Search code examples
sslmainframezos

Implementing ssl on z/os

Does anybody knows how to implement SSL on the z/OS telnet server?

I've tried looking in the IBM sites and found how to implement ssl with MQ or other software's but didn't found information how to implant on z/OS itself.

Solution

  • For any telnet-connection on your z/OS-server you should have something like the following in your telnet configuration dataset:

    BEGINVTAM                               
  PORT 1234                             
  DEFAULTLUS AB.0001..AB.9999 ENDDEFAULTLUS                         
  DEFAULTAPPL TSO                     
ENDVTAM                                 
TELNETPARMS                             
  PORT 1234                       
ENDTELNETPARMS

    Simply changing PORT to SECUREPORT should be enough to enable SSL/TLS on this connection. To configure additional TLS-parameters for the connection you can add more parameters to the TELNETPARMS-section or define them in a TELNETGLOBALS-section for all ports.

    Using TTLSPORT instead will allow the use of application transparent TLS (AT-TLS) on the port which requires additional configuration in an AT-TLS policy agent (if your installation already has one running).

    For further information you should look at the "IP Configuration Reference" and "IP Configuration Guide" for the z/OS Communication Server which both have a chapter about configuring the telnet-server.