Keywords › PHRASE Keyword—Assign Password Phrase

PHRASE Keyword—Assign Password Phrase

Valid on z/OS 1.8 and above.

Use the PHRASE keyword to assign a password phrase as an alternative to PASSWORD.

If PHRASE is used to signon using RACROUTE VERIFY VERIFYX or USS initACEE, the PASSWORD and NEWPASSWORD keywords are ignored.

If PASSWORD is used to signon without PHRASE then NEWPHRASE is ignored.

The text in a password phrase can be composed of:

• Upper and lower case alphabetical characters
• Numeric characters
• Special characters included in the PPSCHAR control option

Special characters can be used regardless of whether:

• The security file is copied with NEWPWBLOCK
• NEWPW(MC) is set

There is no analog for PHRASE to MULTIPW for facility specific phrases.

This keyword has the following format:

TSS ADDTO(acid) PHRASE(phrase[,nnn][,EXPIRED]) 

phrase

Specify a quoted string delimited by apostrophes. For restrictions on user supplied password phrases, see the NEWPHRASE control option.

Specify an asterisk (*) to change the expiration interval or expired indicator keyword (EXP) without changing the existing password phrase.

Range: 9 to 100 characters

nnn

(Optional) Specifies the password phrase expiration interval. When REPLACE is used to change the password phrase and no interval is specified, the user's existing password phrase interval is retained.

Range: 0 to 255

Default: Set by the PPEXP control option (30 days)

EXPIRED

(Optional) Forces an expiration date of January 1, 1980, regardless of the date the command is executed. This forces the PHRASE into expired status and the user to enter a new password phrase in the next signon which occurs with a password phrase but without a password.

This keyword is used with:

• The commands CREATE, REPLACE, and ADDTO
• ACID(MAINTAIN) authority
• Administrators who do not have ACID(MAINTAIN) authority can add a password PHRASE to users within their scope if given UPDATE access to entity TSSCMD.USER.ADDTO.PHRASE in the CASECAUT resource class
• Administrators who do not have ACID(MAINTAIN) authority can replace a password PHRASE for users within their scope if given UPDATE access to entity TSSCMD.USER.REPLACE.PHRASE in the CASECAUT resource class