SSL connection

The following statements and parameters specify the settings for the SSL communication.

Note: For detailed information about how to configure TLS, see Customizing TLS to connect components with IBM Z Workload Scheduler.

Table 1. SSL connection-related parameters
Statement	Parameters	Description
BKPTOPTS	ENABLEFIPS	Whether the SSL communication must comply with FIPS standards.
	PEERHTSPORT	The SSL port number used by the HTTP server to listen for SSL-connections.
	SSLAUTHMODE	The SSL authentication type.
	SSLAUTHSTRING	The string used to verify the certificate validity when you set SSLAUTHMODE to STRING.
	SSLKEYSTORE	The database containing keys and certificates.
	SSLKEYSTOREPSW	The file containing the key password.
	SSLLEVEL	The SSL authentication type.
HTTPOPTS	ENABLEFIPS	Whether the SSL communication must comply with FIPS standards.
	SSLAUTHMODE	SSL authentication type.
	SSLAUTHSTRING	SSL string used to verify the certificate validity when you set SSLAUTHMODE to STRING.
	SSLKEYRING	If SSLKEYRINGTYPE is SAF, this parameter specifies the SAF key ring used to connect the security certificates. If SSLKEYRINGTYPE is USS, this parameter specifies the database containing keys and certificates.
	SSLKEYRINGTYPE	Specifies if the key ring file is a key database USS file or a SAF key ring.
	SSLKEYRINGPSW	If SSLKEYRINGTYPE is USS, specifies the file containing the key password.
	SSLPORT	SSL port number used by the http server to listen for SSL-connections.
ROUTOPTS	HTTPS	The network addresses for http-connected agent workstations, typically remote engines, IBM Z Workload Scheduler agents, or dynamic domain managers. Use HTTPS to define the http connections as SSL-secure connections.
TCPOPTS	ENABLEFIPS	Whether the SSL communication must comply with FIPS standards.
	SSLAUTHMODE	The SSL authentication type.
	SSLAUTHSTRING	The string used to verify the certificate validity when you set SSLAUTHMODE to STRING.
	SSLKEYSTORE	The database containing keys and certificates. If SSLKEYSTORETYPE is SAF, this parameter specifies the SAF key ring used to connect the security certificates. If SSLKEYSTORETYPE is USS, this parameter specifies the database containing keys and certificates.
	SSLKEYSTOREPSW	If SSLKEYSTORETYPE is USS, specifies the file containing the key password.
	SSLKEYSTORETYPE	Specifies if the key ring file is a SAF key ring or a key database USS file (default).
	SSLLEVEL	The SSL authentication type.

Table 2. Required statements in SSL communication
Components	BKPTOPTS	HTTPOPTS	ROUTOPTS	TCPOPTS
Z controller communicating with:
Tracker				✓
Backup controller	✓
Data store				✓
Z controller (z/OS remote engine)		✓	✓
Master domain manager (distributed domain engine)		✓	✓
Dynamic domain manager (broker)		✓	✓
z-centric agent		✓	✓
File proxy		✓
Server communicating with:
Interface (ISPF, Program Interface, Dynamic Workload Console)				✓