Configuring the server system

1. Create a Policy Agent main configuration file containing a TcpImage statement for the server stack.
2. Create a Policy Agent image configuration file for the server stack.
3. If AT-TLS policies are to be retrieved from the policy server, create image-specific AT-TLS configuration files, and optionally, common AT-TLS configuration files, on the policy server.

1. For local AT-TLS policies, add a TTLSConfig statement to the Policy Agent image configuration file, identifying the TTLSConfig policy file location:

   TTLSConfig	serverpath

2. For remote AT-TLS policies, add a PolicyServer statement to the policy client image configuration file:

   PolicyServer
   {
      ClientName  name
      PolicyType  TTLS
      {
         …
      }
      …
   }

   Add a DynamicConfigPolicyLoad statement to the policy server main configuration file:

   DynamicConfigPolicyLoad  clientname
   {
      PolicyType TTLS
      {
         PolicyLoad  serverpath
      }
      …
   }

TTLSRule                     XYZServerRule
{ 
       LocalPortRange                     5000	
       JobName                            XYZSRV	 
       Direction                          Inbound
       TTLSGroupActionRef                 XYZGroup
       TTLSEnvironmentActionRef           XYZServerEnvironment
}
TTLSGroupAction              XYZGroup
{
       TTLSEnabled                        On
}

TTLSEnvironmentAction        XYZServerEnvironment
{
       TTLSKeyRingParms
         {
           Keyring                        server_key_ring 
         }
       HandshakeRole                      SERVER
       Trace                              7
} 

1. Define the EZB.INITSTACK.sysname.tcpname profile for each AT-TLS stack.
2. Permit administrative applications to use the stack before AT-TLS is initialized.