Password Masks

A mask controls the placement of consonants, vowels, numbers, and special characters within a password. The mask is enforced system‑wide for all users except the MSCA, and applies to all new passwords, including those that are randomly generated.

To define a mask, enter the command:

TSS MODIFY NEWPW(MASK=********)

********

The character type you can use in this position of the mask. Valid values are:

a—Any letter
c—Consonant
v—Vowel
n—Number
x—Non‑vowel
?—Any character

Example: define a password character mask

This example specifies that all new passwords must have:

A consonant as the first character
A vowel as the second character
A consonant as the third character
Any letter, number or special symbol for positions four, five, and six
A number for the eight character
```
TSS MODIFY NEWPW(MASK=cvc???n)
```

The password MAT2B@3 would correspond to this mask.