Is the Master Acid required for TPAM? Or is there an alternative

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Can you use another acid aside from the MSCA with the started task acid for TPAM?

Is the MSCA required for the TPAM started task so it can make password changes for user?

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

The MSCA is not really required for the TPAM started task. You can use an acid with similar privileges as the MSCA.

You can create an SCA type TSS Administrator with all the bypass attributes.

You can use the MSCA if you want, but generally speaking the MSCA should be used sparingly. That is why most sites create a SCA type acid with similar admin privileges as the MSCA and us it, instead of the MSCA.

Some site put the MSCA and password in an envelop and keep it in a safe, only to be used in an emergency.