Top Secret Support for IBM MFA

Products

• Top Secret

Issue/Introduction

What Top Secret 16.0 maintenance is required to support IBM's MFA product?

Environment

Release : 16.0

Resolution

The following TSS 16.0 fixes should be applied for IBM MFA:
RO92696 - SUPPORT IBM MULTI-FACTOR AUTHENTICATION (MFA) 
RO92675 - TOLERATION MAINTENANCE IN PREPARATION FOR IBM MFA SUPPORT
RO92854 – ABEND S0C4 DURING CPF OF A CASECAUT RESOURCE AFTER RO92696
RO94913 - TSS REPLACE PHRASE ABENDS AFTER RO92696 IF CPF-ED
RO96977 - ENHANCEMENTS TO MULTI-FACTOR AUTHENTICATION (MFA) SUPPORT 
RO97041 - TSS0319E INVALID SPECIFICATION FOR KEYWORD PASSWORD
SO00132 - SUPPORT FOR IBM MFA RADIUS FACTORS
SO04368 - ABILITY TO DELETE MFA FACTOR RECORDS FROM TSS VSAM FILE
SO16294 - SUPPORT MFA OUT-OF-BAND, AZFCERT1, AZFPASS1, INBAND COMPOUND
LU00372 - DSKEY PARAMETER SPECIFIED ON A TSS ADD COMMAND IS IGNORED
LU00910 - SUPPORT FOR IDENITY TOKENS (IDT) AND IBM MFA COMPOUND UPDATE
LU01634 - AFTER PTF LU00910, TSO LOGON FAILS WITH MESSAGE TSS7070E
LU01685 - AFTER PTF LU00910, ABEND S0C4 IN TSSKID+1E6 DURING LOGON
LU01759 - CREATE USING COMMAND WITH PASSWORD FAILS AFTER SO16294
LU01839 - ABEND S0C4 IN TSSRSVCS+1674 DURING FTP IBM MFA LOGON
LU02263 - SUPPORT FOR R_FACTOR SERVICE - GET CACHE TOKEN CREDENTIAL
LU02403 - IBM MFA COMPOUND IN-BAND GETS INVALID PASSWORD W/MIXED CASE
LU02803 - ABEND S0C4 IN TSSKROUT+2AA INVALID @ACEE IBM MFA FTP
LU03416 - UPDATES TO IBM MFA GENERIC RADIUS FACTOR PROCESSING 
LU04674 - SECURITY OR INTEGRITY PROBLEM
LU05282 - UPDATES TO HANDLING MULTIPLE IBM MFA OUT-OF-BAND FACTORS
LU05406 - ABEND S0C4 IN IBM MFA AZF#IN01 DURING AZFTOTP1 ENROLLMENT
LU05572 - ABEND S047 DURING EXECUTION OF MFA AZFBULK AZFPROV2.SH
LU07029 - MFA USER GETTING SUSPENDED WITHOUT PASSWORD IN CICS
LU08096 - AAM MFA RADIUS PASSWORD SEPARATOR NOT COMPAT WITH FTP PHRASE
LU09664 - FIX ISSUE RELATED TO MFA FOR TSS UNLOCK
LU09665 - FIX ISSUE RELATED TO MFA FOR TSS UNLOCK
LU09766 - STREAMLINE ADDITION OF NEW MFA FACTORS AND POLICIES 
LU09933 - MFA LOGON FAILS INVALID PASSWORD/PHRASE IF MFACTIVE=FACILIT
LU09967 - MFA USER WITH PHRASEONLY UNABLE TO SIGNON WITH A PASSTICKET
LU09968 - SAFOEADM S378 AT 0AD344A8 LMOD TSSOEADM CSECT TSSOEADM +0A40
LU10336 - MFA USERS UNABLE TO SIGNON WHEN MFABYPASS IS PERMITTED