Enterprise Server listeners secured with SSL/TLS are working fine with the passphrase visible as text in mf-server.dat.
The listeners failed to start when the passphrase is stored using "mfsecrets" vaults.

Full article: https://portal.microfocus.com/s/article/KM000015457