Configuration files and policy definition files

To operate correctly, the policy infrastructure depends on various configuration files and policy definitions files.

The IBM® Configuration Assistant for z/OS® Communications Server enables flat-file configuration of all supported policy types for z/OS. The IBM Configuration Assistant for z/OS Communications Server is an optional GUI-based tool that provides a guided interface for configuring TCP/IP policy-based networking functions. You can use the Configuration Assistant to generate the Policy Agent files.

The Configuration Assistant is a z/OS Management Facility (z/OSMF) task. z/OSMF provides a web browser interface for a variety of z/OS system management functions. When you invoke the Configuration Assistant in z/OSMF, the Configuration Assistant runs natively in the z/OS system and you can access it through a web browser.

Table 1 lists the policy-related configuration and definition files, whether the files can be created using the Configuration Assistant, and the default location of the configuration files. You can manually edit all files listed in Table 1.

Table 1. Configuration files and policy definition files
Configuration file or policy definition file Can be created by the Configuration Assistant? Default z/OS location
Configuration files
Policy agent Yes /etc/pagent.conf
syslogd No /etc/syslog.conf
DMD Yes /etc/security/dmd.conf
IKED Yes /etc/security/iked.conf
NSSD Yes /etc/security/nssd.conf
Policy definition files
QoS Yes None
IDS Yes None
AT-TLS Yes None
IPSec Yes None
Policy-based routing Yes None