CA Top Secret is the Multi-Factor Authentication resource IBMFAC(IRR.RFACTOR.) needed for PAM even if your not running MFA?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

CA Top Secret  is the Multi-Factor Authentication resource IBMFAC(IRR.RFACTOR.) needed for PAM even if your not running MFA?

 

Environment

Release:
Component: TSSMVS

Resolution

IBMFAC(IRR.RFACTOR) is not needed if not using AAM/MFA.
For CARSA or IBMRSA, SAF doesn’t issue FASTAUTH for IRR.RFACTOR.

Only when using CAPAM (and RADIUS) with AAM/MFA, the AAM STC ACID will require permission to IBMFAC(IRR.RFACTOR.MFADEF)
For example:   
TSS ADD(dept) IBMFAC(IRR.RFACTOR)
TSS PERMIT(AAMSTC) IBMFAC(IRR.RFACTOR.MFADEF.) ACCESS(UPDATE)