Java Security on z/OS

Project and Program: Enterprise Data Center, Security and Compliance

Tags: Proceedings, 2011, SHARE in Orlando 2011

Given the advent of the zAAP processor, Java workloads have become more common on z/OS. Our speaker will discuss the Java Security capabilities and common APIs that are available across the IBM platforms at the SDK 6.0.0 and SDK 6.0.1 levels. These include JCE (Java Cryptographic Extension, both via software and hardware cryptography), PKCS#11 (hardware cryptography), JSSE (Java Secure Sockets Extension, SSL and TLS), JAAS (Java Authentication and Authorization Service), and JGSS (Java Generic Security Services, GSS-API and Kerberos). The discussion also includes:

• Specific information about the z/OS implementation of these common APIs


• Some of the unique z/OS capabilities that are used with these common APIs


• Exploitation of zSeries z196 cryptographic assist hardware for significant security and performance advantages


• The use of SAF-based keys.

Presenter(s): Saheem Granados, IBM Corporation

Back to Proceedings File Library