Replace Password Shows Interval Of 231 When PWEXP=90 In Top Secret

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

When issuing  TSS REPLACE(acid) PASSWORD(?,,EXP) the interval shows as 231 on a TSS LIST(acid) DATA(PASS) command. For example:

 ACCESSORID =acid   NAME       = name        
 PASSWORD   =           EXPIRES    = 09/23/20  INTERVAL   = 231        
 PHRASE     =          EXPIRES    = 08/02/20  INTERVAL   = 180         
                                                                         
The control option for PWEXP shows:
PWEXP(090)

 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The ACID was created with only a PASSPHRASE. When giving the ACID a password after it was already created, the correct command is to ADD the password:

TSS ADD(acid) PASSWORD(?,,EXP)

If a REPLACE command is used when the acid never had a PASSWORD, then the INTERVAL will show as 231.