Use of SHA2 SSL Certificates with CA XCOM for z/OS 12.0

Products

• XCOM Data Transport
• XCOM Data Transport - z/OS
• XCOM - SUPPORT

Issue/Introduction

Will XCOM for z/OS 12.0 SHA2 certificates?

Note - will still have XCOM using OpenSSL on 3 production LPARs (due to compatibility problems with older downstream XCOM servers). All other XCOM z/OS servers have been converted to SystemSSL.

Environment

Release : 12.0

Component : CA XCOM Data Transport for z/OS

Resolution

SHA2 certificates are supported by XCOM as long as you have the release of XCOM on all servers that support the correct TLS.

IBM System SSL supports TLS 1.0, 1.1, and 1.2 and v3.0 as long as things are configured correctly using the SSL_METHOD= parameter.

Please keep in mind that support for SHA2 depends on SSL and not XCOM.