Secure Sockets Layer (SSL)

TIBCO EMS Client for z/OS (MVS) supports the IBM GSK SSL, and the C and COBOL language samples illustrate SSL usage. For the complete description of SSL API usage in TIBCO EMS, see TIBCO Enterprise Message Service C & COBOL API Reference.
TIBCO EMS Client for z/OS (MVS) supports SSL certificates that are stored in the native z/OS RACF database. For the client to retrieve them from the RACF database, the SSL certificates must meet two requirements:
  • The certificate must be signed by a CA that is trusted by the EMS server. This can be accomplished by uploading the certificate and adding it to the list of trusted CAs for the server.
  • The certificate must be on the user's keyring. That is, the user that runs the EMS client must have a keyring, and this certificate must be on it. Either the user must have permission, or the user ID associated with the job or starter task using the SSL functions must have permission to access the certificate.

For information about SSL certificates and keys, consult your security officer.