If using RACF, follow these steps:

Generate the DCAS server self-signed certificate on the host and transfer to the DCAS client.
1. Create a self-signed server certificate using RACDCERT gencert:
```
RACDCERT ID(dcasid) 
SUBJECTSDN(CN('DCASCERT') 
OU('TEST') 
C('US')) 
TRUST 
SIZE(512) 
WITHLABEL('DCASCERT')
```
  where dcasid is the name of the user ID.
2. Use RACDCERT Connect to connect the certificate to a key ring and make it default. This example assumes a key ring called SERVERKeyring already has been created.
```
RACDCERT ID(dcasid) 
CONNECT(ID(dcasid) 
LABEL('DCASCERT') 
RING(SERVERKeyring) 
USAGE(PERSONAL) DEFAULT)
```
  where dcasid is the name of the user ID.
3. Use RACDCERT EXPORT to export the DCAS server self-signed certificate in ".DER" format to an MVS file.
```
RACDCERT ID(dcasid) EXPORT(LABEL('DCASCERT')) 
DSN('dcasid.SAFCERT.DER') 
FORMAT(CERTDER)
```
  where dcasid is the name of the user ID.
FTP the exported DCAS server certificate to the DCAS client using the FTP binary option.