Welcome
IBM Z Workload Scheduler
Welcome to the IBM Z Workload Scheduler documentation, where you can find information about how to install, maintain, and use the product. The documentation has been updated for version 10.2 SPE (Revised July 2025).
Scheduling End-to-end with z-centric Capabilities
Setting the security features

Product requirements
This section contains links to the IBM® Workload Scheduler Download Documents, System Requirements, and Release Notes.
Product Library in PDF format
This section contains links to the PDF versions of all the publications provided in IBM Documentation for IBM Workload Automation.
Considerations for GDPR readiness
Overview
Mobile Applications Userʼs Guide
Dynamic Workload Console User's Guide
AI Data Advisor (AIDA) User's Guide
Scheduling Job Integrations with IBM Workload Automation
IBM® Workload Scheduler
Welcome to the IBM® Workload Scheduler documentation, where you can find information about how to install, maintain, and use IBM Workload Scheduler. The documentation has been updated for IBM Workload Scheduler Version 10.2.5.
IBM Z Workload Scheduler
Welcome to the IBM Z Workload Scheduler documentation, where you can find information about how to install, maintain, and use the product. The documentation has been updated for version 10.2 SPE (Revised July 2025).
- Memo to Users
- Program Directory
- Dynamic Workload Console Readmes
  For the latest information about a Dynamic Workload Console fix pack, see the appropriate Readme File.
- Planning and Installation
- Customization and Tuning
- Managing the Workload
  You can plan when and how your workload runs and manage it as part of a plan.
- Scheduling End-to-end with z-centric Capabilities
  - About this publication
  - Configuring
  - Customizing the HTTP connections
    The communication between the IBM Z Workload Scheduler Agents and the IBM Z Workload Scheduler controller is direct, through the HTTP or HTTPS protocol.
  - Defining user IDs and passwords with the USRREC statement
    Use the USRREC initialization statement to define the passwords for the users who need to schedule jobs to run on Windows™ workstations. You do not need to do this if you run native job types on non-Windows workstations.
  - Defining variables and passwords for local resolution
  - Defining and managing IBM Z Workload Scheduler Agent workstations in the database
    After defining the destinations of your IBM Z Workload Scheduler Agents, you need to define the IBM Z Workload Scheduler Agents as IBM Z Workload Scheduler computer automatic workstations.
  - Defining and managing dynamic workstations
    When you add dynamic capabilities to your environment, you can schedule your workload dynamically.
  - Setting the security features
    - Customizing the SSL connection with the Z controller when using your certificates (SAF)
      The management of security certificates is different between product versions. Depending on the z-centric agent version you are using, customize the SSL connection between the agent and Z controller by either using your SAF certificates or the default certificates.
    - Customizing the SSL connection with the Z controller when using your certificates (USS)
    - Enabling FIPS compliance over IBM Z Workload Scheduler server SSL secured connection
      Federal Information Processing Standard Security Requirements for Cryptographic Modules, referred to as FIPS 140-2, is a standard published by the National Institute of Standards and Technology (NIST). Organizations can require compliance to the FIPS 140-2 standard to provide protection for sensitive or valuable data to cryptographic-based security systems.
    - Encrypting the user password
  - Defining and managing jobs
  - Administering IBM i dynamic environment
    On overview on how to administer the IBM Workload Scheduler IBM i dynamic environment.
  - Monitoring and recovering jobs
  - Running a script when a job completes
  - Viewing the job logs from the host
    An overview on how to view or retrieve the job logs issued in the z-centric environment and how to attach a header with job run information on top of each log.
  - Troubleshooting
    Troubleshooting agent problems
  - Configure to schedule job types with advanced options
  - Managing return codes
  - Modifying the workstation from fault-tolerant agent to z-centric agent
  - Defining access methods for agents
  - Collecting job metrics
- Quick Reference
- Diagnosis Guide and Reference
- Workload Automation Programming Language for z/OS User's Guide and Reference
- Driving IBM Z Workload Scheduler
Messages and Codes
Glossary
Notices

Setting the security features

IBM Z Workload Scheduler provides a secure, authenticated, and encrypted connection mechanism for communicating across the network. This mechanism is based on the Secure Sockets Layer (SSL) protocol.

By default, the IBM Z Workload Scheduler Agent is installed with the SSL protocol enabled. According to this default, in the HTTPOPTS statement you must set the connection security for end-to-end communication to enable SSL.

According to the certificates that you are using (USS or SAF) to enable the SSL communication see the relevant section: