To configure an SSL client or server on IBM i, perform the following tasks:
Create a CA certificate using IBM Navigator for i.
Create a server or client certificate using IBM Navigator for i.
Customize the DBMOVER configuration file.
Although it is possible to make outbound connections from IBM i machines that run V7R2 or V7R3 to other machines that use protocol TLSV1_2, it is currently not possible to make outbound connections from IBM i machines that run V7R4 to other machines because of limitations in the common protocols and ciphers.
GSK functions in a PowerExchange SSL Environment. PowerExchange uses the IBM i GSKit API. For more information, see the IBM documentation.