RE: Telnet-SSL

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

There is a whole process for SSL enabling an AS400.  Not much different than
you would for a Windoze server.  Basically install the Digital Certificate
Manager software on your AS400.  Option 34 of OS400.  But you need to have
your HTTP server installed and start the ADMIN instance on the AS400 to
configure everything.  You will also have to order and install AC1 (56 bit),
AC2 (64 bit) or AC3 (128 bit) Crypto Access Provider 128-bit for AS/400.  If
you want to install the CA Express encryption on your PC's, you will also
have to order and install CE1,2, or 3 Client Encryption 128 bit on to your
AS400.  Both AC3 and CE3 are free of charge.  Once all is installed, Admin
instance of the HTTP server is up and running, browse to
http:\\youras400:2001  You will have to logon with a user that has *sysctl
and *iosyscfg special authorities.  May even need *allobj.  From there
select the digital certificate manager.

There are instructions there for first time setup.  There are several white
papers available to teach you how to get it all done.  I can help after you
get started and have specific questions.

Chris Bipes

-----Original Message-----
From: Tom Jedrzejewicz

I have some questions.  My apologies if they are stupid.

My understanding - please correct me if I am wrong!
--> The telnet server can be configured to use telnet-ssl only, insecure
telnet only, or both.
--> When this feature is ON the telnet server listens to the "telnet-ssl"
port, but requires a client certificate before granting a connection.

1> What has to be done on the iSeries to configure the SSL?  I can't seem to
get CA Express to connect
 
2> How does one go about issuing certificates to the clients?

3> Is this sufficient to allow one to turn on telnet-ssl access from the
internet?