z/VM SSL Server Update - z/VM - IBM

More documents

Recommendations

Info

Multiple SSL Server SupportConfiguration• SSLDCSSM is required to support connection caching• Data stored in a DCSS used by one SSL server pool• New virtual machine owns the DCSS• Tied through DTCPARMS to a single SSL server pool; cannot be sharedamong different pools and different TCP/IP stacks!• At a minimum, define the 191 minidisk for SSLDCSSM as a 1 cylinderminidisk• Class E privilege is required for SSLDCSSM• NAMESAVE must match the TCPIP stack virtual machine userid• The SSL DCSS Management Agent server must be defined whetherusing a single-server or multi-server SSL implementation24© 2010 IBM Corporation
Multiple SSL Server SupportConfigurationUSER SSL LBYONLY 160M 256MGPOOL LOW 1 HIGH 5 PROFILE TCPSSLUDefines a pool of userids of format SSLnnnnn (SSL00001 through SSL00005) The lower bound of an SSL pool must be specified as 1Additional SSL servers could be deployed without the need to restart theTCP/IP server:-- CP directory change to the size of the server pool-- Update the SSLLIMITS statement, if workload needs to berebalanced or if new maximum values need to be configured-- OBEYFILE or NETSTAT OBEYhttp://www.vm.ibm.com/related/tcpip/tcspecsp.html25© 2010 IBM Corporation
Page 1 and 2: Brian W. Hugenbruch, CISSPz/VM Deve
Page 3 and 4: DisclaimerThe information contained
Page 5 and 6: About SSL for z/VM5© 2010 IBM Corp
Page 7 and 8: About SSL for z/VMz/VM 5.3.0● Lin
Page 9 and 10: About SSL for z/VMPerformance Conce
Page 11 and 12: Multiple SSL Server SupportOverview
Page 13: Multiple SSL Server SupportOverview
Page 16 and 17: Multiple SSL Server SupportInstalla
Page 22 and 23: Multiple SSL Server Support- Overvi
Page 26 and 27: Multiple SSL Server SupportConfigur
Page 34 and 35: Multiple SSL Server Support34© 201
Page 40 and 41: Multiple SSL Server SupportStarting
Page 42 and 43: Multiple SSL Server SupportSSLADMIN
Page 44 and 45: Multiple SSL Server SupportTracing-
Page 46 and 47: Multiple SSL Server Support- Overvi
Page 48 and 49: Multiple SSL Server SupportProblem:
Page 64 and 65: Questions?(references on next slide

z/VM SSL Server Update - z/VM - IBM

Create successful ePaper yourself

Delete template?

Save as template?