ACF2 or RACF - Multi-Factor Authentication (MFA) is down and Users unable to Logon to Lpar

Products

• ACF2
• Advanced Authentication Mainframe

Issue/Introduction

We are testing at a DR site.  We have MFA with ACF2 on our sandbox LPAR.  When we brought up the DR Site LPAR, the MFA would not allow us entry into the LPAR.  We shutdown the MFA task hoping to logon with our native ACF2 password.  It would not allow us to use our ACF2 password at this point.  What is the command that would be allowed on the console to shutdown the MFA task and revert back to the ACF2 password.  

 

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

To Stop the multi-factor authentication started task issue Console command:

STOP MFASTC    (Name of your multi-factor authentication started task)

 

To Start the multi-factor authentication started task issue Console command:

START MFASTC  (Name of your multi-factor authentication started task)

 

Give the user's Logonid PWFALLBACK for RACF.

Give the user's Logonid FALLBACK for ACF2.

 

When CA AAM or IBM MFA are inactive, RACF checks if the user has PWFALLBACK and ACF2 checks if the user has FALLBACK.

If they do, then they can use a password or phrase or passticket for logon.