To operate correctly, the policy infrastructure depends on various configuration files and policy definitions files.
The IBM® Configuration Assistant for z/OS® Communications Server enables flat-file configuration of all supported policy types for z/OS. The IBM Configuration Assistant for z/OS Communications Server is an optional GUI-based tool that provides a guided interface for configuring TCP/IP policy-based networking functions. You can use the Configuration Assistant to generate the Policy Agent files.
The Configuration Assistant is a z/OS Management Facility (z/OSMF) task. z/OSMF provides a web browser interface for a variety of z/OS system management functions. When you invoke the Configuration Assistant in z/OSMF, the Configuration Assistant runs natively in the z/OS system and you can access it through a web browser. To use the Configuration Assistant in z/OSMF, your system must be z/OS V1R11 or later.
Table 1 lists the policy-related configuration and definition files, whether the files can be created using the Configuration Assistant, and the default location of the configuration files. You can manually edit all files listed in Table 1.
| Configuration file or policy definition file | Can be created by the Configuration Assistant? | Default z/OS location |
|---|---|---|
| Configuration files | ||
| Policy agent | Yes | /etc/pagent.conf |
| syslogd | No | /etc/syslog.conf |
| DMD | Yes | /etc/security/dmd.conf |
| IKED | Yes | /etc/security/iked.conf |
| NSSD | Yes | /etc/security/nssd.conf |
| Policy definition files | ||
| QoS | Yes | None |
| IDS | Yes | None |
| AT-TLS | Yes | None |
| IPSec | Yes | None |
| Policy-based routing | Yes | None |