Glad you got the answer, as I was about to post the same info.   We have it 
enabled now, probably the last 6 months, and right after it was done I got a 
call from the ibm service representative because "he couldn't logon".   Seems 
like poor design point, but I'm sure there is a reason for it.

Dave Jousma

Vice President | Director, Technology Engineering


Fifth Third Bank  |  1830 East Paris Ave, SE  |  MD RSCB2H  |  Grand Rapids, MI 
49546

616.653.8429
________________________________
From: IBM Mainframe Discussion List <[email protected]> on behalf of 
Mark Jacobs <[email protected]>
Sent: Tuesday, January 17, 2023 4:38:45 PM
To: [email protected] <[email protected]>
Subject: Re: HMC Help

**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

Finally got it resolved. It turns out that once the HMC MFA requirement is 
assigned to a userid, the HMC asks for a OTC for every userid, regardless of 
whether it requires the OTC or not. If not, don't enter anything in the field, 
and select logon/login. Once I removed the requirement for MFA on my test id, 
it stopped asking.

Mark Jacobs

Sent from ProtonMail, Swiss-based encrypted email.

GPG Public Key - 
https://urldefense.com/v3/__https://api.protonmail.ch/pks/lookup?op=get&[email protected]__;!!MwwqYLOC6b6whF7V!l4-yja29ogjExd2YAcOXsrPIIiBHVOQ5--mDm2R1TjymI8JrUUM-DgLqFqav84FYush8_wQQKdEvcNaLKsXlbC-XAqMULtX1wCg$


------- Original Message -------
On Tuesday, January 17th, 2023 at 1:59 PM, Mark Jacobs 
<[email protected]> wrote:


> I opened a service request on the HMC. Lets hope they can fix it soon.
>
>
>
> Sent from ProtonMail, Swiss-based encrypted email.
>
> GPG Public Key - 
> https://urldefense.com/v3/__https://api.protonmail.ch/pks/lookup?op=get&[email protected]__;!!MwwqYLOC6b6whF7V!l4-yja29ogjExd2YAcOXsrPIIiBHVOQ5--mDm2R1TjymI8JrUUM-DgLqFqav84FYush8_wQQKdEvcNaLKsXlbC-XAqMULtX1wCg$
>
>
>
>
> ------- Original Message -------
> On Tuesday, January 17th, 2023 at 1:54 PM, Carmen Vitullo [email protected] 
> wrote:
>
>
>
> > I looked around - at the older HMC version, tree style I was able to
> > view my other HMC, maybe it was not defined when we installed our Z15
> > and the new HMC version was installed but I cannot get to my other
> > HMC....currently - I hope someone has an answer for you
> >
> > for me, I call HELP to my IBM SE and they can do some magic
> >
> > Carmen
> >
> > On 1/17/2023 12:45 PM, Mark Jacobs wrote:
> >
> > > IDK, I'm remote and don't know anything about the physical layout of that 
> > > data center.
> > >
> > > Sent from ProtonMail, Swiss-based encrypted email.
> > >
> > > GPG Public Key - 
> > > https://urldefense.com/v3/__https://api.protonmail.ch/pks/lookup?op=get&[email protected]__;!!MwwqYLOC6b6whF7V!l4-yja29ogjExd2YAcOXsrPIIiBHVOQ5--mDm2R1TjymI8JrUUM-DgLqFqav84FYush8_wQQKdEvcNaLKsXlbC-XAqMULtX1wCg$
> > >
> > > ------- Original Message -------
> > > On Tuesday, January 17th, 2023 at 1:38 PM, Carmen Vitullo 
> > > [email protected] wrote:
> > >
> > > > do you have another HMC? can you access the HMC and remove the MFA
> > > > definitions from this alternate HMC?
> > > >
> > > > just thinking out-loud
> > > >
> > > > Carmen
> > > >
> > > > On 1/17/2023 12:31 PM, Mark Jacobs wrote:
> > > >
> > > > > I really mucked up our HMC. I enabled MFA on the HMC using the HMC as 
> > > > > the MFA server. Associated one userid with MFA, successfully set that 
> > > > > up and logged on to the HMC with it. Now, all the other userids, 
> > > > > including ACSADMIN are requiring an MFA OTP to logon on.
> > > > >
> > > > > HELP!!!!
> > > > >
> > > > > Sent from ProtonMail, Swiss-based encrypted email.
> > > > >
> > > > > GPG Public Key - 
> > > > > https://urldefense.com/v3/__https://api.protonmail.ch/pks/lookup?op=get&[email protected]__;!!MwwqYLOC6b6whF7V!l4-yja29ogjExd2YAcOXsrPIIiBHVOQ5--mDm2R1TjymI8JrUUM-DgLqFqav84FYush8_wQQKdEvcNaLKsXlbC-XAqMULtX1wCg$
> > > > >
> > > > > ----------------------------------------------------------------------
> > > > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > > > send email to [email protected] with the message: INFO IBM-MAIN
> > > > > --
> > > > > Carmen
> > > >
> > > > ----------------------------------------------------------------------
> > > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > > send email to [email protected] with the message: INFO IBM-MAIN
> > > > ----------------------------------------------------------------------
> > > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > > send email to [email protected] with the message: INFO IBM-MAIN
> >
> > --
> > Carmen
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to [email protected] with the message: INFO IBM-MAIN
>
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**
This e-mail transmission contains information that is confidential and may be 
privileged.
It is intended only for the addressee(s) named above. If you receive this 
e-mail in error,
please do not read, copy or disseminate it in any manner.  If you are not the 
intended 
recipient, any disclosure, copying, distribution or use of the contents of this 
information
is prohibited. Please reply to the message immediately by informing the sender 
that the 
message was misdirected. After replying, please erase it from your computer 
system. Your 
assistance in correcting this error is appreciated.




----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to