The course is designed for individuals who are new to administering RACF, or those who are interested in sharpening their RACF administration skills through the use of RACF commands, RACF panels, or the Vanguard Administrator product. The class covers the theory of z/OS security and also provides three hours of hands-on lab exercises to practice what the student covers in class.

Upon completion of this course, the student will have a strong understanding of RACF and the Vanguard Administrator product, enabling them to apply their new skills as an effective RACF security administrator in a z/OS environment.

This course is designed to enhance existing RACF skills by becoming more familiar with the structure of the RACF database, understanding system settings, RACF utilities, RACF tables, and digital certificates; as well as discussing security for JES, storage, and programs.

Upon completion of this course, the student will have a strong understanding of RACF, enabling them to apply their new skills as an effective RACF security administrator in a z/OS environment.

Auditing z/OS and RACF

This course is designed for individuals that need knowledge of RACF reporting tools. The course focuses on the logging and reporting capabilities of RACF. The course not only provides theory; it also provides a realistic set of lab exercises so that students can apply knowledge learned during the discussion sessions. Course material discusses the use of RACF Utilities — IRRUT100, IRRUT200, IRRUT400, IRRRID00, and IRRDBU00, as well the use of the RACF and SMF reporting tool, ICETOOL. The course will also address the reporting capabilities of the Vanguard products — Administrator, Advisor, Analyzer, and Configuration Manager.

Upon completion of this course the student will be able to use the RACF utilities and the Vanguard products to perform RACF data base reporting functions. They will also be able to use the Vanguard Analyzer and Vanguard Administrator to perform RACF analysis, write RACF and SMF reports using ICETOOL, and use the Vanguard Advisor for SMF reports. These skills will help the student determine how effectively RACF has been implemented in their z/OS environment and be prepared to identify security exposures.

Advanced z/OS Security: z/OS Networking

This course is designed to enhance existing system and RACF skills by becoming more familiar with the structure of networking in a z/OS environment. The course explores HTTP setup, usage of LDAP, security in z/OS UNIX, the use of Digital Certificates, as well as a discussion on VPN, SSH, SSL/TLS, and AT-TLS and the differences between them.

Upon completion of this course, the student should be able to:

• Explain the reasons for transport level encryption.
• Perform RACF security functions for z/OS UNIX System Services.
• Demonstrate the use of digital certificates in RACF.
• Explain the use of SERVAUTH profiles to control port access.
• Describe the components of network security.
• Explain VPN (IPSec), Kerberos, SSH, SSL/TSL, and AT-TLS and the differences between them.
• Migrate unsecured services (such as TN3270 & FTP) to SSL/TLS protection using digital certificates.
• Transition unsecured services (such as FTP) to utilize AT-TLS, deprecating SSL 3.0 and TLS 1.0<.

Using RACF for CICS

This course is designed for individuals responsible for implementing, administering, and supporting RACF.

Three hours of hands-on lab time to practice what you have learned on our z/OS system. Upon completion of this course, the student will become proficient in using RACF to secure CICS transactions, resources, and commands.

Using RACF for DB2

Implementing Security for UNIX

This course is designed to enhance existing RACF skills by understanding the security functions provided by RACF for z/OS UNIX.

Upon completion of this course, the student will have a strong understanding of RACF security for z/OS UNIX, enabling them to apply their new skills as an effective RACF security administrator.