Re: Configure Telnet to require a certificate that I send to users

Wayne McAlpine wrote:

One of our guys came up with the bright idea of simply configuring one 
client pc and then copying the .kdb file to all of the others.  Sure 
beats having to fire up the certificate manager on every box and can 
save a lot of time if you have more than just a few pc's to configure. 
FWIW.

That's exactly why I said it depends on your goal.  We log every SSL
connection and extract the username from the certificate.  If desired,
we could deny access based on username (for example: *DISABLED, deleted)
or based on and individual certificate ID that might have been
compromised.  We also require a named device for every SSL session (no
QPADEV* for that).

I also do not email certificates or .kdb files, but the OP didn't seem
to be overly concerned about that part.
--
Sean Porterfield