"CNZ0005I LOGON REJECTED" Logging Onto Multiple MCS Console With Top Secret

Products

• Top Secret

Issue/Introduction

MCS consoles are setup in each LPAR that require us to logon for console access. A user can logon to the MCS console one LPAR, but when the user tried to logon to the MCS console on the other LPAR, the following error message occurs:

CNZ0005I LOGON REJECTED. REASON=USERID userid IN USE ON SYSTEM ssss CONSOLE cccccccc

IBM stated:

**
A USERID is usually only allowed to be logged on to one console. However, if you want to allow an operator to log on to multiple consoles concurrently within a system or sysplex, your security administrator can enable this. When the security profile MVS.MULTIPLE.LOGON.CHECK is defined in the OPERCMDS class, an operator may log on to multiple consoles. Defining this profile allows all operators to log on multiple times. There is no limit to the number of consoles to which an operator may log on. Operators are still required to provide a password while logging on to each console.
**

How do you set this up in Top Secret?

Resolution

TSS ADD(dept) OPERCMDS(MVS.MULTIPLE.LOGON.CHECK)       (if not already done)

TSS PERMIT(acid) OPERCMDS(MVS.MULTIPLE.LOGON.CHECK)

TSS REFRESH(acid) JOBNAME(*)