IBM RACF, ACF2, AS400, iSeries — credential governance on mainframe and legacy environments.
Showing 10
RACF grants access through groups, not users: ADDGROUP builds it, CONNECT enrolls the user, PERMIT binds it to a resource. How assignments, nested membership, and access decisions resolve in 2026.
RACF enforces password complexity, expiration, history, and lockout through SETROPTS PASSWORD suboperands — RULEn, INTERVAL, HISTORY, and REVOKE. The 2026 reference on the exact syntax, why PCI-DSS and SOX still mandate it even as NIST 800-63B moves the industry away from rotation and composition rules, and where RACF-level enforcement alone stops being enough.
RACF user provisioning becomes reliable when create, entitle, and deprovision actions trigger directly off HR events instead of tickets — here's how that pattern actually works on the mainframe.
iSeries (IBM i, AS/400) access issues concentrate in six diagnostic categories — password expiry, disabled user profiles, object authority, special authority, QSECOFR operations, and federation-integration friction. The 2026 reference on the diagnostic pattern for each, when reset is the right answer, and how federation-first architecture reduces recurrence.
IBM Resource Access Control Facility (RACF) has been the load-bearing access control for z/OS mainframes since 1976 and remains operationally critical at banking, insurance, government, and Fortune 500 enterprises in 2026. The comprehensive reference on user profiles, group profiles, resource profiles, dataset protection, and modern IAM integration.
New RACF administrators face a configuration surface that took decades to accumulate — options, system values, class settings, defaults across dozens of dimensions. The 2026 reference on the eight essential initial configuration areas, the discipline that produces a maintainable baseline, and the modern IAM integration handshake to plan for from day one.
IBM iSeries factory reset is a destructive operation that returns the system to shipped configuration. The 2026 reference on the four scenarios where it's actually the right answer, the many more where it's the wrong answer, the pre-reset checklist that prevents data loss, and the modern IAM integration patterns that reduce recurrence of the underlying situations.
RACF has been securing IBM mainframes since 1976. In 2026, it's still securing the systems that process most of the world's credit card transactions, airline reservations, government records, and bank settlements. The plain-English beginner's guide to what RACF is, who uses it, why it still matters in 2026, and how it fits with the modern identity stack.
Mainframes still hold the records of authority for banking, insurance, government, and healthcare. The 2026 architecture for modernizing mainframe identity — keeping RACF, ACF2, and Top Secret in place while integrating them into zero-trust governance.
RACF vs. ACF2: a 2026 mainframe security comparison covering features, scalability, cost, and how to choose the right option for your z/OS environment.
Savings Calculator
Enter your company size and see how much your help desk spends on password resets — and how much Avatier Credential Governance saves.
Avatier Credential Governance reduces your cost by
Over 1 year