In my personal experience as a RACF administrator, ZOWE is the most confusing
and complicated product (regarding security configuration) I have encountered.
IMHO, its documentation is scattered and lacks the clarity that one expects for
the Mainframe platform.
Juan
El martes, 11 de marzo de 2025, 08:06:24 a.m. GMT-3, Matt Hogstrom
<[email protected]> escribió:
What parts of Zowe are you installing? Unfortunately, Zowe is like z/OSMF
where it is a collection of services and not a singular thing so it can be
confusing.
API Mediation Layer is probably the most complicated setup in that it requires
a set of certificates for TLS as well as client authorization depending on on
how you are going to use it. I believe that you have to use TLS but you can
use self-signed certificates rather than ones that use a public Root CA.
Zowe System Services - is a REST API endpoint that provides RESTful access to
many z/OS and Zowe Services. This is the front end for …
ZWEISRV is the authorized STC that is called for PC services in z/OS and is
used by the ZSS.
The Desktop uses the ZSS to interact with z/OS
You’ll likely also need z/OSMF services depending on the security posture you
are using and the services you want. For instance, the Zowe Explorer for
VSCode uses z/OSMF for access to files and other z/OS services.
The Zowe CLI runs as a client on your laptop and interfaces with z/OSMF for
many functions.
What is your first priority in terms of Zowe capability that you want to use
and it will be easier to guide you?
The net is that you don’t need to install and configure everything but only the
services needed for a given capability.
--
Matt Hogstrom
“To achieve great things two things are needed: a plan, and not quite enough
time.”
- Leonard Bernstein
> On Mar 11, 2025, at 02:44, Peter
> <[email protected]> wrote:
>
> Hello
>
> I have started to explore about installing zowe.
>
> I have got all the files required dor zowe installations and customisation.
>
> Here I have disabled certificate but still it looks for PKCS12 from the
> yaml JSON file.
>
> Can I completely disable certificate need for zowe ? Or it is prerequisite?
>
> Peter
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
