Re: Configure Telnet to require a certificate that I send to users

["Art Tostaine, Jr." <atostaine@xxxxxxxxx>]

Thanks for the reply.

The clients are employees, not the public.  We just need to tell them how to
import the certs.  Looking around windows now.  Any tips on where to import?

Art

On 1/30/07, Sean Porterfield <sporter@xxxxxxxxxxxx> wrote:
> Art Tostaine, Jr. wrote:
> > We have secure telnet working, but we want to limit telnet connections
> > outside the firewall to users who have been emailed a certificate that
> we've
> > created.
> >
> > We know how to create the cert.
> >
> > How do we configure telnet to require it?  How do we import it to the
> > client?  Is it possible?  Thanks
>
>
> There are many possible answers depending on exactly what you want to do
> and what release level you have.  I'm taking it for granted that you are
> forwarding port 992 through the firewall but not 23 (ensuring that SSL
> is required from outside.)
>
> In DCM, you can update the telnet server with "Client authentication
> required" which means it will not allow SSL connections without a
> trusted certificate.  You assign which CA to be trusted, and that part
> is set.
>
> On the clients, you have to have the server CA in the key database, then
> you can import the certificate.  Otherwise, a pre-made kdb could be sent
> to the client with instructions on where to put it and what the password
> is.  This part really depends on who your clients are.
> --
> Sean Porterfield
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.