The SSM Command

Allows you to set up system security by defining network profiles for PLIds, user profiles for user-ids and associated security profiles, environment settings and encryption keys.

Command Class

Cataloged DataBasic Program

Syntax

SSM

Restriction

SYSMAN account only.

SSM Screen

On entering SSM at TCL, the following screen is displayed.

          S E C U R I T Y    S Y S T E M    M A I N T E N A N C E
===============================================================================

               1. Define Network Profiles

               2. Define User Profiles

               3. Define Security Profiles

               4. Define Environment Settings

               5. Define Encryption Keys










               Enter profile number. >

Options 1 to 3 are used to maintain network, user and security profiles respectively (see Profiles Screens), while option 4 allows you configure the Reality environment settings. Option 5 allows you to define encryption keys, that can then be used to encrypt your data.

To select one of these options enter 1, 2,  3,  4  or 5  at the prompt. To return to TCL, press RETURN.

Profiles Screens

The screens for the three types of profile – Network, User and Security – are all used in a similar way.

At the prompt, enter one of the following:

• The Id of a profile to define or update.
• ?  to list the defined profiles.
• D  to update the default profile.
• *  (asterisk) to update the current profile. SSM displays your current PLId, user-id or security profile as appropriate, with the assigned profile (if any) or else the DEFAULT profile.
• Press RETURN to return to the SSM screen.

The cursor waits at the prompt until you do this.

On entering the Id, the screen lists the appropriate profile:

• If you have specified an existing profile, SSM reads the profile from the appropriate item in the NETWORK, USERS or SECURITY file.

• If you specify an Id which is not on file, SSM prompts as follows:

  'Id' is a new item.
  :
  Enter an existing ID to use as a template; (CR) for DEFAULT; EX to exit;

  Enter the Id of the item that you want to use as a template. This can save you having to enter much of the profile information. If you press RETURN, the profile held in the appropriate DEFAULT item is displayed or, if the DEFAULT item has been deleted, a system default profile.

You can now enter one of the following at the screen prompt.

A number in the range 1 to the maximum field number
To edit an attribute in the profile.

EX  To return to TCL without creating or modifying the profile.

FI  To save the displayed profile item in the appropriate file.

FD  to delete the displayed profile item from the file.

All other responses result in an error message.

For each option selected, an information prompt is displayed in the middle of the screen along with a help message at the bottom of the screen. Input is typed at the information prompt and can be one of the following:

• A numeric value.
• Y  or N, for yes or no, respectively.
• A character string.
• The help character – a question mark (?).

The sections NETWORK File Maintenance Options, USERS File Maintenance Options or SECURITY File Maintenance Options describe the options available in the three types of profile, including their purpose, the information prompts displayed and the input required at each prompt.

Character Strings

A character string is a sequence of alphanumeric characters, as in a name or description, or a list of values. Some of the data in the security files is multivalued so that you can add or delete specific values within the value string, or just type the entire string. If you type the entire string, the values must be separated with a comma (,). You can remove multivalued data by typing a backslash (\). This nulls the entire attribute.

The Help Character

If you type the help character (?), a help message is displayed and you are reprompted for input. Multivalued data automatically displays the help message along with the current values for the option selected, if any exist.