CA Top Secret Security for z/os CA RS 1704 Service List

Transcription

1 CA Top Secret Security for z/os CA RS 1704 List Description Type RO93932 CICS SIGNON WITH PASSTICKET FAILS WITH BACKGROUND USER ** PRP ** RO94168 MODIFY MESSAGE TSS0962 FROM LEVEL E TO W PTF RO94686 MESSAGE TSS0626E AFTER FIX RO93059 *HIP/PRP* RO94718 TSS CMD GENERATED FROM ARCHIVE FAILS WITH TSS0243E PTF RO94909 TSS9046I RDT SYNCHRONIZATION AFTER RO92696 PTF RO94913 TSS REPLACE PHRASE ABENDS AFTER RO92696 IF CPF-ED ** PRP ** RO94971 MFA RSA WITH PASSTICKET PROCESS MAY FAIL PTF RO95026 ADD LOGGING OF TSS COMMANDS TO SMF ATF PTF The CA RS 1704 service count for this release is 8

2 CA Top Secret Security for z/os 2 CA RS 1704 List for FMID Description Type RO93932 CICS SIGNON WITH PASSTICKET FAILS WITH BACKGROUND USER ** PRP ** RO94168 MODIFY MESSAGE TSS0962 FROM LEVEL E TO W PTF RO94686 MESSAGE TSS0626E AFTER FIX RO93059 *HIP/PRP* RO94718 TSS CMD GENERATED FROM ARCHIVE FAILS WITH TSS0243E PTF RO94909 TSS9046I RDT SYNCHRONIZATION AFTER RO92696 PTF RO94913 TSS REPLACE PHRASE ABENDS AFTER RO92696 IF CPF-ED ** PRP ** RO94971 MFA RSA WITH PASSTICKET PROCESS MAY FAIL PTF RO95026 ADD LOGGING OF TSS COMMANDS TO SMF ATF PTF The CA RS 1704 service count for this FMID is 8

3 CA Top Secret Security for z/os CA RS PTF RO93932 RO93932 RO93932 M.C.S. ENTRIES = ++PTF (RO93932) CICS SIGNON WITH PASSTICKET FAILS WITH BACKGROUND USER PROBLEM DESCRIPTION: A CICS passticket signon user can fail if the user is already signed on in the background. This problem shows when the password interval for the user has expired. This also resolves an ABEND in TSSSFR00 at offset x'd70'. The following message has been reported: DFHCE3525 Your password has expired. Please type your new password. The TSSSFR00 ABEND has been reported as S0C4-11 in DFHXSAD offset x'12d8' with fix RO92771 applied. The user signon fails. Reset the user pasword. PRODUCTS AFFECTED: CA Top Secret for z/os Release 16.0 TSSMVS 9911 Copyright (C) 2017 CA. All rights reserved. R00230-TSS160-SP1 DESC(CICS SIGNON WITH PASSTICKET FAILS WITH BACKGROUND USER FMID () PRE ( RO81843 RO84794 RO86945 RO91603 RO92771 ) SUP ( AC90345 AR92771 RO80102 RO89828 TR80102 TR89828 TR93901 TR93932 ) ++HOLD (RO93932) SYSTEM FMID() REASON (DYNACT ) DATE (17083) PURPOSE Load module into LLA and activate USERS User loging on with PassTickets AFFECTED KNOWLEDGE 1. Console commands REQUIRED 2. Top Secret administration ACCESS 1. Console authority REQUIRED 2. TSS administrative authority SMP APPLY, LLA REFRESH, restart CA Top Secret with TSS,,,REINIT

4 CA Top Secret Security for z/os CA RS PTF RO94168 RO94168 RO94168 M.C.S. ENTRIES = ++PTF (RO94168) MODIFY MESSAGE TSS0962 FROM LEVEL E TO W PROBLEM DESCRIPTION: Modify the 'TSS0962E MAXUSER EXCEEDED - XREF TABLE FULL' from an "E" message level to a "W" (warning Message TSS0962E is issued when the XREF table (governed by the MAXUSER parameter on the facility) is full. The XREF table contains a list of signed on users for that address space. When the table is full, TSS issues the message once to inform one that the MAXUSER parameter maybe set to low. After the TSS0962W message is issued, new users are able to signon, however, their acids will not be able to be refreshed via the TSS REFRESH command. The address space continues to process normally. Increase the MAXUSER parm on the facility. PRODUCT(S) AFFECTED: CA Top Secret for z/os Release 16.0 CA Top Secret for z/os Release 15.0 TSSMVS 9915 Copyright (C) 2017 CA. All rights reserved. R00235-TSS160-SP1 DESC(MODIFY MESSAGE TSS0962 FROM LEVEL E TO W FMID () PRE ( RO83104 RO84794 RO86945 RO88603 RO88796 RO89334 RO92696 RO92771 ) SUP ( AR88603 BR88603 RO89210 RO89889 RO90784 TR89210 TR89691 TR89889 TR90753 TR90784 TR94168 ) ++HOLD (RO94168) SYSTEM FMID() REASON (DYNACT ) DATE (17076) PURPOSE ISSUE message TSS0962W instead of TSS0962E USERS All users of MULTIUSER address space, such as IMS, CICS AFFECTED KNOWLEDGE 1- SMP/E 2- z/os Systems Programming REQUIRED 3- Security Administration ACCESS SMP/E CSI libraries REQUIRED LLA Refresh and REINIT of TSS

5 CA Top Secret Security for z/os CA RS PTF RO94686 RO94686 RO94686 M.C.S. ENTRIES = ++PTF (RO94686) MESSAGE TSS0626E AFTER FIX RO93059 PROBLEM DESCRIPTION: After RO93059, a TSS ADD/REPLACE command specifying both UID and DFLTGRP will fail with message TSS0626E. As a result, the UID that was specified or that was selected via UID(?), will show on TSS WHOHAS UID(*) but will not be attached to the acid. Example : TSS ADD(USERA) HOME(/u/USERA) GROUP(omvsgRP) DFLTGRP(omvsGRP) UID(?) In order to remove the UID from the WHOHAS listings one needs to execute the following scenario: Failed command: TSS ADD(USERA) GROUP(OMVSGRP) DFLTGRP(OMVSGRP) UID(3301) UID(3301) was added to WHOHAS information but not the acid. Cleanup: Add the UID : TSS ADD(USERA) UID(3301) Remove the UID : TSS REM(USERA) UID(3301) TSS0626E DEFAULT GROUP NOT DEFINED OR IS NOT IN USER'S LIST OF GROUPS TSS0301I ADD FUNCTION FAILED, RETURN CODE = 8 The command fails and an unattached UID is associated with the acid in the UID table. Add the Group and DFLTGRP in separate commands as follows: TSS ADD(USERA) GROUP(OMVSGRP) UID(3301) TSS ADD(USERA) DFLTGRP(OMVSGRP) PRODUCT(S) AFFECTED: CA Top Secret for z/os Version 16.0 TSSMVS 9924 Copyright (C) 2017 CA. All rights reserved. R00244-TSS160-SP1 DESC(MESSAGE TSS0626E AFTER FIX RO93059 FMID () PRE ( RO84794 RO86945 RO92696 ) SUP ( AR93059 RO79659 RO85956 RO90186 RO91707 RO93059 TR79659 TR85956 TR90186 TR91707 TR93059 TR94686 ) ++HOLD (RO94686) SYSTEM FMID() REASON (DYNACT ) DATE (17068) PURPOSE Correct an error in fix RO93059 USERS User that have applied fix RO93059 AFFECTED KNOWLEDGE 1- SMP/e REQUIRED 2- z/os Systems Programming 3- z/os Operator Commands ACCESS SMP/e CSI libraries REQUIRED

6 CA Top Secret Security for z/os CA RS PTF RO94686 SMP APPLY, LLA REFRESH and restart CA Top Secret

7 CA Top Secret Security for z/os CA RS PTF RO94718 RO94718 RO94718 M.C.S. ENTRIES = ++PTF (RO94718) TSS CMD GENERATED FROM ARCHIVE FAILS WITH TSS0243E PROBLEM DESCRIPTION: If APPLDATA exists on a PERMIT such as APPLDATA = ABC123,DEF456, then a TSS LIST() ARCHIVE INTO generates the following command: TSS PERMIT(userid) OTRAN(CEMT) ACCESS(EXECUTE) - APPLDATA(ABC123,DEF456) This command requires single quotes around the APPLDATA values: APPLDATA('ABC123,DEF456') in order to execute successfully. If executed, the above command generated by ARCHIVE will fail with: TSS0243E INVALID SUBFIELD DATA - DEF456 TSS0301I TSS FUNCTION FAILED, RETURN CODE = 4 The command fails with message TSS0243E INVALID SUBFIELD DATA. Add single quotes around the APPLDATA values. For example: TSS PERMIT(userid) OTRAN(CEMT) ACCESS(EXECUTE) - APPLDATA('ABC123,DEF456') PRODUCT(S) AFFECTED: CA-TOP SECRET-MVS Release 16.0 TSSMVS 9925 Copyright (C) 2017 CA. All rights reserved. R00245-TSS160-SP1 DESC(TSS CMD GENERATED FROM ARCHIVE FAILS WITH TSS0243E FMID () SUP ( RO79894 RO91186 TR79894 TR91186 TR91840 TR94718 ) ++HOLD (RO94718) SYSTEM FMID() REASON (DYNACT ) DATE (17074) PURPOSE Load module into LLA and activate USERS All AFFECTED KNOWLEDGE 1. Console commands REQUIRED 2. Top Secret administration ACCESS 1. Console authority REQUIRED 2. TSS administrative authority SMP APPLY, LLA REFRESH and restart CA Top Secret with TSS,,,REINIT

8 CA Top Secret Security for z/os CA RS PTF RO94909 RO94909 RO94909 M.C.S. ENTRIES = ++PTF (RO94909) TSS9046I RDT SYNCHRONIZATION AFTER RO92696 PROBLEM DESCRIPTION: With the introduction of fix RO92696, a new RDT class was introduced, MFADEF, with rescode X'15F'. If the rescode X'15F' is currently being used by another RDT class, at the start of TSS, the following message will occur: TSS9046I RDT SYNCHRONIZATION FAILED: RESNAME/RESCLASS MISMATCH TSS9046I RDT SYNCHRONIZATION FAILED: RESNAME/RESCLASS MISMATCH at TSS startup. The new RDT class (MFADEF) will not be added to the security file. None PRODUCT(S) AFFECTED: CA Top Secret for z/os Version 16.0 TSSMVS 9928 Copyright (C) 2017 CA. All rights reserved. R00247-TSS160-SP1 DESC(TSS9046I RDT SYNCHRONIZATION AFTER RO92696 FMID () PRE ( RO89334 RO92696 ) SUP ( RO80064 RO86294 RO89936 RO92811 RO94298 TR80064 TR86294 TR89936 TR92489 TR92800 TR92811 TR94298 TR94909 ) ++HOLD (RO94909) SYSTEM FMID() REASON (DYNACT ) DATE (17073) PURPOSE Load module into LLA and activate USERS All AFFECTED KNOWLEDGE 1. Console commands REQUIRED 2. Top Secret administration ACCESS 1. Console authority REQUIRED 2. TSS administrative authority SMP APPLY, LLA REFRESH and restart CA Top Secret

9 CA Top Secret Security for z/os CA RS PTF RO94913 RO94913 RO94913 M.C.S. ENTRIES = ++PTF (RO94913) TSS REPLACE PHRASE ABENDS AFTER RO92696 IF CPF-ED PROBLEM DESCRIPTION: After RO92696, if a TSS REPLACE PHRASE command is CPFed to another LPAR, the command abends on the receiving LPAR. TSS9190A CA-TSS COMMAND PROCESSOR ABEND S0C4 IN TSSAUTH1+305A4 TSSAUTHZ S0C4 at 2ADD75A4 LMOD TSSAUTH CSECT TSSAUTH2 +00E5A4 TSS N/A TSS The command fails and the Phrase is not updated on the receiving LPAR. Manually issue the command on the failing system. PRODUCT(S) AFFECTED: CA-TOP SECRET-MVS Release 16.0 TSSMVS 9927 Copyright (C) 2017 CA. All rights reserved. R00248-TSS160-SP1 DESC(TSS REPLACE PHRASE ABENDS AFTER RO92696 IF CPF-ED FMID () PRE ( RO79659 RO82138 RO82305 RO84794 RO85956 RO86945 RO90186 RO91002 RO91707 RO92619 RO92696 RO92967 RO93059 RO93757 RO94686 ) SUP ( BR92696 RO94101 TR91002 TR92609 TR92619 TR92967 TR93757 TR94101 TR94913 TR95109 TR95191 ) ++HOLD (RO94913) SYSTEM FMID() REASON (DYNACT ) DATE (17087) PURPOSE Resolve abend using Passphrase with MFA support installed USERS All user that are using Pasphrase and have MFA support AFFECTED installed. KNOWLEDGE 1- SMP/E 2- z/os Systems Programming REQUIRED 3- Security Administration ACCESS SMP/E CSI libraries REQUIRED LLA Refresh and REINIT of TSS

10 CA Top Secret Security for z/os CA RS PTF RO94971 RO94971 RO94971 M.C.S. ENTRIES = ++PTF (RO94971) MFA RSA WITH PASSTICKET PROCESS MAY FAIL PROBLEM DESCRIPTION: Passticket processing under MFA RSA may cause token users to be suspended on the RSA server. "Authentication method failed" results. With MFA RSA active and Passticket setup for an application, Passticket processing may result in MFA RSA logon failures on the RSA server. MFA RSA user may get suspended or locked out by RSA server. None. PRODUCT(S) AFFECTED: CA Top Secret for z/os Version 16.0 TSSMVS 9929 Copyright (C) 2017 CA. All rights reserved. R00250-TSS160-SP1 DESC(MFA RSA WITH PASSTICKET PROCESS MAY FAIL FMID () PRE ( RO83104 RO84794 RO86945 RO88603 RO88796 RO89334 RO92696 RO92771 ) SUP ( AR88603 BR88603 RO89210 RO89889 RO90784 RO94168 TR89210 TR89691 TR89889 TR90753 TR90784 TR94168 TR94971 ) ++HOLD (RO94971) SYSTEM FMID() REASON (DYNACT ) DATE (17079) PURPOSE Fix problem with MFA RSA and pass ticket processing. USERS MFA RSA users with pass ticket processing. AFFECTED KNOWLEDGE 1- SMP/E 2- z/os Systems Programming REQUIRED 3- Security Administration ACCESS SMP/E CSI libraries REQUIRED LLA REFRESH and TSS REINIT

11 CA Top Secret Security for z/os CA RS PTF RO95026 RO95026 RO95026 M.C.S. ENTRIES = ++PTF (RO95026) ADD LOGGING OF TSS COMMANDS TO SMF ATF ENHANCEMENT DESCRIPTION: Add logging of TSS commands to SMF and or ATF via TSS Control Option LOG. New options for SMF: LOG(CMDS) and/or ATF: LOG(CMDA None. This is an enhancement. Additional SMF or ATF log entries if LOG(CMDS) or LOG(CMDA) are specified. None. This is an enhancement. PRODUCT(S) AFFECTED: CA Top Secret for z/os Version 16.0 TSSMVS 9920 Copyright (C) 2017 CA. All rights reserved. R00251-TSS160-SP1 DESC(ADD LOGGING OF TSS COMMANDS TO SMF ATF FMID () PRE ( RO80995 RO82138 RO83157 RO84470 RO84794 RO85843 RO86552 RO86945 RO87918 RO88415 RO88932 RO89334 RO92581 RO92696 RO92854 RO93298 ) SUP ( RO81160 RO87515 RO89682 RO90626 RO92808 TR81160 TR84431 TR87515 TR89682 TR90626 TR92808 TR95026 ) ++HOLD (RO95026) SYSTEM FMID() REASON (DYNACT ) DATE (17079) PURPOSE Enhancment to log TSS commands to SMF and or ATF USERS Customers who turn on LOG(CMDA) AND OR LOG(CMDS) AFFECTED KNOWLEDGE 1- SMP/E 2- z/os Systems Programming REQUIRED 3- Security Administration ACCESS SMP/E CSI libraries REQUIRED LLA Refresh and REINIT of TSS

12 CA Top Secret Security for z/os CA RS 1704 Product/Component Listing Product Family Product Release Security CA TOP SECRET FOR Z/OS The CA RS 1704 Product/Component Count for this release is 1

13 CA Top Secret Security for z/os All CA RS Levels List CA RS Level FMID CAR1704 RO95026 RO94971 RO94913 RO94909 RO94718 RO94686 RO94168 RO93932 CAR1703 RO94517 RO94383 RO94298 RO94101 RO93840 CAR1702 RO93979 RO93757 RO93744 RO93398 CAR1701 RO93171 RO92888 RO92584 CAR1612 RO93298 RO93059 RO92967 RO92772 RO92771 RO92742 RO92581 RO92412 RO92198 RO92092 RO92039 CAKOG01 CAKOG01 CAR1611 RO92854 RO92811 RO92809 RO92808 RO92696 RO92675 RO92619 RO92560 RO92502 RO91873 RO91186 RO88880 CAR1610 RO91454 RO91447 CAR1609 RO91707 RO91702 RO91603 RO91469 RO91248 RO91172 RO90979 RO90633 CAKOG01 CAR1608 RO91002 RO90784

14 CA Top Secret Security for z/os All CA RS Levels List CA RS Level FMID RO90627 RO90626 RO90186 RO89750 RO88433 RO86556 CAKOG01 CAR1607 RO90358 RO90317 RO90165 RO89936 RO89828 CAR1606 RO90184 CAKOG01 RO90069 RO89965 RO89889 RO89888 RO89682 RO89668 RO89233 CAR1605 RO89361 RO89334 RO89210 RO89203 CAR1604 RO88969 CAKOG02 RO88968 RO88932 RO88848 RO88796 RO88651 RO88603 RO88551 RO88473 RO88415 RO87918 RO87883 RO87515 CAR1603 RO88130 RO87961 RO87881 RO87875 RO87826 CAKOG01 CAR1602 RO87827 RO87738 RO87735 RO86945 RO86559 RO86552 RO86294 RO85890