Pass Phrase Standards Configuration In Top Secret

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

What parameters are needed to meet all of the following password phrase "standards" as published on the IBM Knowledge Center page?

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1. The length of a password phrase can be between 9 and 100 characters.

2. The user ID must not be part of the password phrase.

3. At least 2 alphabetic characters must be included.

4. At least 2 non-alphabetic characters such as numbers, punctuation marks, and special characters must be included.

5. Valid characters are as follows:
    - Alphabetic uppercase and lowercase characters.
    - Numbers 0 through 9.
    - National and special characters such as # , @ , and $ .
    - Punctuation characters.
    - Blank spaces.

6. No more than 2 consecutive characters can be the same.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Environment

Release : 16.0

Component : Top Secret for z/OS

Resolution

1. The length of a password phrase can be between 9 and 100 characters.

Answer:
NEWPHRASE(MIN=9,MAX=100)

See NEWPHRASE—Implement Password Phrase Rules for more information.

2. The user ID must not be part of the password phrase.

Answer:
NEWPHRASE(ID)
    
3. At least 2 alphabetic characters must be included.

Answer:
NEWPHRASE(MA=2)
       
4. At least 2 non-alphabetic characters such as numbers, punctuation marks, and special characters must be included.

Answer:
NEWPHRASE(SC=2)

You also need to specify the allowed special characters for a phrase via PPSCHAR control options:

PPSCHAR(list_special_charaters_allowed_to_be_used_in_phrases)

See PPSCHAR—Control Special Characters in Password Phrases for more information.

5. Valid characters are as follows:

- Alphabetic uppercase and lowercase characters.
- Numbers 0 through 9.
- National and special characters such as # , @ , and $ .
- Punctuation characters.
- Blank spaces.

Answer:
All supported, but for special characters, you need to add them to the PPSCHAR(list_special_charaters_alowed_to_be_used_in_phrases) option so the characters will be allowed to be used. When you specify blanks, it must be specified in hex.

Please see PPSCHAR documentation to see how to specify allowed special character phrase list.
        
6. No more than 2 consecutive characters can be the same.

Answer:
NEWPHRASE(NR=2)