ACF2

Access Control Facility 2

Enhanced Definition

A comprehensive security software package from Broadcom (formerly CA Technologies) that provides authentication, authorization, and auditing capabilities for mainframe systems. ACF2 is one of the three major External Security Managers (ESMs) for z/OS. ACF2 (Access Control Facility 2) is an **External Security Manager (ESM)** for IBM z/OS systems, developed by Broadcom (formerly CA Technologies). Its primary purpose is to provide comprehensive **access control, authentication, and authorization** services, protecting mainframe resources from unauthorized access and ensuring data integrity and system availability.

Key Characteristics

- Rule-based security model with flexible access control
- Centralized security administration and management
- Real-time security violation detection and reporting
- Integration with RACF and Top Secret environments
- Support for multi-platform security management
- Authentication: User identification and password management
- Authorization: Resource access control and permission management
- Auditing: Security event logging and compliance reporting
- Administration: User profile management and security policy enforcement
- Resource rules for dataset, transaction, and system resource protection
- UID (Universal ID) strings for user identification
- Logonid records containing user attributes and authorities
- Validation lists (VLDLST) for controlling access patterns
- SAF (System Authorization Facility) interface integration

Use Cases

- Enterprise-wide mainframe security management
- Regulatory compliance (SOX, GDPR, HIPAA)
- Protecting sensitive data and critical system resources
- Audit trail generation for security events
- Integration with identity management systems