Security for z/OS

This course provides you with a high-level overview of the IBM zSecure product and its role in supporting RACF administration and security auditing. You will see why zSecure is fast becoming the tool of choice for organizations that need to manage RACF data more efficiently, securely, and at scale. The course begins by introducing the core zSecure product offerings, including zSecure Admin, and Audit, highlighting how each contributes to improved RACF data management and compliance reporting. You will gain insight into how zSecure interacts with both live and copied RACF data to streamline tasks such as user profile updates, access reviews, and audit checks. Following this you will learn how to interact with the zSecure through the ISPF interface, exploring how it simplifies navigation and task execution for administrators and auditors. While the course does not cover every feature in depth, it provides a solid foundation for understanding zSecure’s value and potential in your environment.

This course provides an overview of managing RACF security using zSecure Admin, focusing on three key areas. The initial focus is on the management of User and Group profiles, including displaying and modifying user attributes, using line commands, setting selection criteria, and creating group profiles. Next, it explores managing RACF dataset and general resource profiles, demonstrating how to use selection criteria, line commands, and panels to view, update, and create profiles efficiently. Finally, it introduces advanced administrative and operational features such as the zSecure Helpdesk, Quick Admin, access verification tools, reporting capabilities, bulk profile updates, digital certificate management, and the creation of custom reports for audit and compliance support.

This course introduces the core capabilities of zSecure Audit for monitoring, verifying, and enforcing RACF security and compliance. It begins with an exploration of source data used by zSecure Audit, and progresses to showing how to use ID reports to view detailed RACF user and group attributes, generate cross-complex MFA reports, and analyze changes to libraries. It also covers configuring compliance requirements, running compliance checks, reviewing compliance history, and testing individual rules. In addition, the course guides learners through a range of status and verification reports - including MVS tables, RACF control, user, and resource reports - using selection criteria filters to focus on key security indicators and verify system integrity.

This course provides the learner with a basic understanding of z/OS security. It introduces basic security concepts as they relate to z/OS, including the reasons for security, physical security and the Logon ID. It covers both traditional z/OS security issues such as data set protection and TSO/E, together with recent developments including LDAP and passphrases. Sections on security auditing, event recording, and a detailed explanation of the Authorized Program Facility (APF) are also covered.

This course details the skills that are required by a security administrator, or systems programmers to secure RACF systems and data. It explains how to define and maintain individual users within RACF, using several different interfaces.

This course follows on from the “RACF - Defining and Managing Users 3.1” course describing how users can be connected to Group profiles and can be assigned special privileged access

This course describes how RACF is used to define access to z/OS data sets. Information on the profiles used to provide this access is also discussed in detail.

This course describes the various types of data center audits and discusses the role of an internal auditor when performing a RACF audit. It expands this to look at the general steps to ensure that RACF managed security is aligned with both organizational security standards, and external compliance regulations. RACF auditor privileges are discussed in detail describing how audit information is stored and the commands used to request the capture of specific events. The type of data that can be unloaded from SMF, and the RACF database, is explained along with details on how ICETOOL can be used to process this information to create audit reports.

This course introduces the learner to IBM’s RACF security software, explaining how it has evolved and how it is typically used in z/OS, and can interact with non-z/OS workloads. It discusses the importance of security, and the types of resources it protects. The course then introduces the concept of user and group profiles and describes from a user perspective, RACF’s interaction with day-to-day user tasks. Examples showing how various users can interact with RACF are also provided.

This course describes how RACF is used to define access to system resources such as DASD and tape volumes, load modules (programs), and terminals. Details of the profiles used to provide access to these items is also discussed in detail.

This course describes the requirements for configuring security in a z/OS UNIX environment using RACF. It covers the creation and use of UID and GID definitions as well as file and directory permission bits and access control lists that are referenced when accessing those z/OS UNIX resources.

In this course you will see how encryption keys are used to securely manage data, and the standards that enforce encryption protocols. You will be introduced to various types of certificates and see how data that is stored in them. From a z/OS perspective you will see how IBM’s Digital Certificate Access Server (DCAS) provides password free access to that environment using a certificate. Commands used to generate and manipulate digital certificates, and key rings is discussed in detail.

This course describes how the RACF database is structured and configured, and the skills needed to ensure that it runs optimally.

This course provides the learner with a basic understanding of z/OS security. It introduces basic security concepts as they relate to z/OS, including the reasons for security, physical security and the Logon ID. It covers both traditional z/OS security issues such as data set protection and TSO/E, together with recent developments including LDAP and passphrases. Sections on security auditing, event recording, and a detailed explanation of the Authorized Program Facility (APF) are also covered.

This course introduces the learner to IBM's RACF security software, explaining how it has evolved and how it is typically used in z/OS, and can interact with non-z/OS workloads. It discusses the importance of security, and the types of resources it protects. The course then introduces the concept of user and group profiles and describes from a user perspective, RACF's interaction with day-to-day user tasks. Examples showing how various users can interact with RACF are also provided.

This course details the skills that are required by a security administrator, programmer, or DBA in using RACF to secure systems and data. It explains how to define and maintain individual users within RACF, using several different interfaces.

This course follows on from the RACF - Defining and Managing Users in RACF course describing how users can be connected to Group profiles and can be assigned special privileged access.

This course describes how RACF is used to define access to z/OS data sets. Information on the profiles used to provide this access is also discussed in detail.

This course describes how RACF is used to define access to system resources such as DASD and tape volumes, load modules (programs), and terminals. Details of the profiles used to provide access to these items is also discussed in detail.

In this course you will see how encryption keys are used to securely manage data, and the standards that enforce encryption protocols. You will be introduced to various types of certificates and see how data that is stored in them. From a z/OS perspective you will see how IBM's Digital Certificate Access Server (DCAS) provides password free access to that environment using a certificate. Commands used to generate and manipulate digital certificates, and key rings is discussed in detail.

This course describes the requirements for configuring security in a z/OS UNIX environment using RACF. It covers the creation and use of UID and GID definitions as well as file and directory permission bits and access control lists that are referenced when accessing those z/OS UNIX resources.

This course describes how the RACF database is structured and configured, and the skills needed to ensure that it runs optimally.

This course describes the various types of data center audits and discusses the role of an internal auditor when performing a RACF audit. It expands this to look at the general steps to ensure that RACF managed security is aligned with both organizational security standards, and external compliance regulations. RACF auditor privileges are discussed in detail describing how audit information is stored and the commands used to request the capture of specific events. The type of data that can be unloaded from SMF, and the RACF database, is explained along with details on how ICETOOL can be used to process this information to create audit reports.

These courses describe how CA ACF2™ is used to protect and secure the system against accidental and malicious access and damage. It instructs the student on how CA ACF2™ works and how to define users, rules and parameters, to restrict access to the system and its resources.

These courses describe how CA ACF2™ is used to protect and secure the system against accidental and malicious access and damage. It instructs the student on how CA ACF2™ works and how to define users, rules and parameters, to restrict access to the system and its resources.

These courses describe how CA ACF2™ is used to protect and secure the system against accidental and malicious access and damage. It instructs the student on how CA ACF2™ works and how to define users, rules and parameters, to restrict access to the system and its resources.

These courses describe how CA ACF2™ is used to protect and secure the system against accidental and malicious access and damage. It instructs the student on how CA ACF2™ works and how to define users, rules and parameters, to restrict access to the system and its resources.

These courses describe how CA ACF2™ is used to protect and secure the system against accidental and malicious access and damage. It instructs the student on how CA ACF2™ works and how to define users, rules and parameters, to restrict access to the system and its resources.

These courses describe how CA ACF2™ is used to protect and secure the system against accidental and malicious access and damage. It instructs the student on how CA ACF2™ works and how to define users, rules and parameters, to restrict access to the system and its resources.

These courses describe how CA ACF2™ is used to protect and secure the system against accidental and malicious access and damage. It instructs the student on how CA ACF2™ works and how to define users, rules and parameters, to restrict access to the system and its resources.