Question & Answer
Question
What are the system prerequisites and requirements to use Multi-Factor Authentication (MFA) with CICS Explorer?
Cause
Enabling Multi-Factor Authentication requires updates to both CICS Transaction Server for z/OS (CICS TS) and the CICS Explorer. MFA is supported by the CICS management client interface (CMCI) connection to CICS TS and by the z/OS Remote System (RSE) connection to z/OS.
Answer
CICS Explorer can use MFA to connect to CICS TS using the CMCI connection type. The CMAS and the WUI region must be at CICS TS 5.4 with APAR PI87691 installed, but application owning regions (AORs) can be at older releases of CICS TS.
Prior to configuring MFA credentials, configure the WUI region to accept MFA tokens. For more information see Configuring for CICS Explorer sign-on with Multi-Factor Authentication in the CICS TS 5.4 documentation.
You must use CICS Explorer 5.4.0.4 or newer to make MFA connections. To connect to CICS with MFA, the CMCI connection must be used. To connect to z/OS with MFA (for example, to export bundles to zFS), the z/OS Remote System (RSE) connection must be used.
Use the Host Connections view to define CMCI connections and associated MFA credentials. Create a new credential first, choosing "Username with Multi-Factor Authentication" as your credential type. Each time you connect, you will be prompted to enter your password and token combination. When your session expires, you will be disconnected automatically.
The z/OS Remote System (RSE) connection username and password is configured separately when you connect to a remote system. You will be prompted for your password and token combination as required.
Related Information
Product Synonym
CICS/TS CICS TS CICS Transaction Server
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg22011867