XCOM Client AT-TLS

Products

• XCOM Data Transport - z/OS

Issue/Introduction

What are the minimum requirements needed for XCOM as a client for AT-TLS secured transfers?

Environment

Release : 12.0

Component : XCOM Data Transport for z/OS

Resolution

Summarization of requirements depending on how you intend to use XCOM with AT-TLS:

1. If you intend to only use XCOM as a client with AT-TLS, then you don't need to configure XCOM for IBM System SSL. You do need to have the IBM System SSL certificates in a keyring or .kdb database and then have the AT-TLS rule reference the location of the certificates.

2. If you intend to use XCOM as a server with AT-TLS, then you need to make sure to have parameters AT-TLS= and AT-TLS_PORTS= specified in the XCOM config member. Proper AT-TLS rules must be defined as well.

3. If you intend to use XCOM as a client, server, with AT-TLS, non SSL, and SSL, then you need to configure each of the XCOM parameters. Meaning the AT-TLS, AT-TLS_PORTS, SSL_VERSION, XCOM_CONFIG_SSL, etc  parameters in the XCOM config member will require proper values. In addition to having valid IBM System SSL certificates and the proper AT-TLS rules.

Additional Information

XCOM Data Transport supports the IBM z/OS Communications Server TTLS feature as an AT-TLS aware application. Using queries, XCOM Data Transport is aware of AT-TLS encrypted TCP/IP connection details, but does not control that encryption in any way. Make sure to have applied fix SO15002 to take advantage of the feature.