Pervasive Encryption: AT-TLS, Upgrading to TLS V1.2 and Preparing for TLS V1.3

Project and Program: Enterprise Data Center, Security and Compliance

Tags: Proceedings, 2020, SHARE Fort Worth 2020

With ever-increasing data privacy regulations and policies, more and more z/OS users are turning to z/OS Communications Server's Application Transparent Transport Layer Security (AT-TLS) to protect their z/OS network traffic.  And as security researchers discover weaknesses in older SSL and TLS protocol versions, AT-TLS has proven to be a solid approach to upgrading to newer TLS versions and their stronger cipher suites, including TLSv1.2 and the new TLSv1.3.  

This session begins with an AT-TLS overview and covers some of the common trouble areas in upgrading from older SSL or TLS versions to TLSv1.2.  From there we'll look at some of the significant differences between TLSv1.3 and its predecessors, explore how AT-TLS and System SSL are updated in z/OS V2R4 for TLSv1.3 and discuss some ideas for making the transition to TLSv1.3 a smooth one.

Complete the survey for this session towards earning the Security Warrior digital badge: http://bit.ly/SHARE25825-Chris Meyer-IBM Corporation

Back to Proceedings File Library