KEYRING

The KEYRING system initialization parameter specifies the fully qualified name of the key ring, within the external security manager's database, that contains the keys and X.509 certificates used by CICS® support for the secure sockets layer (SSL) and for web services security.

Note:
  • The KEYRING parameter is not used by Liberty JVM server's SSL support. If this is your only use of SSL in the CICS region, then you do not have to specify the KEYRING parameter.
  • When AT-TLS is used to secure socket sessions, CICS SSL/TLS system initialization parameters such as KEYRING and MINTLSLEVEL are no longer required because the implementation of TLS is provided by AT-TLS policy statements and all encryption and decryption is done outside of the CICS address space. For details, see Introduction to Application Transparent Transport Layer Security (AT-TLS).
KEYRING=keyring-name
The maximum length of the KEYRING parameter is 47 characters, and the key ring name is case-sensitive. For more information about creating a key ring, see Building a key ring manually.