TLS prerequisites

This topic describes the prerequisites for System TLS on the IBM i, as well as some helpful tips.

Verify that you have the following options installed before you use TLS:
  • IBM® Digital Certificate Manager (DCM) (5770-SS1 Option 34)
    Note: IBM Java™ Secure Socket Extension (JSSE), Oracle JSSE, and OpenSSL do not require DCM.
  • IBM TCP/IP Connectivity Utilities for i (5770-TC1)
  • IBM HTTP Server for i (5770-DG1)
  • If you are trying to access the IBM Navigator for i or DCM applications on port 2006, ensure that you have the required IBM Developer Kit for Java (5770-JV1) product options installed. Otherwise, the IBM i HTTP admin server does not start. The required product options are defined by the IBM HTTP Server group PTF cover letter.
Useful information:
  • The best System TLS performance is obtained by running on Power9 or newer hardware.