IBM Security Z Security

 View Only
  • 1.  MFA - No Factor-wide Data

    IBM Champion
    Posted Thu June 01, 2023 07:41 AM
      |   view attached

    We have followed all the steps in the documentation to set up MFA, and given necessary access to all profiles required. However, when we execute AZFEXEC and enter STC we receive the following message:

    No Factor-wide Data

    The screen shot is attached.

    Has anyone else experienced this and if so, how did you resolve the problem please?

    Thanks,



    ------------------------------
    Anji Stephens
    ------------------------------

    Attachment(s)

    pdf
    No Factor-Wide Data.pdf   119 KB 1 version


  • 2.  RE: MFA - No Factor-wide Data

    IBM Champion
    Posted Fri June 02, 2023 05:57 AM

    Some background information:

    We are doing a TSS to RACF conversion. MFA is working correctly on TSS, but once converted to RACF we receive the message:

    No Factor-wide Data

    when we execute AZFEXEC and enter STC. We have followed all steps in the MFA manuals.

    Any help will be gratefully received.

    Thanks,



    ------------------------------
    Anji Stephens
    ------------------------------



  • 3.  RE: MFA - No Factor-wide Data

    Posted Fri June 02, 2023 07:16 AM

    Searching the web, this message seems related to missing profiles in the MFADEF and FACILITY classes, or missing access on these. Please check those again. Also a log of access attempts from SMF could help determine the problem.



    ------------------------------
    Sander De Graaf
    ------------------------------



  • 4.  RE: MFA - No Factor-wide Data

    IBM Champion
    Posted Fri June 02, 2023 08:50 AM

    Thank you Sander, we will check again.



    ------------------------------
    Anji Stephens
    ------------------------------



  • 5.  RE: MFA - No Factor-wide Data

    Posted Tue June 06, 2023 10:09 AM

    Hi Anji,

    Sander's advice was accurate.  It sounds like the FACTOR.AZFSTC profile may be missing from the MFADEF class, or that the User ID executing the AZFEXEC panel lacks sufficient authority to IRR.RFACTOR.MFADEF.AZFSTC in the FACILITY class.  In order to enter and save new STC settings via the panel, the User ID will need UPDATE authority to the FACILITY class profile.



    ------------------------------
    Jared Hunter
    ------------------------------



  • 6.  RE: MFA - No Factor-wide Data

    IBM Champion
    Posted Wed June 07, 2023 11:24 AM

    Thank you Jared, I'll check that.



    ------------------------------
    Anji Stephens
    ------------------------------