AAM - Not able to add tags for users.

book

Article ID: 185687

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - z/OS CA ACF2 - MISC CA Advanced Authentication Mainframe CA Top Secret

Issue/Introduction

Tag data for factors RADIUS_RSA or CAPAM_PIVCAC cannot be added to users even though the AAM started task is started and the message :
MFA00101 MFA Initialization Complete
has been issued. 

Cause

No RADIUS Factors are active.

Environment

Release : 16.0
Component : CA ACF2, CA TSS for z/OS

Resolution

Check the AAM started task joblog. 

If it contains a message saying MFA00560 No RADIUS Factors are active, then you need to set up the RADIUS_RSA factor before you can add RADIUS_RSA tags for the user.
If it contains a message saying MFA00560 No CAPAM_PIVCAC Factors are active, then you need to set up the CAPAM_PIVCAC factor before you can add CAPAM_PIVCAC tags for the user.  

Follow the steps in the section called;

For ACF2 - "Set Up Control Over RADIUS Authentication" :
For TSS - " Enable RADIUS Authentication Under Advanced Authentication Mainframe "

After completing:
F mfastc,APPL=RADFACTOR

Try adding the tags. If it still doesn't work, then try:

P mfastc
S mfastc,,,reinit

Try adding the tags again.