Enabling the IBM HTTP Server - Powered by Apache for surrogate operation
Your server must be able to act as a surrogate for clients requesting
certificates. To enable this, create: 
Give the IBM® HTTP
Server - Powered by Apache daemon
user ID READ access to both of these profiles.
- Profile BPX.SERVER in the FACILITY class
- Profile BPX.SRV.PKISERV in the SURROGAT class.
Give the IBM® HTTP
Server - Powered by Apache daemon
user ID READ access to both of these profiles.