IBM Passtickets must be configured to be KeyEncrypted.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-257135 | SRG-OS-000073-GPOS-00041 | RACF-ES-000860 | SV-257135r998383_rule | 2026-06-03 | 9 |
Description
Passwords such as IBM Passtickets need to be protected at all times, and encryption is the standard method for protecting such passwords. If passwords are not encrypted, they may be plainly read (i.e., clear text) and easily compromised.
ℹ️ Check
From the ISPF Command Shell enter:
RList PTKTDATA * SSIGNON NORACF
If any profile is not defined as KEYENCRYPTED, this is a finding.
✔️ Fix
Ensure that all Passticket profiles are configured to be KeyEncrypted.