Colin, Yes, I have been editing manually too. Using manual settings I have covered AT-TLS for 1. 3270 connections, 2. CKNSERVE for zSecure connections between two z/OS systems.
I am now trying to add JES NJE to the setup. I have found this sort of sample and found at least one error in it. https://ftpdocs.broadcom.com/cadocs/0/CA%20Spool%2012%200-ENU/Bookshelf_Files/HTML/Spool_Customization_ENU/2304043.html I have attempted a correction to that, but still it does not work and I am failing to understand the error messages. So I though maybe using the configurator would help. Do you have a sample for NJE connections? I will look at your blog. (I have used your blog previously for other stuff.) Lennie -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Colin Paice Sent: 06 June 2024 17:54 To: [email protected] Subject: Re: AT-TLS Configuration assistant I tried using the attls config tool on z/osmf. It has quirks, and I gave up and copied a known config and extended it. I now edit the config file manually. I blogged about it . search for colinpaice at-atls. If you contact me offline with what you want, i may be able to create a config file. Colin On Thu, Jun 6, 2024, 17:14 Lennie Bradshaw <[email protected]> wrote: > Tom, > Thanks for your thoughts. > There is another issue for me. I use z/OS on a zPDT machine with the > z/OS system built from the ADCD system IBM supplies. As such I have no > z/OSMF nor any current need for one. > So I would like to be able to use some kind of configuration tool. > Lennie > > -----Original Message----- > From: IBM Mainframe Discussion List <[email protected]> On > Behalf Of Tom Longfellow > Sent: 06 June 2024 16:10 > To: [email protected] > Subject: Re: AT-TLS Configuration assistant > > Just a note from old experiences. > > I too hated the move from the windows version to z/OSMF but you sort of > have to. What forced me is: > > 1) IBM saying that using the windows client output is risky and may > product invalid configuration directives. > 2) Concerns that a future release of z/OS will thoroughly reject the "old" > way and be unable to implement "new" AT-TLS features > > The only counter argument is that you are on the unsupported z/OS 1.12 > system and will never move forward. Living without support comes with > these hurdles. > > I still dislike the complexity of the NCA component of z/OSMF - I have > managed to come to accept its non-intuitive quirks. z/OSMF is > handling syntax complications that I hope to never have to learn for myself. > > It could be worse, you could be trying to maintain the raw Unix text > files along with its arcane syntax. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
