Customizing the ZCC server
- Required authorizations
- Multi-Factor Authentication (MFA)
  When clients initially connect to the ZCC server they are prompted for a user ID and a password or passphrase. If the credentials are valid, the client can start sessions on the relevant z/OS system as the nominated user.
- Using PassTickets
  The ZCC server can be configured to use PassTickets for authenticated clients.
- Setting SSL/TLS encrypted communications
- Using AT-TLS for encrypted communications
- Update sample HFICONFG
- Create matching WORKDIR by running job HFIMKDIR
  The HFIMKDIR job creates a work directory to be used with the server. It is supplied in the sample library hlq.SHFISAM1.
- Check address space timeout
- Add ports to TCPIP reservation list
- Configuring TCP/IP stack affinity

Customizing the ZCC server

This chapter provides you with instructions on how to customize the ZCC server. In brief, this consists of the following general checklist:

APF authorize the SHFIMODA library
Add programs in SHFIMODA to program control
Add user for server started task
Add task to STARTED class
Add sample HFISRV1 to system procedure library
Permit server user/group to BPX.SERVER facility
Permit server user/group to CSF* profiles (if used)
Permit connecting users/groups to OMVSAPPL or an equivalent resource (if used).
Update sample HFICONFG
Create matching WORKDIR by running job HFIMKDIR
Review address space timeout settings
Configure the TCP/IP stack affinity