Entire X Security - does it require SAF

Our site is running Entire X 7.3.3 on z/OS 1.9
We want to turn on Entire X Security.
The documentation sometimes mention SAF-compatiable like RACF, we have RACF too.

My question is in order to turn on Entire X Security to accept SSL conversation from .Net client, do we need to have SAF first? :?:

I’m confused. Do you want to use SSL or do you want to use Security ?

We want to use security

Since you have RACF, what is the problem ?