← Back to IBM z/OS ACF2 Security Technical Implementation Guide

V-223501

CAT II (Medium)

ACF2 PSWD GSO record value must be set to require at least one uppercase character be used.

Rule ID

SV-223501r1001105_rule

STIG

IBM z/OS ACF2 Security Technical Implementation Guide

Version

V9R8

CCIs

CCI-004066

Discussion

Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.

Check Content

From the ISPF Command Shell enter:
ACF to enter ACF2 Command shell
enter 
SET CONTROL(GSO)
LIST PSWD
If NOPSWDUC is listed, this is a finding.

Fix Text

Configure the GSO option "PSWDUC" to "YES".