Using storage protection when running with CICS 3.3.0 or later

When running with CICS® 3.3.0 or later on a storage-protection-enabled machine, the EZAP, EZAO, and CSKL transactions must be defined with TASKDATAKEY(CICS). If this is not done, EZAO fails with an ASRA abend code indicating an incorrect attempt to overwrite the CDSA by EZACIC01. The contains more information about storage protection with task-related user exits (TRUEs).

In Figure 2, Figure 3, and Figure 4 note that, if the machine does not support storage protection or is not enabled for storage protection, TASKDATAKEY(CICS) is ignored and does not cause an error.

Figure 1. EZAC, transaction to configure the socket interface

DEFINE TRANSACTION(EZAC) 
DESCRIPTION(CONFIGURE SOCKETS INTERFACE)
GROUP(SOCKETS) 
PROGRAM(EZACIC23) 
TASKDATALOC(ANY) TASKDATAKEY(USER)

Figure 2. EZAO, transaction to enable the socket interface

DEFINE TRANSACTION(EZAO) 
DESCRIPTION(ENABLE SOCKETS INTERFACE) 
GROUP(SOCKETS) 
PROGRAM(EZACIC00) PRIORITY(255) 
TASKDATALOC(ANY) TASKDATAKEY(CICS)

Figure 3. EZAP, transaction to disable the socket interface

DEFINE TRANSACTION(EZAP) 
DESCRIPTION(DISABLE SOCKETS INTERFACE)
GROUP(SOCKETS) 
PROGRAM(EZACIC22) PRIORITY(255) 
TASKDATALOC(ANY) TASKDATAKEY(CICS)

Figure 4. CSKL, Listener task transaction

DEFINE TRANSACTION(CSKL) 
DESCRIPTION(LISTENER TASK) 
GROUP(SOCKETS) 
PROGRAM(EZACIC02) PRIORITY(255) 
TASKDATALOC(ANY) TASKDATAKEY(CICS)

Guidelines:

Use of the IBM-supplied listener is not required.
You can use a transaction name other than CSKL.
The TASKDATALOC values for EZAO and EZAP and the TASKDATALOC value for CSKL must all be the same.
The user ID invoking the EZAO transaction to activate or deactivate the IP CICS socket interface requires the UPDATE access to the EXITPROGRAM resource when CICS command security is active. The user ID invoking the EZAC transaction requires the UPDATE access to the EXITPROGRAM resource to allow the EZAC transaction to perform an IPv6 run-time check when the AF is changed to INET6. Failure to have at least the UPDATE access to the EXITPROGRAM resource causes the IP CICS socket interface and listener to not start or not stop.