What does LOCKTIME(0) do?

Document ID : KB000011842
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

If the facility parameter is set to LOCKTIME(0), does this mean the User or ACID will time out upon connectivity of a specific facility?
Does Locktime restrict the User from entry into a facility?

Answer:

LOCKTIME locks a terminal at the set interval for a terminal that is inactive. Users have to enter their password if they wish to continue using their session. Example: User signs on in the morning and steps away for an hour lunch. When the user returns, they are prompted to enter their password so they can continue using their session with LOCKTIME set to 20. When the user steps away for lunch, after 20 minutes, the terminal will lock which prevents unauthorized use of the terminal until the user returns and enters their password.

LOCKTIME(0) disables terminal locking for they FACILITY.

LOCKTIME is set at the FACILTIY level and affects all users within the FACILITY.

LTIME is just like LOCKTIME but is set at the user level and overrides LOCKTIME at the FACILITY level. Example:
TSS ADD(JOE) LTIME(10)

If LOCKTIME is set to 30, the users LTIME will override LOCKTIME and lock the terminal after 10 minutes.

The following discusses terminal locking:

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/implementing-in-cics-and-other-interfaces/implementing-security-for-tso/tso-security/terminal-locking

LTIME is documented at:

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/implementing-in-cics-and-other-interfaces/implementing-security-for-tso/tso-security/terminal-locking

LOCKTIME is documented at:

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/using/specifying-control-options-to-modify-your-security-environment/facilitycontrol-system-facility-processing