Mainframe Enablers TimeFinder SnapVX and zDP 8.5 Product Guide

For approved commands or command sequences, the approver generates a security token that authorizes the requester to run the command sequence in the zDP environment.

Running EIPSCAN

To generate a security token, run the EIPSCAN program as follows:

//JOBCARD                                   
//*                                         
//ZDPSCAN    EXEC PGM=EIPSCAN                  
//STEPLIB    DD   DISP=SHR,DSN=ds_prefix.LINKLIB  
//SYSPRINT   DD   SYSOUT=*,DCB=BLKSIZE=121      
//SCF$nnnn   DD   DUMMY                         
//*                                         
//inddname   DD *                                
<commands>

Where:

• ds_prefix is the product dataset name prefix that you specified during installation of Mainframe Enablers as described in the Mainframe Enablers Installation and Customization Guide.
• SCF$nnnn identifies the ResourcePak Base task that the job runs against.
• inddname is one of the following:
  • SYSIN for zDP Definition Utility statements or an SCF zDP runtime command.
  • QCINPUT for SnapVX command sequences to be run through EMCSNAP or SIBBATCH.
• commands are one or more zDP Definition Utility statements, an SCF zDP runtime command, or one or more SnapVX commands.
  • Specify an SCF zDP runtime command to be authorized in the form: ZDP,command, as stated in the ResourcePak Base for z/OS Product Guide.
  • zDP commands that are submitted through SCF are authorized one at a time. If you specify multiple SCF zDP commands, EIPSCAN provides an authorization resource name for the first command only. All other commands are ignored.

The generated token value is reported in the SYSPRINT output.

Generated resource name format

EIPSCAN generates a zDP Two-Actor Security resource name in the following format:

EMCSECUR.ZDP.tokenxxx.yyyymmdd.hh00

Where:

• tokenxxx is the generated token specific to the requested command or command sequence being authorized.
• yyymmdd is the date for which the command is to be authorized.
• hh is the hour of the day within which the command sequence is to be authorized.

When EIPSCAN generates the token, it inserts the date and hour at the time of generation. The approver substitutes these values with the requested date and hour in the resource name that is defined to the security system.