z/OS Cryptographic Services System SSL Programming
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


GSKSRVR environment variables

z/OS Cryptographic Services System SSL Programming
SC14-7495-00

These environment variables are processed by the System SSL started task:

GSK_LOCAL_THREADS
Specifies the maximum number of threads which is used to handle program call requests from SSL applications running on the same system as the GSKSRVR started task. The default value is 5 and the minimum value is 2. The default of 5 is used if a valid value is not specified.
GSK_SIDCACHE_SIZE
Specifies the size of the sysplex session cache in megabytes and is between 1 and 512 with a default of 20. The default of 20 is used if a valid value is not specified.
GSK_SIDCACHE_TIMEOUT
Specifies the sysplex session cache entry timeout in minutes and is between 1 and 1440 with a default of 60. The default of 60 is used if a valid value is not specified.
GSK_FIPS_STATE
Specifies that the System SSL started task is to execute in FIPS mode. The only value that is supported is GSK_FIPS_STATE_ON. If any other value is specified, message GSK01054E is issued with a status code of zero, and GSKSRVR executes in non-FIPS mode.

In order for the started task to perform sysplex session ID caching for FIPS mode application servers, the envar file must contain GSK_FIPS_STATE=GSK_FIPS_STATE_ON. If the started task executes in FIPS mode, then message GSK01057I is output to STDOUT. See System SSL and FIPS 140-2 for setup requirements necessary to execute in FIPS mode.

To have GSKSRVR execute in non-FIPS mode and provide sysplex session ID caching for non-FIPS application servers, remove or comment out this environment variable. GSKSRVR starts in non-FIPS mode without issuing GSK01054E or GSK01057I messages.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014