SSL prerequisites

This topic describes the prerequisites for System SSL on the IBM® i, as well as some helpful tips.

Verify you have the following options installed before using SSL:

  • IBM Digital Certificate Manager (DCM) (5770-SS1 Option 34)
    Note: IBM Java™ Secure Socket Extension (JSSE) and OpenSSL do not require DCM.
  • IBM TCP/IP Connectivity Utilities for i (5770-TC1)
  • IBM HTTP Server for i (5770-DG1)
  • If you are trying to use the HTTP server to use the DCM, ensure that you have the IBM Developer Kit for Java (5770-JV1) installed. Otherwise, the HTTP admin server will not start.
  • You may also want to install cryptographic hardware to use with SSL to speed up the SSL handshake processing. If you want to install cryptographic hardware, you must also install the IBM CCA Service Provider (5770-SS1 Option 35) and IBM Cryptographic Device Manager (5733-CY3).