TLS prerequisites

This topic describes the prerequisites for System TLS on the IBM® i, as well as some helpful tips.

Verify that you have the following options installed before you use TLS:
  • IBM Digital Certificate Manager (DCM) (5770-SS1 Option 34)
    Note: IBM Java™ Secure Socket Extension (JSSE), Oracle JSSE, and OpenSSL do not require DCM.
  • IBM TCP/IP Connectivity Utilities for i (5770-TC1)
  • IBM HTTP Server for i (5770-DG1)
  • If you are trying to access the IBM Navigator for i or DCM applications on port 2006, ensure that you have the required IBM Developer Kit for Java (5770-JV1) product options installed. Otherwise, the IBM i HTTP admin server does not start. The required product options are defined by the IBM HTTP Server group PTF cover letter.
Useful information:
  • The best System TLS performance is obtained by running on Power9 or newer hardware.