Rule ID
SV-257135r998383_rule
Version
V9R8
CCIs
Passwords such as IBM Passtickets need to be protected at all times, and encryption is the standard method for protecting such passwords. If passwords are not encrypted, they may be plainly read (i.e., clear text) and easily compromised.
From the ISPF Command Shell enter: RList PTKTDATA * SSIGNON NORACF If any profile is not defined as KEYENCRYPTED, this is a finding.
Ensure that all Passticket profiles are configured to be KeyEncrypted.