Before you begin:

Procedure

Perform the following steps to install and configure the IBM HTTP Server to work with PKI Services:

1. Use the following table to decide what you need to do:

   If …	Then …	Notes
   The IBM HTTP Server is not installed and configured …	Install and configure IBM HTTP Server by following the instructions in the installation section of IBM HTTP Server 7.0 User’s Guide..	Guideline: For PKI Services, when you install the IBM HTTP Server, do not use a password file.
   The IBM HTTP Server is installed but not configured for SSL …	Fill in the missing values in the table in the next step. (The RACF® programmer needs information for setting up PKI Services; see Running IKYSETUP to perform RACF administration.)	—
   The IBM HTTP Server is installed and configured for SSL using a RACF key ring …	Fill in the missing values in the table in the next step. (The RACF programmer needs information for setting up PKI Services; see Running IKYSETUP to perform RACF administration.)	—
   The IBM HTTP Server is installed and configured for SSL using gskkyman …	Fill in the missing values in the table in the next step. (The RACF programmer needs information for setting up PKI Services; see Running IKYSETUP to perform RACF administration. The RACF programmer also needs to add your CA certificate to an existing keyfile; see Using a gskkyman key database for information about gskkyman steps.)	—

   You can now perform the steps for the decision you have made.

   _______________________________________________________________

2. Fill in the rightmost column of the following table with information from the configuration:

   Table 1. IBM HTTP Server information you need to record

   IBM HTTP Server information	Explanation	Value
   IBM HTTP Server fully qualified domain name	A fully qualified domain name is the name of a host system. It includes a series of subnames (each of which is a domain name). For example, ralvm7.vnet.ibm.com is a fully qualified domain name that includes the domain names ibm.com and vnet.ibm.com. (The RACF administrator needs to know the fully qualified domain name when setting up PKI Services.)
   The full UNIX path name of your httpd.conf and vhostport_number configuration files	(The Web server programmer needs to know the full UNIX path name when updating the httpd.conf and vhostport_number configuration files to support PKI Services.)