Return to IBM Mainframe Security, IBM Mainframe Pentesting, Password Management, Windows Password Management, macOS Password Management, iOS Password Management, Android Password Management, IBM Mainframe Password Management, AWS Password Management, Azure Password Management, GCP Password Management, Docker Password Management, Kubernetes Password Management, Passwordless - Passkeys, Authentication, IAM - Identify Management, Personal Identification Number (PIN), Password, Password Manager, Single Signon, MFA-2FA, Biometric Authentication, Microsoft Hello, Apple Face ID, Facial Recognition, Iris Recognition, Retinal Scan, Eye Vein Verification, Recognition, Fingerprint Recognition
* '''RACF (Resource Access Control Facility)''': A security management product that provides authentication and authorization services. * '''ACF2 (Access Control Facility 2)''': Another security system that manages access control and authentication. * '''Top Secret''': A security product that provides comprehensive security and access control. * '''Password Management Tools''': Utilities and commands within the mainframe environment for managing user passwords.
* '''Password Encryption''': Uses strong encryption to secure passwords stored in the security databases. * '''Password Policies''': Enforce rules such as minimum length, complexity, and expiration periods through security products like RACF, ACF2, and Top Secret. * '''Password Management Tools''': Provide commands and interfaces for users and administrators to change passwords, set expiration dates, and configure password policies. * '''Authentication Mechanisms''': Integrates with various authentication methods, including multi-factor authentication and LDAP.
```JCL //PASSWORD JOB (ACCT#),'CHANGE PW',CLASS=A,MSGCLASS=A //S1 EXEC PGM=IKJEFT01 //SYSTSPRT DD SYSOUT=* //SYSTSIN DD * ALUPASSWORD( ) /* ```
```JCL //POLICY JOB (ACCT#),'SET POLICY',CLASS=A,MSGCLASS=A //S1 EXEC PGM=IKJEFT01 //SYSTSPRT DD SYSOUT=* //SYSTSIN DD * SETR PASSWORD(MINCHANGE(1) MINLEN(8) MIXEDCASE) /* ```
* Change a password: ```JCL //PASSWORD JOB (ACCT#),'CHANGE PW',CLASS=A,MSGCLASS=A //S1 EXEC PGM=ACF //SYSPRINT DD SYSOUT=* //SYSIN DD * CHANGEPSWD( ) /* ```