To configure an SSL server on z/OS, perform the following tasks:
Update the AT-TLS policy file.
Make a personal certificate available on z/OS.
Configure the PowerExchange Listener.
Because AT-TLS is part of the TCP/IP stack, the network system programmer typically holds the responsibility for maintaining the AT-TLS policy file and infrastructure.