Welcome
Getting Started
CICS® VR security
Security has been enhanced to protect the RCDS from being updated by any user. It is possible to specify that the users security profile must be checked before allowing certain information in the RCDS to be added, changed, or deleted.
Server security profiles
So that various access levels can be permitted for CICS® VR users you are required to define a new profile to the FACILITY class in your security product. The access levels required to perform particular functions is provided in a table.

What's new in CICS VR 6.1
CICS® VR 6.1 contains these changes.
Operating environment
CICS® VR uses logs to recover your VSAM data.
CICS VR Overview
Getting Started
- Introducing CICS® VR
  CICS® VSAM Recovery Version 6 Release 1 (CICS VR) recovers your lost or damaged VSAM data.
- Overview of CICS VR installation
  This information describes all the necessary steps to successfully set up CICS VR 6.1. It includes a detailed description of the various CICS VR components and how to set them up. The CICS VR server address space is required for batch logging, backup notification, and backout failure notification.
- Migration considerations
  Consider these general migration considerations when you migrate to CICS® VR V6.1 from an earlier release.
- Activating the CICS® VR server address space
  The CICS® VR server address space provides a communication vehicle for CICS VR and other applications. It must be active if you want to use any of these CICS VR functions.
- Setting up CICS® VR VSAM batch logging
  CICS® VR VSAM batch logging, referred to as batch logging, provides logging of updates made to VSAM data sets by batch jobs. Two types of batch logging are available, forward recovery logging and undo logging.
- CICS® VR security
  Security has been enhanced to protect the RCDS from being updated by any user. It is possible to specify that the users security profile must be checked before allowing certain information in the RCDS to be added, changed, or deleted.
  - Activating CICS® VR security
    To activate CICS® VR security, when the panel interface is used, specify the SECURITY YES value for the CICSVR_GENERAL_CONTROL parameter.
  - The security profile
    A new profile DWWCICSVR needs to be defined to the FACILITY class in your security product. The security administrator can then permit various levels of access to this profile for all users of CICS® VR.
  - Server security profiles
    So that various access levels can be permitted for CICS® VR users you are required to define a new profile to the FACILITY class in your security product. The access levels required to perform particular functions is provided in a table.
  - Automated recovery and security
    When automated recovery and security is used, specific tasks and permissions are required.
CICS® VR and CICS® TS
CICS VR Exits
Running CICS® VR forward recovery
CICS® VR forward recovery consists of a restore and then forward recovery.
Running CICS® VR backup
The information in the following topics describe how to take a backup using CICS® VR. The panels and secondary windows are in the sequence that they are displayed during a backup job generation.
Running CICS® VR reorganization
You can reorganize a VSAM sphere using CICS® VR. VSAM sphere reorganization can increase the space of a sphere and its alternate indexes. It can also change the control interval sizes for a sphere's components.
Working with other VSAM sphere list pull-down menus
The CICS® VR recovery and backup functions are typically accessed using the Utilities pull-down menu after selecting VSAM spheres.
Working with CICS® Backout Failed spheres
The CICS® Backout Failed sphere list shows the CICS spheres registered for manual recovery or reorganization after CICS notification of a backout failure.
Working with logs
Using ISMF data set lists with CICS® VR
CICS® VR is integrated with ISMF so that you can create a CICS VR recovery job for the data sets in an ISMF data set list by entering the VSAMREC line operator or list command. When you enter the VSAMREC line operator or list command, the necessary CICS VR panels are called and you can create a recovery job for the VSAM sphere.
Running CICS® VR manually
IBM® recommends that you use the CICS® VR panel interface to create recovery jobs for your VSAM spheres. Using the CICS VR panel interface eliminates the need for you to manually keep track of daily update activity, logs, backups, etc. Also, the CICS VR panel interface automatically creates the recovery JCL for you.
Running CICS® VR batch backout
The CICS® VR batch backout utility allows you to remove updates that were made to KSDS, ESDS, RRDS, and VRRDS VSAM spheres by steps in a batch job. This section describes how to run the CICS VR batch backout utility.
Understanding CICS® VR reports
The CICS® VR forward recovery and batch backout utilities produce a set of reports upon successful completion. The reports are written to the data set allocated to the DWWPRINT ddname. However, the set of reports written for the forward recovery backout utilities differ from the set of reports written for the batch backout utilities.
Understanding IBM® program support
The IBM® Customer Engineering Program Support structure helps you resolve problems with IBM products, and ensures that you can make the best use of your IBM computing systems.
Problem determination procedures
If you have to contact IBM® personnel about a CICS® VR problem, you must classify and describe the problem.
Diagnosing the causes of abends
You can determine the cause of a CICS® VR abend in a number of ways.
Reference information
The reference sections of the information contain reference information that you need when you use CICS® VR.
Glossary
The terms in this glossary are defined as they pertain to the CICS VSAM Recovery documentation.
Edition notice
This is the information for CICS VSAM Recovery for z/OS. It applies to CICS VSAM Recovery for z/OS Version 6.1, and to all subsequent versions, releases, and modifications until otherwise indicated in new editions. Make sure you are using the correct edition for the level of the product.
Download PDF
Download the PDF format documentation for CICS VSAM Recovery for z/OS 6.1

Server security profiles

So that various access levels can be permitted for CICS® VR users you are required to define a new profile to the FACILITY class in your security product. The access levels required to perform particular functions is provided in a table.

The security administrator can permit various levels of access to these profiles for any users of CICS® VR. In general, a user can have NONE, READ, UPDATE, CONTROL or ALTER as the permitted level of access for a particular function, (external service request to the CICS® VR server address space from batch jobs). If the user tries to perform a function without the correct level of access, the function is rejected with a return code 8 and a reason code of 71313E03 which states that the user is not authorized to perform this function. The user can contact the security administrator to request the correct access. In this case, the return code and the reason code can be displayed in the appropriate message, for example; in the message DWW8152I, ADR927E and IEC161I.

Table 1. Access levels required to perform particular functions
Function	Profile	Access level	Class
VSAM batch logging	CICSVRLOGGING	CONTROL	FACILITY
Logical backup notification	CICSVRBACKUP	CONTROL	FACILITY
File copy notification	CICSVRFILECOPY	CONTROL	FACILITY
CICS® backout failed notification	CICSVRCBFAILED	CONTROL	FACILITY

Example

RDEFINE FACILITY CICSVRLOGGING 
PERMIT CICSVRLOGGING ACCESS(CONTROL) CLASS(FACILITY) ID(userid)