RMF_DDS_ATTLS

Description:

Checks the Distributed Data Server (DDS) AT-TLS configuration and setup.

Reason for check:

By default in RMF V2R4 and later, AT-TLS is required for incoming communication with the DDS. An active Policy Agent definition is required.

z/OS® releases the check applies to:

z/OS V2R3 and later.

User override of IBM values:

The following sample shows the defaults for customizable values for this check. Use this sample to make permanent check customizations in an HZSPRMxx parmlib member used at IBM Health Checker for z/OS startup. If you just want a one-time only update to the check defaults, omit the first line (ADDREPLACE POLICY) and use the UPDATE statement on a MODIFY hzsproc command. Note that using non-POLICY UPDATEs in HZSPRMxx can lead to unexpected results and is therefore not recommended.

ADDREPLACE POLICY[(policyname)] [STATEMENT(name)]
UPDATE
CHECK(IBMRMF,RMF_DDS_ATTLS), 
INTERVAL(ONETIME),
SEVERITY(LOW),
DATE('date_of_the_change')
REASON('Your reason for making the update.')

Debug support:

No.

Verbose support:

No.

Parameters accepted:

None.

Reference:

For more information, see Setting up the Distributed Data Server for z/OS in z/OS RMF Reporter User's Guide.

Messages:

This check issues the following messages:

GPMH1001I
GPMH1002I
GPMH1003E

See Messages for IBM Health Checker for z/OS in z/OS RMF Messages and Codes.

SECLABEL recommended for multilevel security users:

SYSLOW - see Security labels in z/OS Planning for Multilevel Security and the Common Criteria for information on using SECLABELs.