Use the Certificate Management task if the certificates that are returned by the 3270 server  are not signed by a well-known trusted certificate authority (CA) certificate, such as VeriSign  or Geotrust. An advanced action within the Certificate Management task, Manage Trusted  Signing Certificates, is used to add trusted signing certificates. For example, if the certificate that is associated with the 3270 server on the IBM host is  signed and issued by a corporate certificate, it must be imported, as shown in Figure 10-18. The import from the remote server option can be used if the connection between the console  and the IBM host can be trusted when the certificate is imported, as shown in Figure 10-19.  Otherwise, import the certificate by using removable media. A secure Telnet connection is established by adding the prefix  L:  to the IP address:port of the  IBM host, as shown in Figure 10-20. The microcode for the HMC, SE, and CPC is included in the driver or version. The HMC  provides the management of the driver upgrade through Enhanced Driver Maintenance  (EDM). EDM also provides the installation of the latest functions and the patches (MCLs) of  the new driver.  When you perform a driver upgrade, always check the Driver (41) Customer Exception Letter  option in the Fixes section at the IBM Resource Link. For more information, see 9.9, “z15 Enhanced Driver Maintenance” on page 402.  Chapter 10. Hardware Management Console and Support Element  433 10.5.4 HMC and SE microcode Figure 10-18 Manage Trusted Signing Certificates Figure 10-19 Import Remote Certificate example Figure 10-20 Configure 3270 Emulators