hmm after zmtlsctl https you shouldn't be able to access via http (port 8888)
.
zmprov accesses configuration data stored in ldap. you should only need to execute a command once, though it may be necessary to restart tomcat or whatever uses the particular parameter for the change to take effect.