What is the highest cipher that ACF2 LDS can support (ex. AES64) for SSL?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

What is the highest cipher that ACF2 LDS can support (ex. AES64) for SSL? 

Environment

Release:
Component: ACF2MS

Resolution

The highest cipher supported by ACF2 LDS is 3DES: TLSCipherSuite 0A1613 

The ciphers associated with AES256 (first 3 - 353839) and AES128 (last 3 - 2F3233) are not supported.
TLSCipherSuite 3538392F3233 

Sites that need AES128 or better for their LDS configuration with SSL will need to use AT-TLS that is part of the TCP/IP Communication Server for z/OS. The use of AT-TLS, which enables a common policy-based approach to configure TLS across a broad range of applications, is the CA product direction for upgrading TLS capabilities in its products rather than adding new TLS capability to CA products.