ZDT/CICS options specified in HFM3PARM

This section describes the ZDT/CICS options specified in parmlib member HFM3PARM. You can modify these ZDT/CICS options to suit your requirements.

The HFM3PARM member provides a secure location for sensitive ZDT/CICS parameters used to control, for example, audit logging. ZDT/CICS uses system macros to locate this member in the current logical parmlib concatenation, making it difficult to over-ride or bypass the contents, which can occur when using the HFM3POPT module. When used to specify SAF- rule controlled audit logging, particularly to SMF, a high level of integrity over the auditing process is possible. The HFM3PARM member can also be used to force the use of a particular version of the HFM3POPT module, by specifying a specific data set from which the module should be loaded. This can be used to prevent a knowledgeable user creating a private version of the HFM3POPT module and loading it from a data set allocated to their TSO session, thereby bypassing installation-specified parameters.

This section includes the description of the options that can be specified in the HFM3PARM member, followed by a description of the facilities that can be used to customize the HFM3PARM member. Customization is entirely optional, but might be necessary, for example, in a sysplex environment where not all z/OS® images have the same auditing requirements. It is also possible to specify different auditing options for different users using HFM3PARM statements; these changes can be made directly to the HFM3PARM member. When changes are made to the HFM3PARM member, no IPL is required and the changes become active the next time the user starts ZDT/CICS.