When changes to certificates or the key repository become effective on z/OS

Changes become effective when the channel initiator starts or the repository is refreshed.

Specifically, changes to the certificates in the key ring and to the key repository attribute become effective on either of the following occasions:

When the channel initiator is started or restarted.
When the REFRESH SECURITY TYPE(SSL) command is issued to refresh the contents of the key repository.