ACID created long ago never became inactive and was able to sign on

Products

• Top Secret
• Top Secret - VSE

Issue/Introduction

An ACID created with PASS(xxxxxx,,EXP) is able to sign on for the first time over a year after being created. INACTIVE(30) is set in the Top Secret parameter file.

Resolution

It doesn't matter in this scenario what the INACTIVE parameter is set to. The counter does not start until the ACID signs on and becomes active and the password expires. After signing on and changing the password, the ACID would then have to be inactive for 30 days after the password has expired. At this point, access will be denied and the ACID will become suspended.

Also note that an ACID does not become suspended until a sign on is attempted. There must be a check against the ACID to determine that it has been inactive for too long.