The SSL piece for z/OS is not that difficult, but you do have to understand what is the end objective. Is it an end-to-end secure connection ? Just for TN3270 or for all connections ? I worked in brokerage for awhile and we were Testing TN3270E using certificates and keyrings.
Regards, Scott Ford Senior Host Developer | Forging Enterprise Identity | IdentityForge.com (Main) 678.266.3399 x304 | (Cell) 609.346.0399 | (Fax) 678.266.3399 [EMAIL PROTECTED] This message is for the designated recipient only and may contain priviledged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and then delete the original. Any other use of the email by you is prohibited. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Betsy Jeffery Sent: Tuesday, April 29, 2008 10:23 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Secure TN3270 Don't expect same day service. This list is not read every minite of every day by every participant. If there is anyone roosting out there doing so - they must have a lot of time on their hands. It is not a 'chat room' as in interactive. I look at the list once in the moring as I prefer the digest format. As mentioned by someone else, you don't run TLS instead of SSL, they work together as the next level of security. I did this last year under z/OS 1.7. The complete description of the tasks and how-to with examples is in the Redbook "Communications Server for z/OS V1R9 TCP/IP Implementation Volume 2: Standard Applications". PUB #is SG24- 7533. This is the latest updates to the process and operating systems. I used the same book at the 1.7 release level. Setting up the zServer side isn't enough. As others have said, you must have a client TN3270 application that can use SSL/TLS. Your certificate exchange is up to your corporate standards with regard to self-signed, management, expiration, etc. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
