What is required to implement SSL with encryption for TN3270 session on CS for OS/390 V2R10?

What is required to implement SSL with encryption for TN3270 session on CS for OS/390 V2R10? We are thinking of setting up a port for the 2nd TN3270 and secured this port.
I asked Jim Keohane, site expert on Search390.com to respond to this question. Here's what Jim had to say:

In later releases of OS/390, the TN3270 server that is part of Communication Server supports SSL. IBM's Personal Communciations (a.k.a. PCOM), V4.3 and up, supports SSL. If you want you can use Host On-Demand which also supports SSL. If you have standardized on one or two vendors' emulators take a peek at their documentaion.

For example, see WRQ's Reflection for IBM downloadable at http://www.wrq.com/assets/products_0808.pdf.