The SSLCACHE system initialization parameter specifies whether session IDs for SSL sessions are to be cached locally or at sysplex level for reuse by the CICS® region. The SSL cache allows CICS to perform partial handshakes with clients that it has previously authenticated.
- The SSL environment for the CICS region includes a local cache of session IDs for SSL sessions between CICS and clients. z/OS® System SSL manages the SSL environment. This cache is replaced by a new cache when the PERFORM SSL REBUILD command is issued.
- A cache of SSL sessions is held at sysplex level for multiple CICS regions. This cache is not affected when the PERFORM SSL REBUILD command is issued. You must activate the z/OS System SSL started task GSKSRVR to have a sysplex cache.
For details on using the SSL cache in CICS, see The SSL cache.