DCM and SSL

I've seem some references to this on this list, but not enough for me to
figure out what I'm doing.  
We have been asked to do secure FTP with one of our banking partners.  
I have the option of doing SecureFTP(RFC2228) or SSHFTP(openSSH)
It looks like RFC2228 is related to SSL, but maybe I'm wrong.  

I am on V5R3 and have done a Go LICPGM and I see the following:
5722SS1   *COMPATIBLE  OS/400 - Digital Certificate Manager           
5722SS1   *COMPATIBLE  OS/400 - CCA Cryptographic Service Provider    
5722AC3   *INSTALLED   Crypto Access Provider 128-bit  
5722DG1   *COMPATIBLE  IBM HTTP Server 

However, when I go to HTTP admin and select the DCM task it tells me
that
 You must install one of the cryptographic access provider products on
your system before using the Digital Certificate Manager (DCM)
functions. Contact your system administrator. 

It appears that it doesn't think that  5722ac3 is installed, but it
looks like it to me.  What am I missing?

Thanks

Michael Smith
iSeries.mySeries.