Documentation

Books

Documents

Presentations

Archive

	General   |   Security   |   Performance   |   e-business   |   e-delivery

VSE security How to setup HW crypto & SSL?		Hardware security CICS, TCP/IP

VSE security documentation

	z/VSE V4R3 Planning It describes z/VSE and provides information which helps you plan and setup z/VSE. This manual should be read first when starting to work with z/VSE Security. Chapter: z/VSE Security Support Chapter: System Authorization Facility (SAF) and its External Security Interface (RACROUTE)
	z/VSE V4R3 Administration This is the main part of the z/VSE security documentation. Chapter: Protecting Resources
	WebSphere MQ for z/VSE System Management Guide Describes WebSphere MQ for z/VSE system management tasks including securing WebSphere MQ resources. Chapter 12: Security
	CICS Transaction Server for VSE/ESA Operations and Utilities Guide This book describes the Data Management Facility (DMF) used to collect the SMF audit records from BSM. Chapter: Data Management Facility (DMF) Data Handler
	Redbook: Security on IBM z/VSE, SG24-7691 This document was written to assist z/VSE support and security personnel in providing the enterprise with a safe, secure and manageable environment.
	Redbook: Introduction to the New Mainframe: Security, SG24-6776 The Redbook contains the chapter 'Security in z/VSE' that provides the basic understanding and Security handling for z/VSE.
	z/VSE Security Concepts and News (5.8MB) Gives a overview about VSE security and technical details (Presentation)
	VSE/ESA Software Newsletter No. 17 (G225-4508-17) (2.4MB) Provides background information and additional technical details. Chapter: VSE/ESA 2.4.0 Security - Overview Chapter: VSE/ESA 2.4.0 Security - Implementation Details
	VSE/ESA Software Newsletter No. 18 (G225-4508-18) (1.5MB) Chapter: VSE/ESA 2.4 Security - Miscellaneous Topics
	VSE/ESA Software Newsletter No. 20 (G225-4508-20) (5.5MB) Chapter: Security in VSE/ESA 2.4 - What's New? - Using Your Own Partition Startup Procedures
	VSE/ESA V2.4 Security (111KB) VM and VSE Technical Conference 1999 in Orlando (Presentation)
	OS/390 Security Server External Security Interface (RACROUTE) Macro Reference (GC28-1922) Contains a description of the RACROUTE macro parameters.
	OS/390 Security Server (RACF) Data Areas (SY27-2640) This book contains the description of the data areas used by the RACROUTE macro

Back to top

How to setup hardware crypto and SSL with VSE

	How to setup SSL with the VSE Script Connector (PDF, 900KB) Updated: January 2010 Joerg Schmidbauer, IBM
	How to setup WebSphere MQ for z/VSE V3.0 and WebSphere MQ for Windows V7.0 with secured connections using SSL (PDF, 3.0MB) Updated: March 2009 Joerg Schmidbauer, IBM
	How to use Encryption Facility for z/VSE (PDF, 380KB) Updated: November 2010 Joerg Schmidbauer, IBM
	How to setup SSL with CICS Web Support (PDF, 1.7MB) Updated: November 2010 Joerg Schmidbauer, IBM
	How to setup Secure Telnet with VSE (PDF, 1.7MB) Updated: January 2010 Joerg Schmidbauer, IBM
	How to setup Secure FTP with VSE (PDF, 1.2MB) Updated: August 2009 Joerg Schmidbauer, IBM
	How to setup SSL with VSE (PDF, 1.2MB) Updated: November 2010 Joerg Schmidbauer, IBM
	How to setup and use Keyman/VSE (PDF, 650KB) New: November 2010 Joerg Schmidbauer, IBM
	How to setup cryptographic hardware for VSE (PDF, 1.4MB) Updated: December 2008 Joerg Schmidbauer, IBM

Back to top

Hardware related documentation

	IBM System z cryptography for highly secure transactions
	Security on IBM System z
	Securing Your Business with the IBM  eServer™ zSeries  (112KB)
	IBM System z Cryptographic Products - Overview
	Redbook: zSeries Crypto Guide Update, SG24-6870
	Redbook: IBM eServer™ zSeries 900 Technical Guide, SG24-5975
	Redbook: IBM eServer™ zSeries 990 Cryptographic Coprocessor Configuration, REDP-3747

Back to top

CICS, TCP/IP and SSL related documentation

	z/VSE V4R3 e-business Connectors User's Guide Information required to do SSL server authentication and SSL client authentication.
	TCP/IP for VSE - SSL Documentation (984KB) This manual describes the SSL implementation how it is available with TCP/IP for VSE. This also includes the description of the native SSL API of TCP/IP for VSE. The SSL C-API is described in manual z/VSE V4R3 TCP/IP Support . Chapter: SSL for VSE
	CWS/SSL Authentication - Overview (181KB) This overview shows the cooperation of the different parts involved in the CICS CWS with SSL client authentication.
	CICS Transaction Server for VSE/ESA Enhancements Guide (2.7MB) Information required to do SSL server authentication and SSL client authentication with CWS. Chapter: Using Secure Sockets Layer (SSL)
	CICS Transaction Server for VSE/ESA Security Guide Information to protect CICS resources using the BSM.

Disclaimer

The information contained in these documents has not been submitted to any formal IBM test and is distributed on an "AS IS" basis without any warranty either express or implied. The use of this information or the implementation of any of these techniques is a customer responsibility and depends on the customer's ability to evaluate and integrate them into the operational environment. While each item may have been reviewed by IBM for accuracy in a specific situation, there is no guarantee that the same or similar results will be obtained elsewhere. Customers attempting to adapt these techniques to their own environments do so at their own risk.

In these documents, any references made to an IBM licensed program are not intended to state or imply that only IBM's licensed program may be used; any functionally equivalent program may be used instead.

Any performance data contained in these documents was determined in a controlled environment and, therefore, the results which may be obtained in other operating environments may vary significantly. Users of these documents should verify the applicable data for their specific environments.

It is possible that this material may contain reference to, or information about, IBM products (machines and programs), programming, or services that are not announced in your country. Such references or information must not be construed to mean that IBM intends to announce such IBM products, programming or services in your country.

IBM does not make any representations or endorsement of any of the products or services which are provided by non-IBM sources. That information was provided by the named source. In any event, IBM shall not incur any liability by listing the following information.

Back to top