Correct syntax for removing IBM MFADATA Tags in Top Secret for z/OS

Products

• Top Secret for z/OS

Issue/Introduction

Following command fails when trying to remove IBM MFDATA tags

TSS REMOVE([Login ID]) MFACTOR(AZFM####) MFADATA(POLFAILCT,POLSUSP)

This article provides the required syntax for modifying or removing IBM Multi-Factor Authentication (MFA) tag data using the MFADATA keyword in Top Secret for z/OS

Environment

Top Secret for z/OS

IBM Multi-Factor Authentication (MFA)

Cause

Top Secret requires the MFADATA keyword to be specified with a specific TAG:VALUE format.

Multiple tags must be provided by repeating the MFADATA keyword rather than using a comma-separated list.

Resolution

Code the command using tag:value syntax. Provide provide the value exactly as it exists in the database. Example:

To remove the POLFAILCT and POLSUSP tags from the MFA Segment below:

FACTOR     = AZFM####     
TAGS       = POLFAILCT:100       
             POLSUSP:1           
             POLTIME:1785259172  
             CKCTCFAILCT:0       
             CKCTCSUSP:0         
             CKCTCTIME:0   

code as follows:

TSS REMOVE(ACID) MFACTOR(AZFM####) MFADATA(POLFAILCT:100) MFADATA(POLSUSP:1)