Configuring SSL

You can configure CICS® Transaction Gateway to use the SSL cryptographic protocol for security and data integrity of communications over a TCP/IP connection.

Creating and maintaining digital certificates
Digital certificates are used for identifying either end of an SSL connection and contain information required to establish trust.
Configuring server authentication with iKeyman
You configure server authentication by creating a client keyring, importing the server's signer certificate, creating a server keyring and certificate, and exporting the server's signer certificate.
Configuring client authentication with iKeyman
You configure client authentication by creating a client certificate and exporting the client's signer certificate.
Using keytool for certificate management
The keytool command line application is provided with the Java SDK.
SSL key ring configuration
To use SSL for connections between Java client applications and the Gateway daemon, or to use SSL for IPIC connections to CICS, you must configure the SSL key ring in the configuration file, ctg.ini.
SSL configuration for IPIC connections
SSL can be defined for local or remote IPIC connections.
SP800-131A compliance
SP800-131A compliance strengthens security by requiring the use of stronger cryptographic keys and more robust algorithms.
FIPS 140-2 compliance
FIPS 140-2 is a standard which certifies cryptographic modules used by applications.

Parent topic: Configuring