Top Secret Security for z/os CA RS PTF RO RO63014 RO63014 M.C.S. ENTRIES = ++PTF (RO63014) FILE MANAGER MAY HANG WHEN PROCESSING MODIFY COMMANDS This PTF resolves the problem detailed in Product Error Alert (PEA) RI The CA Top Secret security file manager subtask (SFS) may hang when processing CA Top Secret Control Option modification commands. While the potential results can be significant, the sequence of events necessary to cause this problem require a combination of two specific CA Top Secret MODIFY command entry points that are executed at virtually the same time. To run into this problem requires the issuance of multiple concurrent CA Top Secret MODIFY commands via EACH of the following TWO entry points: ENTRY POINT 1: A CONSOLE modify command for TSS (F TSS) issued from any CONSOLE interface. 1. CONSOLE 2. SDSF 3. CA SYSVIEW 4. Any other entry points for MVS operator commands (I.E. SVC 34 etc. ENTRY POINT 2: A TSS MODIFY command from any other entry point other than the CONSOLE. This could include: 1. Batch job. 2. Executed from applications such as: a. TSO b. IMS c. CICS d. CA ROSCOE e. CA Compliance Manager f. Any R_ADMIN calls g. CA LDAP Server h. TSSCICS application interface 3. CA Top Secret Utilities such as: a. TSSCFILE b. CIA (batch and real-time) Once this condition occurs, CA Top Secret's ability to process security related workloads, that require security file access (such as EXTRACT or VERIFY CREATE calls), will no longer be serviced to completion. TSS File manager TCB enters into a permanent wait. This can lead to a backup of signon requests and a halt to all security file access. The customer that experienced this problem reported CICS/CTS applications (that issue extract calls at sign-on) which became nonresponsive with the following messages: CICSAPPL TSS6101I - TSS/CICS Signon Processing Delayed. MAXSIGN Limit has been Reached +EYUCS0207W CICMSPG Connected MAS ABCXXXX is not responding - APPLID(ABC System/application workloads will be unable to perform security functions. Applications such as CICS/CTS can hang (no longer processing work Application usage can be severely impaired. CPSM (CICSPLEX system manager) can attempt to shift workloads over to other regions. This could impact regions that reside on other LPARS where the problem has not occurred. If you experience this problem, you can attempt to cancel and restart the CA Top Secret address space. If this is not possible, an IPL will be required to recover the system. Until the remediation solution is available and implemented, do not issue a CONSOLE modify command for TSS from any CONSOLE interface (F TSS Possible interfaces beyond manual operator entry could include CA Top Secret MODIFY commands issued from automated operations packages. PRODUCT(S) AFFECTED: CA-TOP SECRET-MVS Release 15.0 TSSMVS 9488 Copyright (C) 2013 CA. All rights reserved. R00857-TSS150-SP1

9 CA Top Secret Security for z/os CA RS PTF RO63014 DESC(FILE MANAGER MAY HANG WHEN PROCESSING MODIFY COMMANDS). PRE ( RO25587 RO26450 RO36198 RO37109 RO38472 RO45811 RO50143 RO50925 RO55678 RO60611 ) SUP ( TR16265 TR16732 TR40589 TR42155 TR42988 RO40589 RO42155 RO42988 TR31112 TR31438 TR57058 TR57652 TR58021 RO58021 TR58318 RO58318 RI63057 TR60294 TR63014 CC56243 DC56243 ) ++HOLD (RO63014) SYSTEM FMID(CAKOF00) REASON (ACTION ) DATE (13262) PRODUCT: CA TOP SECRET FOR Z/OS RELEASE 15.0 SEQUENCE: AFTER APPLY. Address potential hang situation in TSS file services. All users that leverage TSS. 1- Product Administration 2- SMP/E 3- z/os Systems Programming 4- Security Administration SMP/E CSI libraries SMP APPLY, LLA REFRESH and a restart of TSS with REINIT is required to install this APAR.

10 CA Top Secret Security for z/os CA RS PTF RO RO63134 RO63134 M.C.S. ENTRIES = ++PTF (RO63134) ABEND S0C4 IN TSSCPF +00E26A With PTF RO54619 applied, during a period of CPF communication breakdown or extreme slowdown, it is possible that S0C4 abends may occur in TSSCPF+E26A. TSS9681A CA-TSS SECURITY FILE SERVICES ABEND S0C4 IN TSSCPF+E26A CCSR010E TSSSFS S0C4 at 2D54D26A LMOD TSSCPF CSECT TSSCPF +00E26A Password changes that occur on the local machine will not be sent at the time of the change. This abend will cause the TSSSFS subtask to abend. The task should be able to recover and TSS will stay up. Security File services performance may be affected while the TSSSFS subtask recycles. Disable CPF traffic while the performance problems continue to occur. PRODUCT(S) AFFECTED: CA Top Secret for z/os Release 15.0 TSSMVS 9489 Copyright (C) 2013 CA. All rights reserved. R00859-TSS150-SP1 DESC(ABEND S0C4 IN TSSCPF +00E26A). PRE ( RO18784 RO38472 RO40240 RO48248 RO54619 ) SUP ( TR27616 RO27616 TR34286 AR27616 TR36144 AR38472 TR40412 TR40449 TR43303 BR38472 TR43948 TR44141 RO34286 RO36144 RO40412 RO40449 RO43303 RO44141 TR53711 TR54169 TR54419 TR54858 TR58095 TR58561 RO54858 RO58561 TR59749 RO59749 TR62962 TR63134 AR54619 ) ++HOLD (RO63134) SYSTEM FMID(CAKOF00) REASON (ACTION ) DATE (13262) Product: CA Top Secret for z/os Release 15.0 Sequence: AFTER APPLY. Prevent TSSSFS subtask abends as a result of TSSCPF abends All clients leveraging CPF for TSS command propagation. 1- Product Administration 2- SMP/e 3- z/os Systems Commands SMP/e CSI libraries SMP APPLY, LLA REFRESH and a restart of TSS is required to install this APAR.