Other administration tasks in support of MVS in-band tape encryption

In-band tape encryption requires that the IOS address space has security permissions for a USS segment. The USS segment is only for TCP/IP connectivity; UID(0) or super user ability is not required. Depending on the security product running on your system, take one of these actions to obtain the security permission:

In RACF, issue:
```
ADDUSER IOSAS OMVS(UID(xxxx) HOME('/'))
```
where xxxx is an unique user id
In CA-Top Secret Security for z/OS or eTrust, issue:
```
 TSO TSS ADD(IOSAS) UID(xxxx) HOME('/') 
```
where xxxx is an unique user id.
In CA-ACF2 Security for z/OS authorization, issue:
```
TSO ACF INSERT IOSAS NAME(IOSAS ID) UID(xxxx) HOME(/)
```
where xxxx is an unique user id.

If a USS segment is not available at the time of tape encryption, this message is issued:

 IOS628E ENCRYPTION ON DEVICE dddd HAS FAILED DUE TO OMVS SEGMENT FAILURE

Note: After adding the USS segment for the IOS address space, an IPL is needed for the new IOSAS segment to take affect.