Control Option Requirements › Setting CA Top Secret Control Options

Setting CA Top Secret Control Options

In addition to setting CA Top Secret control options and parameters, there are CICS‑specific security parameters that can be set to implement security. These security parameters are set via the suboptions of the FACILITY control option and are discussed in the next section.

Preparing for Mixed Case Passwords

To enable the use of mixed case passwords with CICS, update the CA Top Secret control options and security file.

To prepare for mixed case passwords:

• Use the TSSXTEND utility with the NEWPWBLOCK keyword to copy the security file. For information, see the Installation Guide.
• Update your TSS procedure to point at the new security file.
• Open your PARMFILE data set and set the NEWPW sub-option MC (mixed case).
• Provide a separate FACILITY for CICS releases capable of mixed case password entry. This facilitates diagnostic efforts and makes it possible to use the MULTIPW keyword with the facility to segregate mixed case passwords from the ALL-facility password which remains in upper case.

Using Mixed Case Passwords

If you alter an ACID ALL facility password to mixed case and attempt to sign on in an address space that does not accept mixed case passwords, the password will not match.

For information on creating a new CICS-type facility, see the section “Defining Separate Facilities for Regions".

To associate the new facility with the mixed case region assign it as the MASTFAC attribute of the associated region ACID.

Define a MULTIPW password for each ACID which will sign on to the mixed case capable region, for example:

TSS ADD(acid) PASSWORD(password,,EXP)
              FACILITY(mixable)
              MULTIPW

This:

• Adds the FACILITY(mixable) to the ACID
• Creates a password specifically for that facility
• Leaves the current password untouched
• Alters the display of the "normal" password to the ALL-facility

For example, entering the following commands from a TP monitor which does not automatically convert commands to uppercase:

TSS ADD(MULT01) PASS(cics1,,EXP) FAC(CICSTEST) MULTIPW
TSS LIST(MULT01) DATA(PASSWORD)

Produces the output:

ACCESSORID = MULT01 NAME = MULTIPW PEON USER1
ALL        =       
CICSTEST   = EXPIRES = 01/01/80  INTERVAL = 30
TSS0300I  LIST  FUNCTION SUCCESSFUL

If an ACID signs only onto monitors which accept mixed case commands, and accept mixed case passwords, it is not necessary to segregate mixed case passwords using MULTIPW. For information on MULTIPW, see the Command Functions Guide.