TSSadmin Express™ | What Our Customers Are Saying

Due to the nature of the solutions we implemented, we cannot list client names.

  • Customer previously used a native TSS command that captures TSS output and allows them to browse the output. However, its functionality is minimal as compared to TSSadmin Express Smart Output that can be used with the AC Power Button™ (drill-down, Express Line™, pop-up commands to change fields, TSSUTIL violation simulation/trace).
  • TSSadmin Express is geared for customer’s “back room” staff (“master administrators”,) and provides significant analytical tools to assist them in managing CA-Top Secret.
  • Customer really likes the KLONE and the drill-down functions available using the AC Power Button.
  • TSSadmin Express Client comment: “Has more than what we expected, satisfied the requirements we needed.”
  • Client project to generate new role profiles. Using the TSSadmin Express LA, LP + KLONE to assess current access and generate commands for new role profiles reduced the amount of time needed.
  • To assist in the audit function, Customer uses TSSadmin Express WH + WHORPT to generate reports for auditors, showing who has access to specific sets of resources. Client also manipulates the report to eliminate the read-only access from these reports.
  • To enable significantly more efficient research and analysis, Client uses TSSadmin Express WH + WHOPER to convert the WHOHAS output into oneline- per-item format for easier reading.
  • Client prefers using TSSadmin Express TSSDEL command to delete/archive consultant user ID’s, then can immediately restore them if consultant returns.
  • TSSadmin Express “is a right handy tool!”
  • Research/reporting for access certification now takes 8 hrs. vs. 48 hrs.
  • To review access to a specific resource, Customer was able to produce a report in just a couple of minutes using the TSSadmin Express WH + WHORPT commands.
  • Client needed to quickly suspend all users in a department. This process took only 2 minutes using the TSSadmin Express LA + ACIDS + ACIDCOL command sequence.
  • Customer uses the MAKE user1 LIKE user2 TSSadmin Express commands to assign access to users who move to a new job function.
  • Customer uses the TSSadmin Express RUN command to execute TSS commands generated by eTrust Cleanup for Ca-Top Secret.
  • Client uses the TSSadmin Express TSSDEL command to delete and archive inactive users.
  • Using TSSadmin Express, the Client was able to reduce the run time of their violation reports from 20+ minutes to 4 minutes. Combined with the instant/automatic simulation and trace provided by the AC Power Button, this dramatically improves their ability to handle urgent requests to identify, assess and resolve critical security violations.
  • Using the TSSadmin Express CHGALERT command, Customer immediately found administrators assigning non-expiring passwords, and changes by administrators to their own ACID. Client was very excited about this new found data, to the extent that a scheduled conference call was postponed so that they could contact the administrator and retrain on these policy violations.
  • In using the TSSadmin Express KLONE command, the Client stated “it even handles cloning admin authority”. In addition, the KLONE command also accommodates fields, permissions, and various other items not included with the standard CREATE USING command.
  • TSSadmin Express Client comments:
    • “It’s a godsend!”… the product has great capabilities to enhance Top Secret administration.
    • “I helped (my co-worker) create access rules for a new xxxx function. The function was to be given to about 2000 users. I showed her how to do it with TSS Admin Express. She then went back to her desk repeated on her own and within 5 minutes, the task was done and the job was running. I would estimate that using a 30-hour job for this administrator was reduced to 5 minutes.”
    • “We perform the “MAKE user1 LIKE user2″ function manually on a regular basis when moving a user from one job function to another. This will save significant time.”
    • “There are a lot of time-saving features. It provides functionality that does not exist using native TSS commands.”
    • “An analogy would be that TSSadmin Express improves TSS administration similar to way that ISPF improves working in a TSO environment.”
    • “I have grown quite dependent on TSSadmin Express whenever I use Top Secret.”
    • The TSSadmin Express Risk Knowledge Database: “It will then identify any IDs meeting the risk criteria. Only concern is that the auditors would also love this feature. We would need to make sure the house is clean and documented before they discover it.”
    • The TSSadmin Express Alert Knowledge Database – “another capability that the Auditors would be thrilled about. When I initially viewed the file, I found that an administrator was changing passwords and not adding the password expiration parameter to the command (I made sure the admin got retrained in this area).”
    • Comparing profiles or IDs. “I found this invaluable when trying to cleanup the IDs for the xxx Group.” (About 100 IDs with multiple profiles granting the same accesses. Each ID has about 70 profiles attached and will only have about 20 upon completion).
    • “…was able to generate thousands of commands so quickly with no error rate.”
    • “Our team would greatly benefit from this tool. It has many features that would be used for completing routine tasks as well as save tremendous amounts of time on large volume tasks and tasks that require analysis.”
    • “TEX (TSSadmin Express) would be helpful with ad-hoc analysis and handling of the eTrust Cleanup data.”
    • “The ability to quickly identify any changes to a user ID or the profiles attached to that user – Such a manual analysis of the history file would take the analyst a large amount of time (If an ID has 40 profiles, this would require 40 searches). TEX (TSSadmin Express) does the analysis instantly.”
  • To assist with identifying access anomalies and standardizing access within departments, Client uses the TSSadmin Express using LAC command to compare ACIDs and identify differences within a group. This has helped to significantly reduce the time and effort required to perform this analysis.
  • Client likes the way the AC Power Button de-codes Detail Reason Codes (DRC’s) on the TSSUTIL report.
  • Client found that the TSSadmin express drill-down LIST function for ACIDs within TSS output is helpful.
  • Client found that the TSSadmin Express KLONE function is very helpful in creating new started tasks.
  • Client found that the new TSSadmin Express ColorGuard feature helps point out important aspects of the User ID.

FREE CONSULTATION

Schedule a complimentary consultation with our team of mainframe and security specialists today.