Scott, You do need to have ICSF started to use SSH, since ssh relies on /dev/random which relies on ICSF.
You don't need to have a crypto card. Having one will not improve ssh performance or reduce ssh CPU usage. You do want to have CPACF, and APAR OA55437. We have a "z/OS OpenSSH Quick Install Guide" on our website that simplifies the proper setup and tuning of z/OS OpenSSH. https://dovetail.com/docs/pt-quick-inst/index.html On Tue, Jul 24, 2018 at 3:20 PM, scott Ford <[email protected]> wrote: > All: > > Sorry for not dropping by earlier , i am swamped supporting code, teaching > ,QA-ing > I am researching the following feasibility of using SSH into z/OS but i > have a question. > Do all Z customers run ICSF and the crypto cards ? I read in the z/Os 2.3 > doc that SSH requires the crypto card and ICSF. I also found that you can > use Kerberos. If so does Kerberos require the Crypto card ? We have > inquires from Mgmt about running without our agents in z/OS to provision > security requests. > > > Scott > -- > > > > *IDMWORKS * > > Scott Ford > > z/OS Dev. > > “By elevating a friend or Collegue you elevate yourself, by demeaning a > friend or colleague you demean yourself” > > > > www.idmworks.com > > [email protected] > > Blog: www.idmworks.com/blog > > > > > > *The information contained in this email message and any attachment may be > privileged, confidential, proprietary or otherwise protected from > disclosure. If the reader of this message is not the intended recipient, > you are hereby notified that any dissemination, distribution, copying or > use of this message and any attachment is strictly prohibited. If you have > received this message in error, please notify us immediately by replying to > the message and permanently delete it from your computer and destroy any > printout thereof.* > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
