Enabling RACF

RACF® is a component of the Security Server. Before you can use RACF on z/OS, the Security Server must be enabled. At install time, an entry must exist in the IFAPRDxx member pointed to by PROD= in IEASYSxx (in SYS1.PARMLIB) to enable the Security Server. If a correct entry does not exist, RACF initialization does not complete, IFA104I is issued, and RACF offers no security for the system.

If you order the Security Server for z/OS, the IFAPRDxx entry should look like this:

PRODUCT OWNER('IBM CORP')
        NAME('Z/OS')
        FEATURENAME('Security Server')
        ID(5694-A01)
        VERSION(*)
        RELEASE(*)
        MOD(*)
        STATE(ENABLED)

If you need to make any changes to your IFAPRDxx parameter library member, see z/OS MVS Product Management. After you make your changes, re-IPL the system to make the changes take effect. The SET PROD=xx command does not affect RACF's enablement state; only the status of the IFAPRDxx member at IPL time affects RACF's enablement state.