HP XP P9000 for Business Continuity Manager Software Installation Guide

For details about how to activate the RACF FACILITY class, how to define a profile, and how to
assign access permissions for profiles to user accounts, see the Security Server RACF Security
Administrator's Guide.
To assign access permissions for operation profiles to a user account:
1. Activate the RACF FACILITY class.
SETROPTS CLASSACT(FACILITY)
2. Define the STGADMIN.YKA.BCM.COMMANDS profile for the FACILITY class.
RDEFINE FACILITY STGADMIN.YKA.BCM.COMMANDS UACC(NONE)
3. Add access permissions for the defined profile to the user account.
PERMIT STGADMIN.YKA.BCM.COMMANDS CLASS(FACILITY) ID(user-ID) ACCESS(READ)
To assign access permissions for reference profiles to a user account:
1. Activate the RACF FACILITY class.
SETROPTS CLASSACT(FACILITY)
2. Define the STGADMIN.YKA.BCM.YKQUERY profile for the FACILITY class.
RDEFINE FACILITY STGADMIN.YKA.BCM.YKQUERY UACC(NONE)
3. Add access permissions for the defined profile to the user account.
PERMIT STGADMIN.YKA.BCM.YKQUERY CLASS(FACILITY) ID(user-ID) ACCESS(READ)
If you want to improve the execution performance of Business Continuity Manager, HP recommends
that you enable the RACLIST function (in-storage profiles) for the FACILITY class.
If the FACILITY class has not been activated by RACLIST:
SETROPTS RACLIST(FACILITY)
If the FACILITY class has already been activated by RACLIST:
SETROPTS RACLIST(FACILITY) REFRESH
Configuring dataset security
The Business Continuity Manager configuration file is created and saved based on the prefix value
of the user-provided dataset name. Once the storage manager has decided on a prefix value, a
data security mechanism must be implemented to control the read and write permissions, depending
on the TSO/E user's storage management role.
Registering a user SVC
You must use one of the following methods to register the user SVC:
• Registration using the IEASVCxx parmlib member
• Registration using the YKALCSVC command
If you use the IEASVCxx parmlib member to perform registration, you must reload the system (that
is, perform an initial program load (IPL)). If you cannot perform a re-IPL while the system is running,
use the YKALCSVC command to perform registration.
Using the IEASVCxx parmlib member to register
To register using IEASVCxx parmlib:
1. Choose a number between 200 and 255 to assign to the user SVC.
2. Insert the following SYMDEF statement (&YKSVCNO system symbol) into the IEASYMxx parmlib
member:
SYMDEF(&YKSVCNO=’SVC-number')
For SVC-number, specify a decimal number between 200 and 255.
Setting up the environment 29