AT-TLS policy for the Tomcat server used by the CA VIEW webviewer.

Products

• COMMON SERVICES FOR Z/OS

Issue/Introduction

You are installing View Webviewer and installing the Apache Tomcat server that is distributed with Common Components and Services for z/OS.

If using AT-TLS for the SSL Connection, are there any recommendations for specifying any possible policies?

Environment

Release : Common Services r15.0
Component : APACHE TOMCAT

Cause

Question on "best practices" policy (policies) for use with AT-TLS

Resolution

There are no specific policies for use with AT-TLS.  The only required setups are:

• The server certificate KEYSIZE should be 2048 to use the current level of TLS in Tomcat.
• If using SAF key rings, the cert should be added to the key ring with USAGE(PERSONAL).
• Configure any policies as per site requirements
• Configure the TOMCAT region as Non-Secure to allow AT-TLS to handle any security 

Additional Information

Review the Common Services r15.0 documentation for details on configuring the TOMCAT region for use with AT-TLS.