topic Re: Is SAS/SECURE on z/OS required to support FIPS-140 SSH? in Administration and Deployment

Is SAS/SECURE on z/OS required to support FIPS-140 SSH?

bconlin — Wed, 26 Jul 2017 19:14:44 GMT

I have two versions of SAS running on a z/OS v2.1 system; v9.1.3 and v9.2. The doc isn't precise but seems to say that although

these versions will support OpenSSH (Ported Tools for z/OS) for encryption, they do not support the FIPS-140 standard without the

addition of the separately licensed and installed SAS/SECURE product. My other choice would be to migrate to v9.4 at which the SAS/SECURE product is part of the SAS/Base code.

Is my understanding correct?

Thanks in Advance!

Re: Is SAS/SECURE on z/OS required to support FIPS-140 SSH?

JuanS_OCS — Thu, 03 Aug 2017 12:02:46 GMT

Hello @bconlin,

you will need SAS/SECURE indeed, on any operating system, indeed. I do not think you need to upgrade to 9.4 due to this reason (just be sure you get this module). But it is also true it is a good idea to migrate/upgrade to get full level of support from SAS.

In other hand, I am not quite sure if FIPTS-140 is even possible on z/OS. I have seen documentation for Unix/Linux and Windows systems only.

http://support.sas.com/kb/56/272.html

Perhaps it would be a good idea to share this question with SAS technical support.