ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Setting up Message Service for TAMz in a Sysplex environment

book

Article ID: 187526

calendar_today

Updated On:

Products

CIS COMMON SERVICES FOR Z/OS 90S SERVICES DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS COMMON PRODUCT SERVICES COMPONENT Common Services CA ECOMETER SERVER COMPONENT FOC EASYTRIEVE REPORT GENERATOR FOR COMMON SERVICES INFOCAI MAINTENANCE IPC UNICENTER JCLCHECK COMMON COMPONENT LDAP SERVER FOR Z/OS Mainframe VM Product Manager CHORUS SOFTWARE MANAGER CA ON DEMAND PORTAL CA Service Desk Manager - Unified Self Service PAM CLIENT FOR LINUX ON MAINFRAME MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME GRAPHICAL MANAGEMENT INTERFACE WEB ADMINISTRATOR FOR TOP SECRET Xpertware MF - MISC OLD CODES SERVICE ASSURE GENERIC UNISERVICE FOR CICS GENERIC UNISERVICE II Output Management Web Viewer

Issue/Introduction

Installing the TAMz product in a sysplex and need the CCS Message Service to propagate the ELEVATE commands across systems.

Have installed CA Common Services (CCS) R15 on these systems and am attempting to configure the Message Service.  

1. Support AT-TLS for certificate management?
2. Keyring for both TAMz and MS tasks?
3. For use in a multi-system sysplex, should we use the HA setup?

Environment

Release : 15.0

Component : CCS MESSAGE SERVICE

Resolution

Q1. Support AT-TLS for certificate management?
A1: TAMz does not currently support AT-TLS. However the CCS Message Service team has not tested with AT-TLS and currently has no specific set of notes, so it has not been tested or verified internally.
 
Q2. Keyring for both TAMz and MS tasks?
A2:  Yes...TAMz and Message Service tasks need their own keyrings.  Some certificates may be in both rings, but both tasks should have their own ring.
 
Q3. For use in a multi-system sysplex, should we use the HA setup?
A3:  If you want HA, then yes, you should use HA setup.  For initial POC, doing a single-instance install of the CCS MS Hub may be the best and simplest option.  From there, you can implement the HA setup with the lessons learned from the single-instance.