CICS Transaction Gateway V5 The WebSphere ... - IBM Redbooks

CICS region configuration
We used the same secure CICS region, SCSCPJA4, as we used in our previous
tests with the CICS TG for z/OS. For further details on the security settings and
SIT parameters, refer to “CICS configuration” on page 103.
CICS TCPIPSERVICE definition
In order for our CICS region to use the user ID and password flowed in the ECI
request from the CICS TG, it is necessary to activate security in the TCP/IP
service definition. To do this, we defined a TCPIPSERVICE definition and set
ATTACHSEC=VERIFY, as shown in Figure 6-5. The port we used for this
TCPIPSERVICE definition was 8048, meaning that the CICS region listens for
ECI requests on this TCP/IP port. This port that must match the Port parameter
defined in the CICS TG Configuration Tool TCP/IP settings (for details on how we
defined this, see page 87 in Chapter 5).
OVERTYPE TO MODIFY CICS RELEASE = 0620
CEDA ALter TCpipservice( PJA4TCP )
TCpipservice : PJA4TCP
GROup : PJA4GRP
DEscription ==>
Urm ==>
POrtnumber ==> 08048 1-65535
STatus ==> Open Open | Closed
PRotocol ==> Eci Iiop | Http | Eci
TRansaction ==> CIEP
Backlog ==> 00128 0-32767
TSqprefix ==>
Ipaddress ==>
SOcketclose ==> No No | 0-240000 (HHMMSS)
SECURITY
SSl ==> No Yes | No | Clientauth
Certificate ==>
AUthenticate ==> No | Basic | Certificate | AUTORegister
| AUTOMatic
ATtachsec : Verify Local | Verify
Figure 6-5 CICS TCPSERVICE definition
SYSID=PJA4 APPLID=SCSCPJA4
Chapter 6. CICS TG security scenarios 113