Protecting the secured signon application keys

When you define the secured signon application keys, RACF® either masks or encrypts each key. If the system has a cryptographic product installed and available, you can encrypt the secured signon application keys for added protection. For more information, see Masking the secured signon application key and Encrypting the secured signon application key.

Note: To prevent unauthorized users from looking at the secured signon application keys that are stored in the RACF database, make sure the universal access authority (UACC) of the RACF database is NONE. This prevents unauthorized users from listing or copying the RACF data set that contains these sensitive keys.