Your browser does not allow this site to store cookies and other data. Some functionality on this site may not work without them. See Privacy Policy for details on how we would use cookies.

SSH

Optimizing Performance

To optimize performance you can define the CSFOWH (hash) and CSFRNG (random number) profiles in the XFACILIT class. This will disable SAF/RACF checks for these profiles. ICSF uses CPACF instructions for these anyway and CPACF instructions cannot be protected by SAF/RACF. Consult your security team to make sure this is acceptable.

Example: RACF instructions

RDEFINE CSF.CSFSERV.AUTH.CSFOWH.DISABLE CLASS(XFACILIT) UACC(READ)
RDEFINE CSF.CSFSERV.AUTH.CSFRNG.DISABLE CLASS(XFACILIT) UACC(READ)
SETROPTS CLASSACT(XFACILIT)
SETROPTS RACLIST(XFACILIT) REFRESH

===AUTO_SCHEMA_MARKUP===