Previous Topic: Client LU SecurityNext Topic: Limiting Transaction Access to User IDs


Ensuring Conversation Security

VTAM and RACF both allow definition of an APPC z/OS LU to specify that security information is required to be passed from the initiating client. The VTAM APPL statement has a SECACPT keyword of CONV that requires user ID and password from the client on conversation requests.

Example:

APPL ACBNAME = IMSLU . . . SECACPT = CONV 

The CONVSEC field in the session segment of the RACF APPCLU profile can also be set to CONV that performs the same check as the VTAM SECACPT parameter.