To do anything with SSL (HTTPS communication or TLS secure SMTP for example) the IBM i needs a certificate store with at least a *SYSTEM certificate store.

Setting up the *SYSTEM certificate store in the Digital Certificate Manager

1.Start the Digital Certificate Manager (DCM) by typing:
 
STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN)
 

2.Connect to the ADMIN instance of the HTTP server by pointing your Web browser to:
 
http://your-system-name:2001
 
Note: If this fails try opening http://your-system-name:2001/QIBM/ICSS/Cert/Admin/qycucm1.ndm/main0 which was suggested in the IBM document: How to Create the *SYSTEM Store in DCM

3.Click "Digital Certificate Manager"

4.Click "Create New Certificate Store" (in the Navigation frame on the left)                                                  

5.Follow the prompts to create a *SYSTEM certificate store                                                      

You do not need to create or assign any certificates unless required by the business partner that you will be communicating with.  Usually this is only required when security is vital (such as when talking to a bank). Companies like UPS, for example, don't require you to send them any certificates.

See Also

Granting Users Permission to run SSL applications

Install & Configure an SSL Certificate and Key