Session-level security for APPN and HPR

Session-level security is achieved by specifying a password on the LOCPWD parameter during configuration. The iSeries system uses the password to validate the identity of the remote system during session establishment. The password must match the password specified on the remote system, or the connection is not allowed.

If the remote system does not support session level security (Series/1 RPS version 7.1, CICS/VS release 1.6):

Specify LOCPWD(*NONE) to establish the connection, and provide the necessary physical security

There is a security concern when you create device descriptions with APPN(*YES), and when APPN automatically creates and varies on a device description with the same remote network ID, location name, and local location name as the APPN remote location configuration list entry. To compensate for remote locations using an independent device description with APPN(*YES):

Add an entry to the APPN remote location configuration list that includes security information

Note:

In order to avoid using security information that cannot be predicted, ensure that all the device descriptions, as described above, contain exactly the same security information.