Can the Tomcat included with OM Web Viewer 12.1 use RACF certificates in a keyring?

Products

• Output Management Web Viewer

Issue/Introduction

Can the version of Tomcat supplied with the OM Web Viewer be configured to use SSL certificates stored in an external security manager like IBM® RACF®? The Tomcat doc listed with OM Web Viewer doesn’t say, but the CCS Tomcat from Common Services seem to have that capability.

I can configure with a Java keystore but I’d rather use IBM® RACF® if it’s supported.

Environment

• Output Management Web Viewer 12.1
• Apache Tomcat®
• COMMON COMPONENTS AND SERVICES FOR Z/OS 15.0
• IBM® RACF®

Resolution

No, the Tomcat delivered with OM Web Viewer is the vanilla Tomcat from Apache Tomcat which does not support keyrings.

If you want to use IBM® RACF® certificate management, you'll need to get Tomcat from COMMON COMPONENTS AND SERVICES FOR Z/OS 15.0. Then install Web Viewer using the WAR option then deploy to the CSS Tomcat.

Additional Information

Please see this documentation from COMMON COMPONENTS AND SERVICES FOR Z/OS 15.0.

Deploy and Configure CCS Apache Tomcat

Configure Apache Tomcat to use SSL with Keyrings

You may need to log in to view this content.