Security enhancements for HMCS, SMCS, and MCS consoles
Description: The following two new console security enhancements
are provided:
- The ability to have a user automatically logged off from a console
due to inactivity is introduced. A system programmer is able to specify
in parmlib member CONSOLxx a timeout value (in minutes) that applies
to HMCS, SMCS, or MCS consoles in the system. The consoles are automatically
logged off when the timeout intervals are exceeded without any operator
input. It is possible to set a specific value for each console. The
console's timeout value can be dynamically altered using a VARY CN()
command. Note: The timeout value is associated with a console name, not the user ID for the LOGON command.
- The ability to have a user concurrently logged on to multiple
consoles in the sysplex at one time. This is accomplished by the security
administrator defining a security profile, MVS.MULTIPLE.LOGON.CHECK,
in the OPERCMDS class. If the profile does not exist, a user ID may
only be logged on to one operator console. When the profile exists,
an authorized user ID may be concurrently logged on to multiple operator
consoles. Note: This profile affects all user IDs on the system, not any specific user ID.
When change was introduced: z/OS® V2R2.
Reference information:
