Presentations

• AT-TLS in a nutshell

• AT-TLS hints and Tips
  

IBM RedBooks

• IBM DB2 for z/OS: Configuring TLS/SSL for Secure Client/Server Communications: a very useful redpaper that shows how to set up AT-TLS (applicable to any workload) and protect Db2 for z/OS traffic, including steps of configuring AT-TLS for TLSv1.2 and TLSv1.3.
• IBM z/OS V2R2 Communications Server TCP/IP Implementation: Volume 4 Security and Policy-Based Networking: containing all kinds of good information on AT-TLS, including the use of z/OSMF Network Configuration Assistant (NCA).

• Securing IBM HyperSwap and IBM Tivoli Storage Productivity Center for Replication Communication Using AT-TLS: a use case of how to configure IBM HyperSwap to communicate with IBM Tivoli Storage Productivity Center for Replication securely through the Internet by using Secure Sockets Layer (SSL) or Application Transparent Transport Layer Security (AT-TLS)

• IBM CICS Performance Series: Web Services Performance in CICS TS V5.3: using AT-TLS to protect CICS server-side traffic
• IBM Personal Communications and IBM z/OS TTLS Enablement: using AT-TLS on the z/OS side

• RACF Remote Sharing Facility over TCP/IP: using AT-TLS to protect RACF RRSF traffic

IBM Documentation

AT-TLS general documentation

• AT-TLS data protection in z/OS Communications Server: IP Configuration Guide
  
• Application Transparent Transport Layer Security (AT-TLS) in z/OS Communications Server: IP Programmer's Guide and Reference
• Diagnosing AT-TLS in z/OS Communications Server: IP Diagnosis Guide

Recent z/OS Communications Server functional enhancements in z/OS Communications Server: New Function Summary

• AT-TLS support for x25519 and x448 key exchange for TLSv1.2 - available for z/OS V2R5 with APAR PH902 and versions above
  
• AT-TLS and IPSec certificate diagnostic - available for z/OS V2R5 and versions above
• AT-TLS support for TLS v1.3 - available for z/OS V2R4 and versions above
• AT-TLS currency with System SSL - available for z/OS V2R3 and versions above

Using AT-TLS with other IBM products

• Use of AT-TLS with IBM MQ for z/OS in IBM MQ Documentation

Blogs

• TLS 1.2 session ID caching for CICS in a sysplex by Ian Mitchel
  

  A great article by Ian Mitchel from the CICS team on TLS session caching, covering AT-TLS and direct CICS configuration.  Though this is focused on a single workload (CICS), the concepts and AT-TLS information are useful across other workloads.

Use cases

• Use AT-TLS to protect Guardium traffic: Enabling AT-TLS encrypted communication between z/OS and IBM Guardium Appliance
  An example of how to configure encrypted communication between z/OS using AT-TLS and the Guardium collector appliance. This process is applicable for configuring all three Guardium STAPs for z/OS (DB2 for z/OS, IMS, and Data Sets).
  

• Use AT-TLS to protect SAP traffic: TLS Certificate Authentication for SAP with Db2 for z/OS
  This document is created by SAP and illustrates how to efficiently implement TLS certificate authentication for an SAP on IBM Z environment. 

• Use AT-TLS to protect NJE traffic: Set up security for NJE TCP/IP
  This document is created by Broadcom, Inc. and illustrates how to use AT-TLS to protect NJE traffic.
  

Digital learning resources

• Digital course: z/OS Network Security Foundations - Chapter 3 AT-TLS general knowledge: AT-TLS in a nutshell
  A good starter for beginners to form a general knowledge of AT-TLS within 30 minutes.