Confirm Top Secret CPF Propagation Of Commands/Password Changes Versus Password Only

Products

• Top Secret

Issue/Introduction

CPF is turned on for 2 systems. Commands are only propagated from system A to system B, but not from our system B to system A. Password changes are propagated both directions. How do you confirm this is true?

Resolution

Issue TSS MODIFY STATUS(CPF) on both systems and make sure they show:

On system A:

TSS9661I CA-Top Secret CPF      Status
 CPF(ON)
…
 CPFNODE(sysb)           Status(ACTIVE,SPOOL)

On system B:

TSS9661I CA-Top Secret CPF      Status
 CPF(ON)
…
 CPFNODE(sysa)           Status(ACTIVE,SPOOL,PWDONLY)

 ‘PWDONLY’ in the ‘Status’ field means this system is only propagating password changes. 

NOTE: Password changes made through TSS commands (ie TSS REPLACE(acid) PASSWORD(xxxx) are not sent in this case.