CICS Explorer authentication with Multi-Factor Authentication (MFA)

I am not aware of any specific support for multi-factor authentication with CICS Explorer. But, to send any password value greater than 8 characters in length would require a z/OS Explorer credential to be created that specifies a password phrase. The External Security manager would also need to be configured to allow the userid specified in the credential to specify a password phrase.

The IBM Explorer for z/OS documentation topic on Defining connection credentials describes the ability to specify a password phrase in the credential. The credential can be used in a CICS management client interface (CMCI) connection or other host connections.

If you are using IBM Multi Factor Authentication on z/OS with RACF you might also want to refer to topic MFA considerations for the RACF password and password phrase in the RACF documentation.

If IBM Level2 support is still needed, can you open a service request and provide more details on the environment involved and any external symptoms:

• What external security manager is being used?

• Is your MFA implemented using password phrases?

• What z/OS version is used?

• What CICS TS version are you connecting the CICS Explorer to?

• Is the CICS Explorer connection a CMCI connection, and if yes, is the connection to a CICSPlex SM WUI server CMCI port or to an SMSS single CICS TS region TCPIPSERVICE?

• Are there any security related error messages in the CICS TS region where you are attempting to connect with a password greater than 8 characters?

• Are you receiving any errors in the CICS Explorer itself indicating the connection failed?

Support might also need you to reproduce the error and collect some diagnostics from possibly both the CICS Explorer as well as the host.