Password and Passphrase Security › Password Controls › Changing Passwords

Changing Passwords

By default, CA Top Secret allows users to change their passwords. CA Top Secret replaces the logon password prompt interface and redefines the slash (/) character to separate the current logon password and optional new password. Do not enter a password with an embedded slash (/) because the product interprets it as two entries. When implementing CA Top Secret, undefined users and users running in DORMANT or WARN mode are required to enter their CP directory password. If the user’s password contains an embedded slash, it is parsed incorrectly and logon is not allowed.

Whenever a password is changed, CA Top Secret updates the user’s security record. Passwords may also be changed by security administrators, through the TSS ADDTO and REPLACE functions. For example, a security administrator that wants to change USER01’s password from SUNNY to CLOUDY enters the following:

TSS ADD(USER01) PAS(CLOUDY)

Note: To change a user’s password, an administrator must have ACID(MAINTAIN) authority and the necessary administrative scope.