EXPRESS LOGON using DCAS

The Digital Certificate Access Server (DCAS) is a host-based server that provides some distributed z/OS® security server services. The most common service is Pass Ticket (like a password) generation services. It typically works in conjunction with SSL-authenticated clients that provide logon services on behalf of end users (typically workstation users) that want to log on to host applications. This allows users to log on to host applications without having to know their password, and possibly even their user ID. On the host, DCAS works with the resident security server, such as RACF®, to provide this function.

Tip: You can customize the DCAS to use IBM® System SSL, but it is recommended to implement TLS security by using AT-TLS policies. For more information about using AT-TLS policies, see Customizing DCAS for TLS/SSL in z/OS Communications Server: IP Configuration Guide.

Requirement: The application Pass Ticket generation must be configured in RACF.

DCAS can support several different client-types for express logon. For additional overview and configuration information about Express Logon, see z/OS Communications Server: IP Configuration Guide.