Security / Technical Security

Exploiting the Advanced Features of RACF

This course teaches you how to implement some of the advanced features available in RACF. Through a combination of classroom lectures and lab exercises, you will learn how to set up an RRSF environment, including how to use RRSF features to administer the security of remote RACF databases from one centralized location, allowing users to synchronize password changes between several related user IDs, using RRSF features to automatically keep two or more separate RACF databases in sync. Other major features you'll learn about include sysplex RACF data sharing and sysplex communication, RACF support for z/OS UNIX, DB2 security using RACF, Network Job Entry (NJE) security, operator commands, program control and backup, RACF database recovery, PassTickets, digital certificates and program signature.

Issues

Explanation of the functions and benefits of various advanced features in RACF
Deciding what features should be implemented in the installation
Identify any migration issues related to these functions
List the tasks that need to be done to implement advanced security features and develop an implementation plan
Create definitions in RACF to implement advanced security features

Who is this training for?

The intermediate course is designed for security personnel and RACF support staff responsible for RACF implementation, RACF administration, or both

Prerequisites

RACF administrative skills (obtained by attending Effective RACF Administration BE87 or Basics of z/OS RACF Administration ES19) or equivalent experience.

Training program

Welcome
Unit 1 - Introduction to RRSF Exercises 1-4
Exercise 1 - Defining RRSF nodes
Exercise 2 - Directed commands and synchronization of passwords and secret phrases
Exercise 3 - Remote administration
Exercise 4 - Automatic commands and password direction

Exercises 1-4 overview
Unit 2 - RACF sysplex support Unit 3 - RACF security for DB2
Exercise 5 - Operator Command Security Unit 4 - Command and Console Security

Unit 5 - RACF support for z/OS UNIX
Exercises 6-9
Exercise 6 - Adding a z/OS UNIX user
Exercise 7 - Using the z/OS UNIX shell
Exercise 8 - Using the USS ISPF shell and Udlist ISPF 3.17 functions
Exercise 9 - Access Control Lists (ACLs)

Exercises 6-9 overview
Unit 6 - Controlling the entry of network tasks
Unit 7 - RACF database backup and recovery Unit 8 - Program control
Unit 9 - PassTickets
Unit 10 - Digital certificates
Unit 11 - Signing and verification of the program

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Frequently asked questions

What are the prerequisites for this training?

For Exploiting the Advanced Features of RACF we recommend: RACF administrative skills (obtained by attending Effective RACF Administration BE87 or Basics of z/OS RACF Administration ES19) or equivalent experience..

What is the format and duration of this training?

The training lasts 4 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: The intermediate course is designed for security personnel and RACF support staff responsible for RACF implementation, RACF administration, or both.