This IBM® Redbooks® publication describes and explains which z/OS® security services can be exploited by Java™ stand-alone applications executing on z/OS. It is intended for experienced z/OS users with a moderate knowledge of Java, and experienced Java users with some knowledge of z/OS. For experimentation and customization, it provides use cases that were composed and tested on a z/OS platform at z/OS V1R10 and SDK 6 SR1.

The book describes the Java security model as implemented in the z/OS JVM™, and explains the role of the major infrastructure components such as Security Manager, Access Controller, Class Loader and Byte Code Verifier. It also addresses specific z/OS-provided facilities such as the JZOS toolkit and the Java record I/O (JRIO), and explains how they fit within both security models.

A full chapter is dedicated to Java Authentication and Authorization Services (JAAS) with practical examples of its use in z/OS, including the LoginModules that interact with the SAF interface. A discussion of the relationship of these services to the z/OS built-in security functions such as APF, Program Control, and so on is also provided.
The book then addresses the specific security-relevant services that are provided to Java applications executing on the z/OS platform, and gives practical examples of their setup and use. Java SAF classes, the JSec API, exploitation of RACF® PassTickets, and the use of the z/OS Enterprise Identity Mapping (EIM) infrastructure are covered. Exploitation of z/OS integrated hardware cryptography by Java applications is detailed, along with numerous practical examples of the use of these services. z/OS cryptographic key management features are also discussed. Finally, the book discusses two industry-class IBM Java products that exploit z/OS hardware cryptography, IBM Encryption Key Manager and IBM Encryption Facility for z/OS OpenPGP Support. It focuses on the exploited functionalities and performance optimization.

It is strongly recommended that readers also refer to the following Redbooks for additional information about executing Java stand-alone applications on z/OS: Java Stand-alone Applications on z/OS Volume 1, SG24-7177 Java Stand-alone Applications on z/OS Volume 2, SG24-7291