Purpose Of AEPWDATA2 In Top Secret Recovery File

Products

• Top Secret

Issue/Introduction

Could you please give an explanation of what the AEPWDAT2 data's purpose is? This is seen in the TSS REPLACE PASSWORD commands when running TSSRCVR1 on a system using AES 256 encrypted passwords.

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

For the recovery file, with AES 256 encrypted passwords, what is supplied on the recovery file statements is a set of values that is supplied to the TSS command processor which allows Top Secret to recreate the password encryption algorithm identically to when the password initially stored on the security file.