Advanced z/OS security: encryption and networking (ES66G)

• Organisations facing an audit that requires encrypting traffic to the mainframe.
• Teams still running TN3270 and FTP in the clear who have to close them.
• Administrators handling certificates by hand who want to stop.

• z/OS platform security, the overall picture
• Digital certificates and PKI
• The SSL protocol and client authentication
• Security on the Apache server and on WebSphere Application Server
• RACF and digital certificates
• Open Cryptographic Services Facility
• Communications Server security and System SSL
• Secure connections with TN3270 and FTP

• Labs on a real RACF environment, with profiles and permissions broken and fixed in class.
• Taught directly by IBM Champion instructors from the SIXE team.
• Credly badges available: credly.com/organizations/sixe/badges
• Flexible format — online, classroom or onsite — in closed groups, priced per attendee, in the language of your choice (ES / EN / FR).

Is this the same as encrypting data at rest?
No. This is about certificates and communications. Encrypting data sets is ESS10G, the pervasive encryption course.

Does it cover certificates inside RACF?
Yes, that is one of the blocks: how they are stored, renewed and tied to users and servers.

Can you deliver it at our premises?
Yes, and remotely with a live instructor too. Closed groups of four to ten people, in Spanish, English or French.

• ESS10G — Pervasive encryption on z/OS (encrypting the data, not the connections)
• ES19G — Basic RACF administration (if the RACF base is missing)
• CB69G — Implementing TCP/IP on z/OS (the network stack underneath)