Command to verify MULTIFACTOR AUTHENTICATION (MFA) SUPPORT

Products

• VM:Secure for z/VM

Issue/Introduction

ENH: MULTIFACTOR AUTHENTICATION (MFA) SUPPORT;

We just applied the new support available in PTF SO12552

Environment

Release : 3.2

Component : CA VM:Secure for z/VM

z/VM 7.1

Cause

I got the fix downloaded and put it on my Sandbox. Is there anything (message, query, etc) that I can do to confirm that the version is running with the fix?
I checked VMSERVER and VMPTFS to see it was deployed to alternate and alternate is what is being called.
Just would like to be extra sure on this one.

 

Resolution

Take a look at the new MFA command;

VMSECURE MFA QUERY
or
VMSECURE MFA STATUS


Use the MFA command to display or modify the current MFA configuration. There are two forms of the command. One is for acting on all defined MFA connections, and the other is for acting on a specific MFA connection defined in the MFA configuration.



The other "eye catcher" you can use to verify everything is installed is to issue:

---> VMSECURE QCPCFG

The (new) last line of the output should be the highlighted line:

<<< snip >>>
ACITRACE ON 63

MIXEDPW8 specified - Traditional 8-Byte Passwords will be managed in Mixed Case.

CP password prompts will use LINEDIT=NO
Ready; T=0.01/0.01 10:08:03

<<< snip >>>

Additional Information

The new MFA command is documented at:

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/traditional-management/ca-vm-secure-for-z-vm-with-security/3-2/reference/command-reference/mfa-command.html