Problem for changing password when MFA and PASSWORDPREPROMPT(ON) are active

Document ID : KB000113441
Last Modified Date : 18/09/2018
Show Technical Document Details
Introduction:
PASSWORDPREPROMPT is set to ON in the IKJTSO member and when MFA is activated, the field for changing the password is not displayed at logon
Question:
When parameter PASSWORDPREPROMPT is set to ON in the IKJTSO member and when MFA is activated, the field for changing the password is not displayed at logon and the users who are not using MFA cannot change their password (unless it is expired).
If we type the command "tss modify(MFA(RADIUS(no)))", the field for changing the password is well displayed at logon.
I have first opened a ticket at IBM for this problem.
Apparently, for this problem, IBM has developed a PTF for RACF (UA93096 - superseeded by UA93600).
I suppose that a similar correction has to be applied for Top Secret? 
Environment:
z/os
Answer:
The Top Secret PTF you require for this is SO03858.