We are running two sysplexes, in each ACF2 we defined an applid with the same SSKEY-Value, is it possible to generate a passticket on Sysplex A and validate the passticket on Sysplex B?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

We are running two sysplexes, in each ACF2 we defined an applid with the same SSKEY-Value, is it possible to generate a passticket on Sysplex A and validate the passticket on Sysplex B? 

Environment

Release:
Component: ACF2MS

Resolution

The same SSKEY security key, should be specified to both the application generating the PassTicket, and the target application which will be using the PassTicket. So if the generation of the PassTicket is on one Sysplex and the PassTicket is to be used on another Sysplex then the same SSKEY should be used on both Sysplex A and B.