TLS for the Build Toolkit plug-in

During SAR creation, the Z Data Tools Build Toolkit plug-in needs to connect to an instance of the ZCC server (HFISRV).

If your HFISRV server is configured to require clients to connect using transport layer security (TLS), you will need to install the trust chain of your server’s digital certificate in the environment where the Build Toolkit runs.

The Z Data Tools Build Toolkit plug-in uses the default trust store of the JVM environment in which it runs, for example: $JAVA_HOME/jre/lib/security/cacerts

If your default trust store does not already contain the Certificate Authority (CA) trust chain of your server certificate, you will need to export your CA certificate chain and import it into the default trust store. For example: 
RACDCERT SITE EXPORT(LABEL('ZCC Server
                        Certificate')) DSN(ZCC.CERT)
   FORMAT(CERTDER)

Note that there may be multiple certificates in the trust chain.

Once you have the CA certificates of your server certificate, you can import them into the JVM default trust store using your preferred tooling. For example, using Java™ keytool:
keytool -import -trustcacerts -keystore jre\lib\security\cacerts -storepass changeit
 -noprompt -alias ZCC -file C:\certs\zcc.cert

With the CA trust chain in place, the Z Data Tools Build Toolkit plug-in will be able to establish a TLS connection with your HFISRV server.