content_image/990467.jpg
The approach that we describe in this Redbooks document is to do the SSH key generation in z/OS USS. 

## 4.2.4 Create RACF groups 

We created three RACF groups by using the commands that are shown in Example 4-1: 

## 4.2.5 Create RACF user IDs 

ADDGROUP zcxprvg OMVS(AUTOGID) DATA('zCX Prov Group') ADDGROUP zcxstcg OMVS(AUTOGID) DATA('zCX STC Group') ADDGROUP zcxadmg OMVS(AUTOGID) DATA('zCX Admin Group') 

We then created the user IDs shown in Table 4-2. 

<img src='content_image/990467.jpg'>

We issued the RACF commands that are shown in Example 4-2 to define the three user IDs. 

ADDUSER ZCXPRV1 PASSWORD(NEW2DAY) + NAME('zCX Provision User 1') + OWNER(HAIMO) UACC(ALTER) DFLTGRP(ZCXPRVG) + AUTHORITY(JOIN) GRPACC + TSO(ACCTNUM(ACCNT#) PROC(IKJACCNT) SIZE(2096128) MAXSIZE(0) + UNIT(SYSALLDA) COMMAND(ISPPDF)) + OMVS(AUTOUID HOME(/u/zcxprv1) PROGRAM(/bin/sh)) ADDUSER ZCXSTC1 + NAME('zCX STC User 1') + OWNER(HAIMO) UACC(ALTER) DFLTGRP(ZCXSTCG) + AUTHORITY(JOIN) GRPACC + NOPASSWORD NOOIDCARD + TSO(ACCTNUM(ACCNT#) PROC(IKJACCNT) SIZE(2096128) MAXSIZE(0) + UNIT(SYSALLDA) COMMAND(ISPPDF)) + OMVS(AUTOUID HOME(/u/zcxstc1) PROGRAM(/bin/sh)) ADDUSER ZCXADM1 PASSWORD(NEW2DAY) + NAME('zCX Admin User 1') + OWNER(HAIMO) UACC(ALTER) DFLTGRP(ZCXADMG) + AUTHORITY(JOIN) GRPACC + TSO(ACCTNUM(ACCNT#) PROC(IKJACCNT) SIZE(2096128) MAXSIZE(0) + UNIT(SYSALLDA) COMMAND(ISPPDF)) + OMVS(AUTOUID HOME(/u/zcxprv1) PROGRAM(/bin/sh)) 

