IBM Access Client Solutions over TLS versus self-signed server certificate renewal -- MIDRANGE-L

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

Subject: IBM Access Client Solutions over TLS versus self-signed server certificate renewal
From: Jack Callahan <jjcllhn@xxxxxxxxx>
Date: Wed, 23 Jan 2019 10:16:11 -0500
List-archive: <https://archive.midrange.com/midrange-l/>
List-help: <mailto:midrange-l-request@lists.midrange.com?subject=help>
List-id: Midrange Systems Technical Discussion <midrange-l.lists.midrange.com>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

Last year, I created a self signed server certificate, built a network
deployment of ACS over TLS to secure connections. Very happy to close a
large vulnerability- old Client Access installs configured to pass
credentials in plain text.

Said server certificate will expire in February. I can renew the
certificate in DCM, and assign it the the corresponding ACS services.

What can I expect to happen when the current ACS clients attempt to connect
using the old server certificate?

Will the user be prompted to accept the new certificate?

Will the connections just fail?

Do I need to rebuild the ACS network deployment configuration to include
the new server certificate?

Appreciate anyone willing to share their experience in a similar situation

As an Amazon Associate we earn from qualifying purchases.

Follow-Ups:

Re: IBM Access Client Solutions over TLS versus self-signed server certificate renewal , B Stone

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.