z/OS Security Server RACF System Programmer's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Initializing RACF verification of signed programs (IRRVERLD)

z/OS Security Server RACF System Programmer's Guide
SA23-2287-00

The IRRVERLD program initializes RACF® verification of signed programs by loading and verifying the RACF program verification module (IRRPVERS). IRRPVERS is a signed program that performs verification of signed programs, and must be loaded and verified before RACF is able to verify other signed programs. Before you run IRRVERLD, the security administrator must configure RACF to verify signed programs, and must define IRRPVERS as a signed program that must be verified when it is loaded. See "Enabling RACF to verify signed programs" in z/OS Security Server RACF Security Administrator's Guide for more information about implementing program signature verification.
Important: Run the IRRVERLD program on each system in a sysplex.
IRRVERLD has no parameters and is run using JCL. For example:
//IRRVERLD    JOB
//IRRVERLD    EXEC   PGM=IRRVERLD
If IRRVERLD does not successfully complete, work with your RACF security administrator to resolve error messages and rerun IRRVERLD. After IRRVERLD successfully completes, the IRRPVERS module is active and RACF is enabled to verify signed programs. The IRRPVERS module remains active until the next IPL. At IPL time, RACF initialization automatically reloads and verifies IRRPVERS unless the RACF configuration for program signing is disabled between IPLs. You can rerun IRRVERLD at any time to check the status of the IRRPVERS module.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014