Security components

IBM®-specific features for z/OS® security components are described in these overview topics.

For information about earlier services components, see: Legacy services components.

IBMJCECCA
Java™ Cryptography Extension Common Cryptographic Architecture (IBMJCECCA) is a security provider that exploits hardware cryptography, and is used to supplement the Java Cryptography Extension (JCE).
IBMJCEHYBRID
Java Cryptography Extension Hybrid Provider (IBMJCEHYBRID) routes application requests for cryptography to different JCE providers, depending on their availability.
JAAS
Java Authentication and Authorization Service (JAAS) provides a set of tools for user authentication and access control. IBM extends these tools for z/OS.
SAF
Java for z/OS System Authorization Facility (SAF) interfaces provide an extra set of security APIs.
PKCS#11
Public Key Cryptography Standards #11 (PKCS#11) is implemented on the Java platform for z/OS by using the IBMPKCS11Impl provider. This Security provider uses the Java Cryptography Architecture (JCA) and Java Cryptography Extension (JCE) frameworks to add the capability to use hardware cryptographic devices via PKCS#11 interfaces.
JSSE2
Java Secure Socket Extension (JSSE2) is a Java package that enables secure Internet communications.
ZERTJSSE
zERT-enabled Java Secure Socket Extension (ZERTJSSE) is an IBM security provider that enables secure internet communications and gathers security information about those communications for reporting to z/OS Encryption Readiness Technology (zERT). ZERTJSSE is a z/OS-specific provider that is supported in 31-bit and 64-bit releases of IBM SDK, Java Technology Edition, from Version 8.

Parent topic: z/OS security and legacy services overview