Deprecated CMS and SSL APIs; SSLv2 and SSLv3 Protocols
What is being removed or changed
z/OS 3.2 is planned to be the last release to support:
- Deprecated CMS APIs
- Deprecated SSL APIs
- SSLv2 and SSLv3 protocols
These protocols and APIs have been deprecated by industry standards bodies and are no longer considered secure.
Required customer migration or upgrade actions
Customers must:
- Identify applications using deprecated CMS or SSL APIs
- Migrate applications to supported cryptographic APIs
- Update System SSL and AT‑TLS configurations to use modern TLS protocols
Failure to update may prevent applications from running on releases beyond z/OS 3.2.
Links to the relevant documentation
z/OS 3.2 Announcement - Statement of Direction AD26-0005
z/OS Cryptographic Services documentation