Secure Socket Layer (SSL) parameters

SSL_PORT parameter
Specifies the port number on the Content Manager OnDemand server dedicated to communicating with the SSL protocol. This port number must be different than the non-SSL port number. To set the Content Manager OnDemand server to only use the SSL protocol, also set the PORT parameter in the ARS.INI file to a value of -1 (PORT=-1). Specify 0 to indicate that no port on the Content Manager OnDemand server communicates with the SSL protocol.
SSL_KEYRING_FILE parameter
Identifies the HFS key database file, RACF key ring, or z/OS® PKCS#11 token that is used by the server. For example, SSL_KEYRING_FILE=/etc/ars/arssockd.kdb specifies an HFS key database file, SSL_KEYRING_FILE=ARSUSER/ARSSOCKD.SSLRING specifies a RACF key ring named ARSSOCKD.SSLRING that is owned by user ARSUSER, and SSL_KEYRING_FILE=*TOKEN*/SSLTOKEN specifies a PKCS#11 token.
SSL_KEYRING_STASH parameter
Identifies the location and name of the SSL Keyring stash file that is used by the server. For example, SSL_KEYRING_STASH=/usr/lpp/ars/V10R5M0/config/ondemand.sth.
SSL_KEYRING_LABEL parameter
Specifies the label of the SSL key.
SSL_CLNT_USE_SSL parameter
Specifies whether the server-side clients (for example, ARSDOC, ARSMAINT, or ARSLOAD) must communicate with the SSL protocol. Specify 0 to indicate that the clients do not communicate with the SSL protocol. Specify 1 to indicate that the clients must communicate with the SSL protocol.

Parent topic: Verify the ARS.INI file