Use the TLSMECHANISM keyword and parameters to specify whether to use IBM® System SSL directly or AT-TLS policies. It is recommended to use AT-TLS to implement TLS security. For more information about using AT-TLS policies, see Customizing DCAS for TLS/SSL in z/OS Communications Server: IP Configuration Guide.