Re: secure telnet/equivalent -- MIDRANGE-L

Scott,

That seems to solve my confusions. I was assuming that anything with the term "cryptographic" meant that I needed crytographic support.

Thank you.

Peter

Scott Klement wrote:

The "Cryptographic Support" hardware, and licensed program are NOT
required for SSL.

What *IS* required is called "Cryptographic Access Provider" and "Client
Encryption" licensed programs.

They are 5769-AC3 and 5769-CE3  (at least, that's what they were for me at
V4R5)  and, although they aren't included on the OS install CD, they are
free-of-charge from IBM.

Or at least -- they are in the USA.   Different countries have different
laws on what kind of encryption you can use, and whether or not it can be
used across links that go out of the country.

I'm sure that's why IBM doesn't include the crypto support with OS/400.
They want to know who you are and what country, etc, to make sure they're
conforming to the appropriate laws.   There are also different levels of
encryption that you can get.   The AC3 product I listed above supprots 128
bit encryption.  There are AC1 and AC2 products that support lower levels
of encryption.

Call your local business partner and ask them what you need for SSL.  I'm
sure they'll be happy to tell you what products you need, and order them
for you.

On Wed, 2 Apr 2003, Peter Czarny wrote:

Well, IBM makes it quite difficult to tell whether cryptographic
support is required or not. But, when I start to go through the
configuration (of DCM) through the HTTP server, it hits me with a
message that cryptographic support is required. I can not find an
alternate way to proceed and any documentation I research leads me down
the same path. It does seem quite convoluted. Of course, the discussion
about IBM SSL is academic as the system is at 4.3 which is not
supported by IBM. However, now I am determined to solve this. If and
when I find an answer I will let you know. I really appreciate your
input.

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.