CA TPX Session Management for z/OS

Expand all | Collapse all

TPX to use Passtickets

Jump to Best Answer
  • 1.  TPX to use Passtickets

    Posted 04-24-2018 12:03 PM


    We would like to implement CA TPX Passticket feature with CA Advanced Authentication Mainframe. 

    Regarding  TPX documentation, there is a necessity to use a solution such as CA SSO to generate Passtickets. 


    Is it possible to implement Passticket feature without CA SSO or equivalent product? Is there any circumvention?


    Thank you, 


  • 2.  Re: TPX to use Passtickets
    Best Answer

    Broadcom Employee
    Posted 04-26-2018 11:01 AM

    PassTicket is supported by CA TPX. (Additionally, Multi- factor Authentication is also supported by CA TPX)

    In the Mainframe environment, passticket is generated by a  PGM that is embedded within z/OS.

    One can write / code your own PGM to generate passticket.


    Depending on which ESM (External Security Manager) you implement (CA ACF2, CA TSS or IBM RACF) the

    method to implement passticket may differ.

    CA TPX interfaces with all three ESM's to assist in Passticket implementation.

    You do not need to implement Multi Factor Authentication to implement passticket.

    Both are mutually exclusive.


    CA AAM and / or IBM MFA, can be used as a Multi-factor Authentication engine with CA TPX to implement passticket

    in the mainframe environment.


    CA TPX Support


  • 3.  Re: TPX to use Passtickets

    Posted 05-25-2018 07:34 AM

    Thank you for your explanation. Will help a lot.