Implementing TLS Security in a PowerExchange Network

Back Next

PowerExchange TLS Architecture

The PowerExchange TLS architecture includes the following components:

OpenSSL installed on each TLS client and server on Linux, UNIX, or Windows

PowerExchange TLS configured on each TLS client and server on Linux, UNIX, or Windows

AT-TLS installed and configured for PowerExchange on each TLS server on

z/OS

PowerExchange Listeners configured on server environments

X.509 certificates installed on each TLS client and server

The following figure illustrates the PowerExchange TLS architecture:

You can use TLS communication for some, all, or none of the connections in the PowerExchange network.

For example, you might configure connections as follows:

Configure PowerExchange Listeners to use separate ports for TLS and non-TLS connections.

Configure the PowerCenter Integration Service client to use TLS connections to PowerExchange Listeners.

Configure the PowerExchange Navigator and PowerCenter clients to use non-TLS connections to PowerExchange Listeners.