SSL connection

The following statements and parameters specify the settings for the SSL communication.

Note: For detailed information about how to configure TLS, see Customizing TLS to connect components with HCL Workload Automation for Z.
Table 1. SSL connection-related parameters
Statement Parameters Description
BKPTOPTS PEERHTSPORT The SSL port number used by the HTTP server to listen for SSL-connections.
SSLAUTHMODE The SSL authentication type.
SSLAUTHSTRING The string used to verify the certificate validity when you set SSLAUTHMODE to STRING.
SSLKEYSTORE The database containing keys and certificates.
SSLKEYSTOREPSW The file containing the key password.
SSLLEVEL The SSL authentication type.
HTTPOPTS SSLAUTHMODE SSL authentication type.
SSLAUTHSTRING SSL string used to verify the certificate validity when you set SSLAUTHMODE to STRING.
SSLKEYRING If SSLKEYRINGTYPE is SAF, this parameter specifies the SAF key ring used to connect the security certificates. If SSLKEYRINGTYPE is USS, this parameter specifies the database containing keys and certificates.
SSLKEYRINGTYPE Specifies if the key ring file is a key database USS file or a SAF key ring.
SSLKEYRINGPSW If SSLKEYRINGTYPE is USS, specifies the file containing the key password.
SSLPORT SSL port number used by the HTTP server to listen for SSL-connections.
ROUTOPTS HTTPS The network addresses for http-connected agent workstations, typically remote engines, HCL Workload Automation for Z agents, or dynamic domain managers. Use HTTPS to define the http connections as SSL-secure connections.
TCPOPTS SSLAUTHMODE The SSL authentication type.
SSLAUTHSTRING The string used to verify the certificate validity when you set SSLAUTHMODE to STRING.
SSLKEYSTORE If SSLKEYRINGTYPE is SAF, this parameter specifies the SAF key ring used to connect the security certificates. If SSLKEYRINGTYPE is USS, this parameter specifies the database containing keys and certificates.
SSLKEYSTOREPSW If SSLKEYSTORETYPE is USS, specifies the file containing the key password.
SSLKEYSTORETYPE Specifies if the key ring file is a SAF key ring or a key database USS file.
SSLLEVEL The SSL authentication type.
Table 2. Required statements in SSL communication
Components BKPTOPTS HTTPOPTS ROUTOPTS TCPOPTS
Z controller communicating with:
Tracker
Backup controller
Data store
Z controller (z/OS remote engine)
Master domain manager (distributed domain engine)
Dynamic domain manager (broker)
z-centric agent
File proxy
Server communicating with:
Interface (ISPF, Program Interface, Dynamic Workload Console)