A guard file controls access to the Security Center database. Only users who are named in the guard file can access the cryptographic keys and certificates stored by Security Center.

The guard file also lists the titles (name and family) of the programs which are authorized to access the Security Center database. Only programs whose titles exactly match those in the guard file can open the database. The guard file's name is *SECURITYCENTERGF. It resides on the same family as the database.

The guard file is not editable. The symbol file (<user>)SYMBOL/SECURITYCENTERGF is built when the database is built. It is created under the usercode of the user who originally connected Security Center to the server and ran the database creation wizard, and it is saved on that user's home family. The guard file is created from this symbol file.