About Changing z/OS Passwords from Client Computers

To change z/OS passwords from client computers, set the DB2 extended security option (EXTSEC) to YES. The default DB2 value for extended security is NO. There are two ways to set the extended security option to YES:

• In the DSNTIPR installation panel, change EXTENDED SECURITY to YES.

• In the DSN6SYSP macro within the DSNZPARM creation job, set option EXTSEC to YES.

Setting the extended security option to YES enables the following two functions:

• Users on client workstations can change their z/OS passwords without signing onto TSO.

• Siebel CRM receives descriptive error codes generated by DB2 when security violations occur.