IBM Support

VM66324: FOUNDATIONAL SUPPORT FOR MULTIFACTOR AUTHENTICATION

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • Foundational support for multi-factor authentication
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All z/VM administrators with an External     *
    *                 Security Manager (ESM) installed, and who    *
    *                 plan to exploit future Multifactor           *
    *                 Authentication (MFA) support.                *
    *                                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    ****************************************************************
    * RECOMMENDATION: APPLY PTF                                    *
    ****************************************************************
    This APAR implements a new LOGON FALLBACK option. This
    allows External Security Managers (ESMs) to provide fallback
    capabilities for future z/VM systems enabled for Multifactor
    Authentication (MFA).
    

Problem conclusion

Temporary fix

Comments

  • The LOGON command is extended by the FALLBACK option.
    Use of the option is relayed to the ESM via an updated ACIPARMS
    block. It allows authorized users to LOGON to a z/VM system
    with a traditional ESM-managed password or password phrase.
    Specifics of FALLBACK, including authorization for its use,
    will be defined by the ESM.
    This option is intended to provide disaster or error recovery
    capabilities for future z/VM systems enabled for
    multifactor authentication.
    

APAR Information

  • APAR number

    VM66324

  • Reported component name

    VM CP

  • Reported component ID

    568411202

  • Reported release

    710

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2019-09-18

  • Closed date

    2019-12-04

  • Last modified date

    2020-01-23

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UM35569

Modules/Macros

  • ACIPARMS HCPGIN   HCPLGNBK HCPLON   HCPLOP
    

Fix information

  • Fixed component name

    VM CP

  • Fixed component ID

    568411202

Applicable component levels

  • R710 PSY UM35569

       UP19/12/05 P 2001  

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG27M","label":"APARs - z\/VM environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"710","Edition":"","Line of Business":{"code":"LOB16","label":"Mainframe HW"}}]

Document Information

Modified date:
23 January 2020