Previous Topic: ECC Keys and ICSFNext Topic: CHKADDRS Support for Kerberos


IDMAP Cleanup Utility (TSSCHKDN)

We have added the TSSCHKDN batch utility, which identifies invalid distinguished names (DNs) for CA Top Secret IDMAP users implementing secondary distinguished names. The CHKADDRS field allows address checking in tickets for the Kerberos server running on z/OS 1.13 operating system or higher. Use this utility to more efficiently identify IDMAPDN values in IDMAP records that are invalid for z/OS 1.13.

For additional information, see the Report and Tracking Guide.