IBM HTTP server (optional)

In a PKI Services system, if you implement the Web application using REXX CGI execs the HTTP server handles all requests that it receives from a web browser. The requests can include requests for new certificates and requests to renew or revoke existing certificates. If needed, it performs authentication before allowing any exchange of information to take place. The IBM® HTTP Server is required if you use the REXX CGI Web application or if you use one or more of the CGI programs. CGI programs provide OCSP, SCEP, and the CMP support for PKI Services.

PKI Services supports two versions of IBM HTTP Server:

IBM HTTP Server V5.3 (powered by Domino)
IBM HTTP Server V5.3 is shipped with z/OS® and is based on the Domino web server.
IBM HTTP Server V7.0 (powered by Apache)
IBM HTTP Server V7.0 is based on Apache Software Foundation's Apache HTTP Server. It is part of the unpriced IBM Ported Tools for z/OS licensed program. For more information, see http://www.ibm.com/systems/z/os/zos/features/unix/ported/ihs/index.html and http://www.ibm.com/software/products/us/en/http-servers. It is also included with Websphere Application Server.

The HTTP server must be installed on the same system on which PKI Services is installed. SSL-enablement is required. If your HTTP server is SSL-enabled, your key file can be a RACF® key ring, or a key file created by another product. For more information, see Steps for setting up the IBM HTTP Server for PKI Services.