RE: PC5250 Telnet - security and setup

The client side depends on your client software.  For Mochasoft, just
click on the advanced tab and tell it to use SSL.  It does not care
about any certificate and will connect to any thing.  Client Access you
must first download the certificate and install into your client access
certificate data base.  

First though, for client access, you have to have the SSL software
installed.  In selective setup, make sure the SSL option is selected.
Once the SSL component is installed, you need to open OpsNav.  Right
click on the server you want to connect to via ssl, select properties
and navigate to the Secure Sockets tab.  Start with the download to
retrieve the SSL certificate.  Once download you can run the Verify SSL.
Once Verified successfully you can check the Use Secure Socket box.
Client Access will now use secure sockets for communications.

Other TN5250 emulators may have different ways of retrieving and
installing the necessary certificate in order to work.  Please consult
their documentation.


Christopher Bipes
Information Services Director
CrossCheck, Inc.

707.586.0551, ext. 1102
707.585.5700 FAX

Chris.Bipes@xxxxxxxxxxxxxxx
www.Cross-Check.com

Notice of Confidentiality: This e-mail, and any attachments thereto, is
intended only for use by the addressee(s) named herein and may contain
legally privileged and/or confidential information.  If you are not the
intended recipient of this e-mail, you are hereby notified that any
dissemination, distribution or copying of this e-mail, and any
attachments thereto, is strictly prohibited.  If you have received this
e-mail in error, please immediately notify me by e-mail (by replying to
this message) or telephone (noted above) and permanently delete the
original and any copy of any e-mail and any printout thereof.  Thank you
for your cooperation with respect to this matter.


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tom Jedrzejewicz
Sent: Tuesday, December 06, 2005 8:44 AM
To: Midrange Systems Technical Discussion
Subject: PC5250 Telnet - security and setup

Greetings!

I have just gone through the exercise to get iSeries Access / PC5250 /
Telnet to be able to use SSL.  It as quite an ordeal, with multiple
iterations of certificate creation, importing, assigning to
applications, etc.  Given that, I am not completely clear.

Once SSL is working on the iSeries and is setup for Telnet, can
someone clarify what needs to be done on the PC to get PC 5250 working
over SSL.

Additionally, I was wondering about your opinions ...

1. Is it worth setting up for internal use?  How about for remote PC's
connection through client VPNs?

2. Is using PC5250 and SSL secure enough to allow use over the
internet without VPN?  Would you guys recommend this?  Is there
additional security that you would undertake if doing so?