How does MFA work to ensure security with RACF and other mainframe security systems?
The MFA server issues standard SAF calls to security modules. SAF compliant environments include RACF, Top Secret, and ACF/2. For each user request, the user id and password are validated, and then it is determined whether the requested access to the resource, for the type of access (read-only, write, etc) is allowed by that particular user. When the user chooses to install the MVS security routines for the VTAM server, the server load library will have to be APF authorized. These routines are written to the SAF (Security Access Facility) interface and work with RACF, Top Secret, and ACF2. The SAF interface requires that the programs and load library be APF authorized. Does the MFA Server Licensing and software enabling controls look at the CPU Serial or is it dependent on an individual CPU? If we upgrade our system and it requires a CPU swap can we simply re-install the MFA Server using our current enabling codes? Currently, the MFA Server does not look at individual CPU serial number
