SSL System Value: QSSLPCL - Secure Sockets Layer Protocols

The QSSLPCL system value setting identifies the specific protocols that are enabled on the system. Applications can negotiate secure sessions with only the protocols that are listed in QSSLPCL. For example, to restrict the System SSL/TLS implementation to use only TLSv1.2 and not allow any of the older protocol versions, set QSSLPCL to contain only *TLSV1.2.

Task Use Command Information Displayed on Screen
To display system value DSPSYSVAL SYSVAL(QSSLPCL)

Display System Value

System value . . . . . : QSSLPCL

Description . . . . . : Secure sockets layer protocols

Protocols

*OPSYS

To change system value CHGSYSVAL SYSVAL(QSSLPCL)

Change System Value

Type choices, press Enter.

System value . . . . . . . . . . > QSSLPCL

New value . . . . . . . . . . . *OPSYS

MFT IBM i Platform Server Product Recommended Value: *OPSYS

The QSSLPCL special value *OPSYS allows the operating system to change the protocols that are enabled on the system on a release boundary. The value of QSSLPCL remains the same when the system upgrades to a newer operating system release. If the value of QSSLPCL is not *OPSYS, then the administrator must manually add in newer protocol versions to QSSLPCL after the system moves to a new release.

IBM i Release QSSLPCL *OPSYS definition
7.1 *TLSV1
7.2 *TLSV1.2 *TLSV1.1 *TLSV1
7.3 *TLSV1.2 *TLSV1.1 *TLSV1