← Back to IBM z/OS TSS Security Technical Implementation Guide

V-223889

CAT II (Medium)

The CA-TSS PPEXP Control Option must be properly set.

Rule ID

SV-223889r1038967_rule

STIG

IBM z/OS TSS Security Technical Implementation Guide

Version

V9R8

CCIs

CCI-004066

Discussion

Any password, no matter how complex, can eventually be cracked. Therefore, passwords need to be changed periodically. If the operating system does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the operating system passwords could be compromised.

Check Content

From the ISPF Command Shell enter:
TSS MODIFY STATUS

If the PPEXP Control Option will conform to the following requirements, this is not a finding.

PPEXP(60)

Fix Text

Configure the PPEXP Control Option value to conform to the following requirements.

PPEXP(60)

Example:

TSS MODIFY PPEXP(60)