You can make the connection between z/OS® Explorer and
your systems more secure by using the Secure Sockets Layer (SSL).
Before you begin
This procedure assumes that you have a working knowledge
of SSL.
Procedure
- Use the appropriate method to open the Preferences window:
- Windows or Linux: Click on the workbench
menu bar.
- OS X: Click on the main menu.
- Expand Explorer and click Certificate
management.
- Clear the checkbox Disable certificate management
for secure connections.
- In the Trust store details section field,
enter the full path and file name of the file where the certificates
are saved. You can also click Browse to navigate
to the file.
- In the Pass phrase field, enter
the password for this truststore. The default passphrase for the z/OS Explorer generated
file is changeit.
- In the Store type field, select
the format of the keystore file. The type of the z/OS Explorer generated
file is JKS
- To use the same file for both keystore and truststore,
select the check box Use same details as for trust store.
To use a different file, leave the check box cleared and enter the
path and file name of the keystore, and the passphrase.
In the Smart card details field,
select Use Windows cryptography services for the Windows operating
system, which uses the standard Windows cryptography mechanism. To
use a PKCS11 driver (mandatory on Mac OS and Linux operating systems),
select Use PKCS11 driver and specify the driver path and PIN.
- If you are instructed by your network administrator, select
the correct protocol for your organization in the Secure
socket protocol field.
- Click Apply and OK to
save your settings and close the window.
Results
Connections to systems can now be defined by using SSL
security.
What to do next
Set up your system connections.
For more information, see Working with system connections.
Note: If your organization
uses shared system connections, you can load or import the shared
connections, which include details of the selected SSL options. If
you load the connections, only your administrator can change the connection,
including the SSL options. For more information, see
Using shared connections.