Secure communications by creating a new TLS certificate
With IBM® Storage Protect 8.1.20, you can create a new Transport Layer Security (TLS) certificate by using the CREATE CERTIFICATE command.
After you create a new TLS certificate, set the new certificate as the default in the server certificate keystore by using the SET DEFAULTTLSCERT command. To specify the number of days in advance that the server warns you that the default certificate is going to expire, use the TLSCERTEXPIREWARNDAYS server option.
You can decide how frequently you want to be warned that the default certificate will expire. By using the TLSCERTEXPIREWARNCONN server option, you can specify that the server warns you about certificate expiration only when the server first starts. Or, you can specify that the server warns you that the default certificate will expire every time a new TLS-enabled connection is started.