Security and Auditing Environment Variables

CESN_NO_OS390=ON

ON

Override the default CESN transaction and IMS sign-on screen response behavior for invalid credentials, and instead produce an invalid credential message.

Micro Focus recommends that you use the Advanced Region Properties page in the Enterprise Server Common Web Administration (ESCWA) interface to configure this environment variable. See Advanced Region Properties for more information.

ES_CLASS_XCMD={YES|NO|class-name}

YES

CICS CMD is the default CMD class.

NO

Security for CMDs is bypassed.

class-name

The name of a class to override the default CMD CICSCMD class.

ES_CLASS_XCMD=YES

ES_CLASS_XDCT={YES|NO|class-name}

YES

DCICSDCT is the default DCT class.

NO

Security for DCTs is bypassed.

class-name

The name of a class to override the default DCT DCICSDCT class.

ES_CLASS_XDCT=YES

ES_CLASS_XFCT={YES|NO|class-name}

YES

FCICSFCT is the default FCT class.

NO

Security for FCTs is bypassed.

class-name

The name of a class to override the default PCT FCICSFCT class.

ES_CLASS_XFCT=YES

ES_CLASS_XJCT={YES|NO|class-name}

YES

JCICSJCT is the default JCT class.

NO

Security for JCTs is bypassed.

class-name

The name of a class to override the default JCT JCICSJCT class.

ES_CLASS_XJCT=YES

ES_CLASS_XPCT={YES|NO|class-name

YES

ACICSPCT is the default PCT class.

NO

Security for PCTs is bypassed.

class-name

The name of a class to override the default PCT ACICSPCT class.

ES_CLASS_XPCT=YES

ES_CLASS_XPPT={YES|NO|class-name}

YES

MCICSPPT is the default PPT class.

NO

Security for PPTs is bypassed.

class-name

The name of a class to override the default PPT MCICSPPT class.

ES_CLASS_XPPT=YES

ES_CLASS_XPSB={YES|NO|class-name}

YES

PCICSPSB is the default PSB class.

NO

Security for PSBs is bypassed.

class-name

The name of a class to override the default PSB PCICSPSB class.

ES_CLASS_XPSB=YES

ES_CLASS_XRES={YES|NO|class-name}

YES

RCICSRES is the default RES class.

NO

Security for DOCTEMPLATEs is bypassed.

class-name

The name of a class to override the default RES RCISRES class.

ES_CLASS_XRES=YES

ES_CLASS_XTRAN={YES|NO|class-name}

YES

TCICSTRN is the default TRAN class.

NO

Security for TRANs is bypassed.

class-name

The name of a class to override the default TRAN TCICSTRN class.

ES_CLASS_XTRAN=YES

ES_CLASS_XTST={YES|NO|class-name}

YES

SCITST is the default TST class.

NO

Security for TSTs is bypassed.

class-name

The name of a class to override the default TST SCITST class.

ES_CLASS_XTST=YES

ES_DISABLE_DFLTUSR_SIGNON=Y

Y

Disables the mfuser auto-logon after starting Enterprise Server administration via your MFDS internal security account.

ES_ESM_CMDSEC=YES

YES

CICS overrides the CMDSEC option, and always calls its command security checking routine to issue the appropriate call to the SAF interface.

ES_ESM_PLTPISEC={NONE|CMDSEC|RESSEC|ALL}

NONE

No security checking is performed on PLT initialization programs.

CMDSEC

CICS performs command security checking only.

RESSEC

CICS performs resource security checking only.

ALL

CICS performs both command and resource security checking.

ES_ESM_PLTPISEC=NONE

ES_ESM_RCF={A|C|N|S|T|Y}

A

A combination of options T, C, and S.

C

Use RACF for ETO terminal command authorization.

N

RACF does not perform sign-on, transaction, or command authorization.

S

Use RACF for static and ETO terminal command authorization. Includes option C.

T

Use RACF for sign-on and transaction authorization.

Y

A combination of options T and C.

ES_ESM_RCF=N

ES_ESM_SECPRFX={NO|YES|prefix}

NO

Use no prefixes.

YES

Uses prefix resource names with the CICS region user ID.

prefix

Define a prefix for resource names as an alphanumeric string that starts with an alphabetic character, and is one to eight upper-case characters in total.

ES_ESM_SECPRFX=NO

ES_ESM_XUSER={NO|YES}

NO

No surrogate user checking is performed.

YES

Perform surrogate user checking wherever such checks are permitted.

ES_ESM_XUSER=YES

ES_OLD_SEC_TSTD=ON

ON

Prevents security being enforced for TS or TD queues that are not declared in the security repository.

ES_SURROGATE_JOB_USER=ON

ON

The user ID that started the enterprise server region is used in the job submission.

Micro Focus recommends that you use the Advanced Region Properties page in the Enterprise Server Common Web Administration (ESCWA) interface to configure this environment variable. See Advanced Region Properties for more information.

USSCONFIG=cipher-path

cipher-path

The absolute path to the cipher suite specification file or files.