Can you change the passticket lifespan in CA Top Secret?

book

Article ID: 129516

calendar_today

Updated On:

Products

CA Top Secret CA Top Secret - LDAP

Issue/Introduction

Certificate passticket lifespan.

When generating a passticket, is the lifespan of the certificate configurable? Are there any limitation with SIGNMULTI which allows the passticket to be used more than once during its lifespan?

Environment

Release:
Component: TSSMVS

Resolution

IBM RACF Callable Service r_ticketserv and r_gensec is used to create the passticket and not CA Top Secret.

r_gensec and r_ticketserv currently dont have any parm setting that allows you to change the lifespan of a passticket which is about 10 minutes. The lifespan cannot be changed.

There are no restictions with SIGNMULTI during the passtickets lifespan. It can be used as many times within the same LPAR/system.