Configure z/OS Management Facility for CA ACF2

IBM® z/OS® Management Facility (z/OSMF) provides system management functions in a task-oriented web browser-based user interface with integrated user assistance, so that you can manage the day-to-day operations and administration of your z/OS systems. By streamlining some traditional tasks and automating others, z/OSMF can help to simplify some areas of z/OS system management.
acf2src
IBM® z/OS® Management Facility (z/OSMF) provides system management functions in a task-oriented web browser-based user interface with integrated user assistance, so that you can manage the day-to-day operations and administration of your z/OS systems. By streamlining some traditional tasks and automating others, z/OSMF can help to simplify some areas of z/OS system management.
z/OSMF includes the following components:
  • z/OSMF nucleus
  • Core (recommended) services, such as administration tasks, workflow, and notification tasks.
  • Optional services, such as the ISPF, Sysplex Management, and Capacity Provisioning services.
  • Advanced configurations, such as the autostart capability or the ICSF services
To configure z/OSMF for CA ACF2, you first prepare the CA ACF2 environment and define authorizations for the z/OSMF nucleus and core services. You then define authorizations for the optional services and advanced configurations as needed for your site's z/OSMF implementation. The services that you add depends on your site's goals.
A high-level overview of the configuration process for z/OSMF
Some services jobs (for example, ACFMFWM and ACFMFCP) create roles and groups for providing authorizations to users. To help you connect users to the roles and groups that you created when executing the other jobs, CA ACF2 provides the ACFMFAUT job. For ACFMFAUT to work successfully, those roles and groups
must
already exist. Therefore, run the ACFMFAUT job last.
The following table lists the z/OSMF security jobs for CA ACF2. These jobs reside in the
your_hlq
.CAX1JCL0 data set.
z/OSMF Area To Be Configured
Description
Security Job Name in
your_hlq
.CAX1JCL
Nucleus
Nucleus
ACFMFNU
Notifications task
Core service
ACFMFNF
z/OS data set and file REST services
Core service
ACFMFRF
z/OS jobs REST services
Core service
ACFMFRJ
Swagger service
Core service
ACFMFSW
TSO/E address space services
Core service
ACFMFTS
z/OSMF administrative tasks
Core service
ACFMFAT
z/OSMF settings service
Core service
ACFMFST
z/OSMF Workflows task
Core service
ACFMFWF
All of the above
Nucleus, plus all core services
ACFMFSEC
Capacity Provisioning service
Optional service
ACFMFCP
Cloud Provisioning services
Optional service
ACFMFPR
Console services
Optional service
ACFMFGC
Incident Log service
Optional service
ACFMFIL
ISPF service
Optional service
ACFMFIS
Network Configuration Assistant service
Optional service
ACFMFCA
Resource Monitoring service
Optional service
ACFMFRM
Security Configuration Assistant service
Optional service
ACFMFSA
Software Management service
Optional service
ACFMFDM
Sysplex Management service
Optional service
ACFMFSP
ACFMFDC
Workload Management service
Optional service
ACFMFWM
z/OS Encryption Readiness Technology (zERT) Network Analyzer
Optional service
ACFMFNA
Use the autostart capability
Advanced configuration
ACFMFAS
Use ICSF services
Advanced configuration
ACFMFIC
Use AT-TLS connections
Advanced configuration
ACFMFTL
Create the z/OSMF key ring and certificate
Advanced configuration
ACFMFSK
Configure the Common Event Adapter (CEA) server
Advanced configuration
ACFMFCEA
Configure the Common Information Model (CIM) server
Advanced configuration
ACFMFCFZ