RE: Digital Certificate Expiration

When it stops working is a good indication of expired certificates.
Starting with V5R3 DCM has an option to check for certificates the
expire in XX days.  You can then re-new the ones listed and assign the
new certificates.  They will not take effect until you re-start the
appropriate service.  You can have up to 2000 days if you set the store
up correctly.  But who will remember years from now to check the certs.
I have a monthly procedure to check what will expire with in the next 60
days. 


Christopher Bipes
Information Services Director
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Hart, Doug - ETG
(Contractor)
Sent: Tuesday, May 02, 2006 12:35 PM
To: Midrange Systems Technical Discussion
Subject: Digital Certificate Expiration

 
How are people managing digital certificate expirations?

We are setting up SSL for our MQ queues.  This is for different iSeries
partitions in different datacenters and some PC servers.  The default
when creating DCs is that they expire in one year.  I'm assuming that
when I renew my certificates that I'll need to export them back out to
the other systems.  This is about a 2 hours process.  

Other than setting a reminder in my calendar for next year I see no way
to remember this.  I see no way the iSeries will remind me other than
the application failing.   Heck, I might not even be involved with this
next year.