Changing an ACF2 password phrase gets error - ACF00220 NEW PASSWORD PHRASE ERROR - MINIMUM NUMBER OF SPECIAL CHARACTERS

Products

• ACF2
• ACF2 - z/OS

Issue/Introduction

When attempting to change a users password phrase, the ACF2 change command gets the following message:

change testid pwphrase(123456789Ab!)

ACF00220 NEW PASSWORD PHRASE ERROR - MINIMUM NUMBER OF SPECIAL CHARACTERS

The password phrase options:

list pwphrase
 sys1 / PWPHRASE LAST CHANGED BY abcd ON mm/dd/yy-hh:mm,
                      ALLOW ALPHA(1) CMD-CHG HISTORY(0) LID MAXDAYS(0),
                      MAXLEN(40) MINDAYS(0) MINLEN(10) MINWORD(1) NUMERIC(1)
                      PWPLC NOPWPONLY PWPUC SPECIAL(1) SPECLIST() TEMP-AGE,
                      WARNDAYS(5),

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Since the Special character list is blank:
 
SPECIAL(1) SPECLIST()
 
and one special character is required, only US national (@ # $) characters are allowed.  For the ! to be allowed, it needs to be added it to the SPECLIST field.
 
CHANGE SPECLIST(!)
F ACF2,REFRESH(PWPHRASE)

Additional Information

For more information on the GSO settings for PWPHRASE, go to the Broadcom techdocs:

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/security/ca-acf2-for-z-os/16-0/administrating/administer-records/global-system-option-records-gso/password-phrase-record-pwphrase.html