Passticket signon fails with a DRC 009 or invalid password.
TSSUTIL and SECTRACE show a DRC 09 which is invalid password and typical for passticket failures.
Typical causes for this is not being authorized correctly to PTKTDATA resource or APPL name is not the correct name being used. The APPL name must be the name of the application signing on with the passticket.
User is authorized correctly to PTKTDATA and using the correct APPL name.
Release : 16.0
Component : CA Top Secret for z/OS
Another reason that the passticket signon can fail is when the userid is passed to generate the passticket and it is not in uppercase but lowercase which will cause the passticket to be generated incorrectly. z/OS doesnt support mixed case user ids. Ids must be upper case.