Retrieve password for conversion to RACF?

Document ID : KB000016009
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

Can you extracting a users password for the purpose of converting to RACF?

Question:

We are in process of converting from CA Top Secret to RACF. Based on the documentation  PWVIEWoption is no longer available.

Is there an alternate method to get the passwords?

Answer:

Currently there is no way to view or extract the password. That functionality was considered a security hole which is why it was removed a while back. This is why PWVIEW is on longer valid.

We imploy one way encryption. We dont decrypt. When you enter your password, we encrypt it first. Then we compare the encrypted password with the encrypted password stored on the security file. That is how we validate passwords. We never decrypt them for any reason once they are encrypted.