# Setting up SSL on IBM i

This process will guide you through setting up the Digital Certificate Manager to enable your iSeries to interact as a client to other external servers requiring SSL connections, including CyberSource.

#### Step 1: Enter Digital Certificate Manager

To begin, verify that the *ADMIN HTTP server job is running with the following command:

`WRKSBSJOB SBS(QHTTPSVR)`

If you don't see *ADMIN in the list, please run the following command to start it:

`STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN)`

After you've ensured that the *ADMIN server is running, open a web browser (Internet Explorer is recommended), and go to http://_YourIBMIPAddress_:2001 - you should see a login page as seen below:

![Navigator for i login page at port 2001](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_1.png "Navigator login page")

Enter your IBM i username and password, and click "Log in". You should see a page split into two sections - a menu on the left, and a larger content area on the right that looks like the below image:

![Navigator for i welcome page showing the left-hand task menu](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_2.png "Navigator welcome page")

Click the "IBM i Tasks Page" link.

![Navigator IBM i Tasks page with Digital Certificate Manager link](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_3.png "Navigator IBM i Tasks page")

Now, click the "Digital Certificate Manager" link. You may be prompted to log in again - if you are, enter your IBM i username and password. It is recommended to log into the Digital Certificate Manager on a profile with elevated authority.

#### Step 2: Create New Certificate Store

Select the link "Create New Certificate Store"

![Digital Certificate Manager showing certificate store type selection with *SYSTEM highlighted](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_4.png "Certificate store type selection")

Ensure *SYSTEM is selected, and then select the "Continue" button. **Note: if *SYSTEM does not appear, this process has likely already been completed on your IBM i.**

![Digital Certificate Manager - Create New Certificate Store showing certificate store type selection with *SYSTEM selected](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_5.png "Create New Certificate Store")

#### Step 3: Select Yes

Select "Yes", and then press the "Continue" button.

![Digital Certificate Manager asking whether to create a certificate in the new certificate store, with Yes selected](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_6.png "Create certificate in store")

#### Step 4: Finish Entering Data

Put anything you want in the "Certificate label" field. Then, specify a "Password", and record it for future reference. Fill out the remaining fields, populating them with whatever data is necessary, and then select the "Continue" button.

![Digital Certificate Manager - Create New Certificate Store form with fields for certificate label, password, and certificate information](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_7.png "Create New Certificate Store form")

#### Step 5: Store Certificate Key

Cut and paste the below certificate key into a text editor (like Notepad) and save it someplace secure. Select the "OK" button.

![Digital Certificate Manager showing the generated certificate request data to be saved](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_8.png "Certificate request data")

#### Step 6: Ensure Proper Configuration

Selecting the "Select a Certificate Store" button at the top of the left sidebar will place you at the below screen. Make sure *SYSTEM is selected, and select the "Continue" button.

![Digital Certificate Manager - Select a Certificate Store with *SYSTEM selected](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_9.png "Select a Certificate Store")

Enter the password you specified in Step 4, and select the Continue button. **Note: If you ever forget the password, you can simply select "Reset Password" - you will be allowed to reset the password without knowing the previous password.**

![Digital Certificate Manager - Certificate Stores and Password screen with the certificate store password field highlighted](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_10.png "Certificate store password")

If your page looks like below, you have successfully set up SSL on your IBM i!

![Digital Certificate Manager - Current Certificate Store showing *SYSTEM successfully configured](https://isupport.katointegrations.com/cti/setting_up_ssl/ssl_setup_11.png "Current Certificate Store")