Enabling zERT aggregation

You turn the zERT aggregation function on in the TCP/IP stack by specifying the GLOBALCONFIG ZERT AGGREGATION parameter in the TCP/IP profile data set. Enabling zERT aggregation causes the TCP/IP stack to collect cryptographic protection summary information for security sessions involving TCP and Enterprise Extender connections that terminate at the stack.

Guideline: Because zERT aggregation summarizes information collected by zERT discovery processing, zERT discovery must be enabled for zERT aggregation to operate; however, you do not have to enable SMF recording of zERT connection detail records for zERT aggregation to function correctly.

Results: If you dynamically enable zERT aggregation using VARY OBEYFILE, zERT does not collect summary information about TCP and Enterprise Extender connections that were established before enabling zERT aggregation.