ACF2 PSWD GSO record value must be set to require at least one uppercase character be used.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-223501 | ACF2-ES-000840 | SV-223501r1001105_rule | CCI-004066 | medium |
| Description | ||||
| Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. | ||||
| STIG | Date | |||
| IBM z/OS ACF2 Security Technical Implementation Guide | 2025-06-24 | |||
Details
Check Text (C-223501r1001105_chk)
From the ISPF Command Shell enter:
ACF to enter ACF2 Command shell
enter
SET CONTROL(GSO)
LIST PSWD
If NOPSWDUC is listed, this is a finding.
Fix Text (F-25162r500637_fix)
Configure the GSO option "PSWDUC" to "YES".