Configure Policy Agent

Edit online

Complete this task to configure Policy Agent to run as a z/OS started task. You can skip this task if a Policy Agent started task is already configured on your system.

About this task

AT-TLS is managed by the Policy Agent, which can be started as a started task.

Policy Agent reads, parses, and installs AT-TLS policies (or, TTLS) in the TCP/IP stack. The policies contain information that is necessary to negotiate secure connections.

The Policy Agent uses a configuration file to know which policies must be enforced, and where they can be found. The default configuration file is /etc/pagent.conf, but a different location can be specified in the Policy Agent started task JCL.

For more information about Policy Agent and running Policy Agent as a started task, see z/OS Communications Server: IP Configuration Guide: Policy Agent and policy applications.

Procedure

Copy hlq.SEZAINST(PAGENT) to USER.PROCLIB.
Define the PAGENT environment file on the STDENV DD statement in the Policy Agent JCL.
For example:
```
//STDENV DD PATH='/etc/pagent/pagent.env',PATHOPTS=(ORDONLY)
```
In the PAGENT environment file, point to a configuration file.
For example:
```
PAGENT_CONFIG_FILE=//'USER.PARMLIB(PAGENT)'
```

In the configuration file, set up policy files for each TCP/IP stack image.

For example:

TcpImage TCPIP /etc/pagent/TCPIP.policy FLUSH PURGE 
TcpImage TCPIPB /etc/pagent/TCPIPB.policy FLUSH PURGE

In the TcpImage file, point to the TTLS configuration file.
For example:
```
TTLSConfig /etc/pagent/ttls.policy
```