To configure an SSL server on z/OS, perform the following tasks:
Update the AT-TLS policy file.
Create a personal certificate.
Configure the PowerExchange Listener.
Because AT-TLS is part of the TCP/IP stack, the network system programmer typically holds the responsibility for maintaining the AT-TLS policy file and infrastructure.