/SECURE.E shows no secured connections

book

Article ID: 103761

calendar_today

Updated On:

Products

CA CMDB for z/OS CA NetSpy Network Performance CA NetMaster Network Automation CA SOLVE CA NetMaster Network Management for SNA CA NetMaster Network Management for TCP/IP CA NetMaster File Transfer Management

Issue/Introduction

The "Encryption Summary by Task" displays the zERT sourced counts of currently established connections using SSL, TLS, IPSec or SSH for a selected system or stack. It is reached by shortcut /SECURE.E or =D.ST.SEC.E. What can be done if there are no secured?

Environment

Release: SLOPFC00200-12.2-NetMaster-File Transfer Management
Component:

Resolution

The data to be displayed in the "Encryption Summary by Task" Panel is sourced from zERT SMF records. zERTdata focuses on important security attributes of the mechanisms that protect application traffic, especially the cryptographic protocols, algorithms, and keys. CA NetMaster NM for TCP/IP retrieves this data from the new SMF 119 subtype 11 records that zERT creates. So please check if your TCP/IP Stack generates SMF 119 zERT detail records.  This is documented in the Release Notes in Section 'Security Cipher Added to Connections List' available in docops.ca.com (https://docops.ca.com/ca-netmaster-network-management-for-tcpip/12-2/en/release-notes/updates-in-increment-03-inc03#UpdatesinIncrement03(INC03)-SecurityCipherAddedtoConnectionsList). 

Additional Information

For more details about zERT, see this IBM Knowledge Center article titled "z/OS Encryption Readiness Technology (zERT)": https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.halg001/nfsrgvhzert23.htm