Passwords › Random Password Generation

Random Password Generation

CA Top Secret can generate random passwords according to a specified password mask.

Random password generation:

• Is the only method to change a password if a user has the NOPWCHG attribute or if the NU sub-option of the NEWPW control option is specified.
• Allows a user to change their password multiple times within one day.
• Is controlled by the FACILITY control option RNDPW sub-option. CA Top Secret specifies RNDPW by default for the TSO, IMS, CA‑IDMS, CA‑Roscoe, and CICS facilities.

Before the random password generation option is used, specify:

• A password mask
• The minimum days using the MINDAYS= sub-option of the NEWPW control option

To automatically generate a password after the current one expires set the RN sub-option of the NEWPW control option.

Example: random password generation

This example specifies the RNDPW, RN, MASK, and MINDAYS sub-options using the FACILITY and NEWPW control options.

TSS MODIFY FACILITY(fac=RNDPW))

TSS MODIFY NEWPW(RN,MASK=cvcv,MINDAYS=5)