SSLPKCS12PASS= System Option

Specifies the password that TLS requires for decrypting the private key.

Client: Optional
Server: Optional
Valid in: Configuration file, OPTIONS statement, SAS System Options window, SAS invocation, SAS/CONNECT spawner command line
Category: Communications: Networking and Encryption
PROC OPTIONS GROUP= Communications
Operating environment: UNIX, z/OS
Tip: When additional encryption options are specified on the spawner command line, the options must be included in the -SASCMD value. The spawner does not automatically pass the encryption values. For detailed information, see SASCMD for your operating environment in SAS/CONNECT User’s Guide.
TLS on a z/OS Spawner on a SAS/CONNECT Server: Example

TLS for SAS/SHARE on z/OS: Example

Syntax

SSLPKCS12PASS=password

Syntax Description

password

specifies the password that TLS requires in order to decrypt the PKCS #12 DER encoding package file. The PKCS #12 DER encoding package is stored in the file that is specified by using the SSLPKCS12LOC= option.

Details

The SSLPKCS12PASS= option is required only when the PKCS #12 DER encoding package is encrypted. The z/OS RACDCERT EXPORT command always encrypts package files when exporting the certificate and the private key.
You must specify both the -SSLPKCS12LOC option and the -SSLPKCS12PASS option in the -SASCMD script if you want the spawner to locate the appropriate digital certificate.