ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Can you change the passticket lifespan in CA Top Secret?


Article ID: 129516


Updated On:


Top Secret Top Secret - LDAP


Certificate passticket lifespan.

When generating a passticket, is the lifespan of the certificate configurable? Are there any limitation with SIGNMULTI which allows the passticket to be used more than once during its lifespan?


Component: TSSMVS


IBM RACF Callable Service r_ticketserv and r_gensec is used to create the passticket and not CA Top Secret.

r_gensec and r_ticketserv currently dont have any parm setting that allows you to change the lifespan of a passticket which is about 10 minutes. The lifespan cannot be changed.

There are no restictions with SIGNMULTI during the passtickets lifespan. It can be used as many times within the same LPAR/system.