ACF2 Password Phrase (PWP) forcing user to change the password at the next logon

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

Is there a way to expire a temporary password phrase (PWP)? Is there an password phrase (PWP) equilavent to password PSWDFR?

Need the ability to force the user to change the temporary password phrase given by the Help Desk.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Cause

Need the ability to force the user to change the temporary password phrase given by the Help Desk.

Resolution

In order to force a user to change a temporary PWPHRASE, the user profile record for pwphrase needs to be updated to include PWP-EXP. PWP-EXP will force the user to change the pwphrase.

Example: Hereby find list output of ABCD123 logonid

ACF
SET PROFILE(USER) DIV(PWPHRASE)
 PROFILE
change ABCD123 PWP-EXP

PWPHRASE / ABCD123 LAST CHANGED BY ABCD123 ON 10/12/19-11:32
                       PWP-EXP PWP-HST(2) PWP-TOD(10/12/19-11:32)
                       PWPA1TOD(10/12/19-11:32) PWPA2TOD(10/12/19-11:32)
 PROFILE

Note: The User profile record for pwpharase can also be administered in LID setting as if the user profile information is part of the logonid record.
          The User profile record pwphrase can be created, changed, displayed, and deleted with a logonid request. For example:

ACF
SET LID
 LID
change ABCD123 PWP-EXP

PWPHRASE / ABCD123 LAST CHANGED BY ABCD123 ON 10/12/19-11:32
                       PWP-EXP PWP-HST(2) PWP-TOD(10/12/19-11:32)
                       PWPA1TOD(10/12/19-11:32) PWPA2TOD(10/12/19-11:32)
 LID