Resource Access Control Facility
| Company type | Software |
|---|---|
| Industry | Computer security software |
| Founded | 1976 |
| Founder | IBM |
| Products | Access management and auditing software for z/OS and z/VM |
| Parent | IBM |
| Website | https://www.ibm.com/security/zsecurity/racf |
Resource Access Control Facility (RACF) is a security software solution developed by IBM that delivers access management and auditing capabilities for the z/OS and z/VM operating system environments. Initially launched in 1976, it was later rebranded as z/OS Security Server (commonly still referred to as RACF by many mainframe specialists).
Its principal functionalities encompass:
- User authentication and identification through user IDs and passwords
- Categorization and safeguarding of system assets
- Administration of permissions for protected resources
- Regulation of access methods to secured components
- Comprehensive logging and auditing of resource and system access
Beyond basic permission settings, RACF supports advanced security policies that enable administrators to assign permissions based on file name patterns, which automatically apply to subsequently created files.
Community
A vibrant support network surrounds RACF, anchored by the RACF-L LISTSERV operated by the University of Georgia. This professional mailing list serves as a platform for security experts to exchange insights and discuss RACF-related topics. Participation is available via email at RACF-L@LISTSERV.UGA.EDU or through the web interface at https://listserv.uga.edu/scripts/wa-UGA.exe.
Books
For those beginning their journey with RACF, the essential reference is Mainframe Basics for Security Professionals: Getting Started with RACF, authored by Ori Pomerantz, Barbara Vander Weele, Mark Nelson, and Tim Hahn, first issued in December 2007.
Evolution
Over time, RACF has advanced to incorporate contemporary security technologies such as digital certificates, public key infrastructure (PKI), LDAP connectivity, and support for case-sensitive user IDs and passwords—facilitating better integration with platforms like Unix and Linux. The IBM Z hardware architecture works closely with RACF; for example, digital certificates are securely stored within IBM 4764 cryptographic processors designed to resist tampering. Critical mainframe components like IBM Db2 utilize RACF to implement multi-level security (MLS).
RACF’s main market competitors have historically included ACF2 and TopSecret, both currently under CA Technologies’ portfolio.