MASTER was not signed on but shows as issuing PSUS command.

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

When running a Changes report I can see that a PSUS command was issued by the MASTER Security acid, but the MASTER Security acid was not signed on. How can the Master issue the command when it is not signed on?

 

 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

Only the MSCA can issue a PSUS. This means that the acid receiving the PSUS exceeded the password threshold as determined in the control option PTHRESH.

Since there is no administrator watching and counting the number of password attempts a user makes, the ability to suspend the acid for exceeding the password threshold is given to the MSCA.

The suspension is automatically done and is logged as being done by the MSCA.