The approach that we describe in this Redbooks document is to do the SSH key generation in  z/OS USS. 4.2.4 Create RACF groups 4.2.5 Create RACF user IDs We created three RACF groups by using the commands that are shown in Example 4-1: We then created the user IDs shown in Table 4-2. We issued the RACF commands that are shown in Example 4-2 to define the three user IDs. ADDGROUP zcxprvg OMVS(AUTOGID) DATA('zCX Prov Group')  ADDGROUP zcxstcg OMVS(AUTOGID) DATA('zCX STC Group')  ADDGROUP zcxadmg OMVS(AUTOGID) DATA('zCX Admin Group')  ADDUSER ZCXPRV1 PASSWORD(NEW2DAY) + NAME('zCX Provision User 1') + OWNER(HAIMO) UACC(ALTER) DFLTGRP(ZCXPRVG) + AUTHORITY(JOIN) GRPACC +  TSO(ACCTNUM(ACCNT#) PROC(IKJACCNT) SIZE(2096128) MAXSIZE(0) +  UNIT(SYSALLDA) COMMAND(ISPPDF)) + OMVS(AUTOUID HOME(/u/zcxprv1) PROGRAM(/bin/sh))  ADDUSER ZCXSTC1 + NAME('zCX STC User 1') + OWNER(HAIMO) UACC(ALTER) DFLTGRP(ZCXSTCG) + AUTHORITY(JOIN) GRPACC +  NOPASSWORD NOOIDCARD + TSO(ACCTNUM(ACCNT#) PROC(IKJACCNT) SIZE(2096128) MAXSIZE(0) +  UNIT(SYSALLDA) COMMAND(ISPPDF)) + OMVS(AUTOUID HOME(/u/zcxstc1) PROGRAM(/bin/sh))  ADDUSER ZCXADM1 PASSWORD(NEW2DAY) + NAME('zCX Admin User 1') + OWNER(HAIMO) UACC(ALTER) DFLTGRP(ZCXADMG) + AUTHORITY(JOIN) GRPACC +  TSO(ACCTNUM(ACCNT#) PROC(IKJACCNT) SIZE(2096128) MAXSIZE(0) +  UNIT(SYSALLDA) COMMAND(ISPPDF)) + OMVS(AUTOUID HOME(/u/zcxprv1) PROGRAM(/bin/sh))  Example 4-2 RACF commands to define the user IDs Table 4-2 User IDs to manage zCX Example 4-1 Create three RACF groups User ID Group Description ZCXPRV1 ZCXPRVG User ID to use in z/OSMF to provision zCX instance ZCXSTC1 ZCXSTCG User ID to run the zCX instance started task under ZCXADM1 ZCXADMG User ID to use to do first logon to zCX instance Getting started with z/OS Container Extensions 52 