First, install the Password Expiration Manager (PEM) on the mainframe (see the host installation and configuration instructions).
Then, configure access to the remote host PEM software using the Gateway Profile utility. Select location type PEM (APPC)
or PEM (TCP).