content_image/1007179.jpg content_image/1007180.jpg content_image/1007181.jpg
Use the Certificate Management task if the certificates that are returned by the 3270 server are not signed by a well-known trusted certificate authority (CA) certificate, such as VeriSign or Geotrust. An advanced action within the Certificate Management task, Manage Trusted Signing Certificates, is used to add trusted signing certificates. 

For example, if the certificate that is associated with the 3270 server on the IBM host is signed and issued by a corporate certificate, it must be imported, as shown in Figure 11-15. 

<img src='content_image/1007179.jpg'>

The import from the remote server option can be used if the connection between the console and the IBM host can be trusted when the certificate is imported, as shown in Figure 11-16. Otherwise, import the certificate by using removable media. 

<img src='content_image/1007180.jpg'>

A secure Telnet connection is established by adding the prefix L:  to the IP address:port of the IBM host, as shown in Figure 11-17. 

## 11.5.4 HMC and SE microcode 

<img src='content_image/1007181.jpg'>

The microcode for the HMC, SE, and CPC is included in the driver or version. The HMC provides the management of the driver upgrade through Enhanced Driver Maintenance (EDM). EDM also provides the installation of the latest functions and the patches (MCLs) of the new driver. 

When you perform a driver upgrade, always check the Driver (xx) Customer Exception Letter option in the Fixes section at the IBM Resource Link. 

For more information, see 9.8, “z14 ZR1 Enhanced Driver Maintenance” on page 338. 

