Setting up Message Service for TAMz in a Sysplex environment

Products

• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• Common Services

Issue/Introduction

Installing the TAMz product in a sysplex and need the CCS Message Service to propagate the ELEVATE commands across systems.

Have installed CA Common Services (CCS) R15 on these systems and am attempting to configure the Message Service.  

1. Support AT-TLS for certificate management?
2. Keyring for both TAMz and MS tasks?
3. For use in a multi-system sysplex, should we use the HA setup?

Environment

Release : 15.0

Component : CCS MESSAGE SERVICE

Resolution

Q1. Support AT-TLS for certificate management?

A1: TAMz does not currently support AT-TLS. However the CCS Message Service team has not tested with AT-TLS and currently has no specific set of notes, so it has not been tested or verified internally.

 

Q2. Keyring for both TAMz and MS tasks?

A2:  Yes...TAMz and Message Service tasks need their own keyrings.  Some certificates may be in both rings, but both tasks should have their own ring.

 

Q3. For use in a multi-system sysplex, should we use the HA setup?

A3:  If you want HA, then yes, you should use HA setup.  For initial POC, doing a single-instance install of the CCS MS Hub may be the best and simplest option.  From there, you can implement the HA setup with the lessons learned from the single-instance.