Advanced z/OS Security: Crypto, Network, RACF, and Your Enterprise
- Référence VHF_CNRYE
- Durée 3 jour(s)
Modalité pédagogique
Aller à:
Modalité pédagogique
La formation est disponible dans les formats suivants:
-
Classe inter à distance
Depuis n'importe quelle salle équipée d'une connexion internet, rejoignez la classe de formation délivrée en inter-entreprises.
-
Classe inter en présentiel
Formation délivrée en inter-entreprises. Cette méthode d'apprentissage permet l'interactivité entre le formateur et les participants en classe.
-
Intra-entreprise
Cette formation est délivrable en groupe privé, et adaptable selon les besoins de l’entreprise. Nous consulter.
Demander cette formation dans un format différent
Résumé
Haut de pageSystem z continues to extend the value of the mainframe by leveraging robust security solutions to help meet the needs of today's on demand, service-oriented infrastructures. System z servers have implemented leading-edge technologies, such as high-performance cryptography, multi-level security, large-scale digital certificate authority and life cycle management, improved Secure Sockets Layer (SSL) performance, advanced Resource Access Control Facility (RACF) function, and z/OS Intrusion Detection Services. This advanced z/OS security course presents the evolution of the current z/OS security architecture and explores in detail the various technologies involved in z/OS Cryptographic Services, z/OS Resource Access Control Facility (RACF), and z/OS Integrated Security Services.
Updated 20/04/2026
Company Events
These events can be delivered exclusively for your company at our locations or yours, specifically for your delegates and your needs. The Company Events can be tailored or standard course deliveries.
Prochaines dates
Haut de pagePublic
Haut de pageThis class is intended for z/OS system programers and security specialists in charge of designing and implementing z/OS security for Web-enabled applications.
Objectifs de la formation
Haut de pageIn the hands-on exercises, you begin with your own z/OS HTTP Server in a TCP/IP environment. Throughout the exercises, you make changes to the configuration to implement authentication via RACF, SSL, and use of digital certificates. Use is made of facilities such as RACDCERT to manage digital certificates, PKI Services, and RACF auto registration. You will also implement different scenario to implement ssl security for a typical tcpip application, FTP: SSL, TLS, server authentication, client certificates, and AT-TLS. These exercises reinforce the concepts and technologies being covered in the lectures.
- Describe the components of network security, platform security and transaction security on z/OS
- Describe how RACF supports UNIX users and groups
- Describe Web server security flow on z/OS
- Explain the contents and use of a digital certificate
- Explain the difference between asymmetric and symmetric cryptographic techniques
- Explain SSL V3 client authentication
- Explain the basics of WebSphere Application Server and Web services security
- Utilize the RACDCERT command
- Discuss the OCSF service providers
- Explain VPN (IPSec), SSL/TSL, and AT-TLS and the differences between them
- Discuss the z/OS Communication Server policy agent, IDS, and IP filtering
- Describe and utilize System SSL
- Explain how TN3270 and FTP SSL support works
- Explain how IBM secure hardware cryptographic coprocessors work
- Explain how Kerberos authentication works
- Explain the LDAP terms of DN, objectclass, attribute, schema, back end, and directory
- Explain how to set up, customize, and operate z/OS PKI Services
Programme détaillé
Haut de page- Activation of basic and SSL user authentication on the IBM HTTP Server for z/OS
- Description of the security and cryptographic services in z/OS
- Description of the capabilities of the Firewall Technologies for z/OS
- Description of the capabilities of the LDAP Server for z/OS
Pré-requis
Haut de pageYou should have:
- General z/OS knowledge
- UNIX System Services skills
- Experience configuring any of the Web servers on z/OS
- Basic knowledge of TCP/IP and RACF
Certification
Haut de page- None
Et après
Haut de page- None