|
The DCAS is a TCP/IP server application that
runs on OS/390 V2R10 and later (z/OS included). It interfaces with
a Security Access Facility (SAF)-compliant server product to assist
with express logon services such as Certificate-based Web Express
Logon. In this example, this SAF-compliant server product is IBM Resource
Access Control Facility (RACF). |
Web Express Logon supports two different models for z/OS and DCAS
environments—one in which users are identified via a network
security application and one in which users are identified via client
certificates (called Certificate-based Web Express Logon). The configuration
steps defined in this chapter cover both models with certain information
that is specific to Certificate-based Web highlighted with the following
icon:
|
Refers to information that is specific to Certificate-based
Web Express Logon. |
The following steps show you how to edit and deploy the CMS provided
with
Host On-Demand, create an SSL key database so that
Host On-Demand can
communicate with the DCAS, and use the Deployment Wizard to create
your HTML file, configure your 3270 host session, and record your
login macro. In a certificate-based environment, you must also configure
your HTTP server as well as the browser and Java 2 keystore on each
Host On-Demand client.
In a non-certificate-based environment, you must configure your network
security application and create your HCM database. Both models require
you to configure the Digital Certificate Access Server (DCAS).
|
For more information about configuring Host On-Demand clients for HTTPS and
client authentication, refer to the Planning, Installing, and Configuring
Host On-Demand guide
located in the Host On-Demand
Information Center at Start > Programs > IBM Rational
Host On-Demand >
Information
Center. |
|
Steps 5–8 are designed for administrators
who are planning to use the Deployment Wizard to create the HTML file,
configure the host session to use Web Express Logon, and record the
Web Express Logon macro all in one sitting. However, you may decide
to create your HTML file first and then configure your session and
create your macro later. |