The IKE daemon configuration file must be updated to include the NetworkSecurityServer parameter and optionally the NetworkSecurityServerBackup parameter on the IkeConfig statement. These parameters identify the location of the NSS server. In addition, an NssStackConfig statement with a ServiceType value Cert must be added for each stack that will use the NSS certificate service. For additional details about configuring the IKE daemon, see z/OS Communications Server: IP Configuration Reference.