TPX Session Management for z/OS

 View Only
  • 1.  TPX to use Passtickets

    Posted Apr 24, 2018 12:03 PM


    We would like to implement CA TPX Passticket feature with CA Advanced Authentication Mainframe. 

    Regarding  TPX documentation, there is a necessity to use a solution such as CA SSO to generate Passtickets. 


    Is it possible to implement Passticket feature without CA SSO or equivalent product? Is there any circumvention?


    Thank you, 


  • 2.  Re: TPX to use Passtickets
    Best Answer

    Broadcom Employee
    Posted Apr 26, 2018 11:01 AM

    PassTicket is supported by CA TPX. (Additionally, Multi- factor Authentication is also supported by CA TPX)

    In the Mainframe environment, passticket is generated by a  PGM that is embedded within z/OS.

    One can write / code your own PGM to generate passticket.


    Depending on which ESM (External Security Manager) you implement (CA ACF2, CA TSS or IBM RACF) the

    method to implement passticket may differ.

    CA TPX interfaces with all three ESM's to assist in Passticket implementation.

    You do not need to implement Multi Factor Authentication to implement passticket.

    Both are mutually exclusive.


    CA AAM and / or IBM MFA, can be used as a Multi-factor Authentication engine with CA TPX to implement passticket

    in the mainframe environment.


    CA TPX Support


  • 3.  Re: TPX to use Passtickets

    Posted May 25, 2018 07:34 AM

    Thank you for your explanation. Will help a lot.