Find NOPW ACIDs For Top Secret In CIA

Products

• Top Secret

Issue/Introduction

The TSSCFILE utility is used to reload the CIADB01.* tables. Is there a way to find ACIDs Acids without a password to correct this security breach. The TSSCFILE was run under the MSCA with TSS LIST(ACIDS) DATA(PASS).

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

In CIA release 6, a new password table was added which has the following fields.

 CREATE TABLE CIA01.USERPASS

(

 sysid VARCHAR(8) NOT NULL,

 userid VARCHAR(24) FOR SBCS DATA NOT NULL,

 pswdexp DATE,

 pswdint INTEGER,

 pwpexp DATE,

 pwpint INTEGER,

 nopw CHAR(1)

   CHECK (nopw IN ('Y', ' ')),

 mfaflbck CHAR(1)

   CHECK (mfaflbck IN ('Y', ' '))

)   

If the 'nopw' value is 'Y', the acid is a NOPW acid.