× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. January 2008

Re: Configure INav to use SSL

Chris,
I have Client Encryption (5722CE3) installed, but do not see the SSL client in iNav selective setup.
I am installing from the QIBM/QCA400 directory on my System i.

What am I missing?

Thanks,


Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical Solutions V5R2
IBM Certified Specialist- e(logo) server i5Series Technical Solutions Designer V5R3
IBM Certified Specialist- e(logo)server i5Series Technical Solutions Implementer V5R3









----- Original Message ----
From: Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, January 10, 2008 4:19:46 PM
Subject: RE: Configure INav to use SSL

You may not have installed the SSL part on your PC. Start with
selective setup and make sure SSL client is installed on your PC. If
not, verify that the client encryption is installed on the iSeries you
installed your PC from. Once you have the Client SSL on your PC, you
can right click the server in iNav / properties / Secure Sockets. Click
on Download button under OS/400 Certificate Authority.

Close iNav and reopen. Now go back to connection properties / secure
sockets and click the verify SSL connection.

Now you can decide what you want to be secure. iNav and / or PC5250.


Chris Bipes
Director of I.S.
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of DeLong, Eric
Sent: Thursday, January 10, 2008 1:00 PM
To: Midrange Systems Technical Discussion
Subject: RE: Configure INav to use SSL

I think you must use iSeries Navigator to define the SSL connection
properties. Open the properties for the system, Select the Secure
Sockets tab, check "Use Secure Sockets Layer...." There is a button for
downloading the SSL certificate from the host. The certificate must be
available on the host...

Eric

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Jeff Young
Sent: Thursday, January 10, 2008 2:48 PM
To: Midrange Systems Technical Discussion
Subject: Re: Configure INav to use SSL


The problem is that I do not see any place to indicate SSL for my
connection properties.
The Help contents indicate that there is a component IKEYMAN that is
used to install the CA certificate into iSeries Access key database, but
I do not see that either.
From what I recall in the past, there was an SSL component it iSeries
Access that needed to be installed, but I do not see it in the selective
setup window.

Thanks,

Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical
Solutions V5R2 IBM Certified Specialist- e(logo) server i5Series
Technical Solutions Designer V5R3 IBM Certified Specialist-
e(logo)server i5Series Technical Solutions Implementer V5R3









----- Original Message ----
From: Paul Nelson <nelsonp@xxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, January 10, 2008 3:30:01 PM
Subject: RE: Configure INav to use SSL

You need to get the certificate from that system's administrator and
import it into your PC.

Then, in the configuration of your CA session, you click the properties
of the server, and define you are using SSL and where to get the
certificate.

Paul Nelson
Cell 708-670-6978
Office 512-392-2577
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jeff Young
Sent: Thursday, January 10, 2008 2:25 PM
To: Midrange Systems Technical Discussion
Subject: Re: Configure INav to use SSL

I am connecting to a remote System i that uses SSL.
I need to configure iSeries Access to get the certificate and use SSL
for connections.

Thanks,

Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical
Solutions
V5R2
IBM Certified Specialist- e(logo) server i5Series Technical Solutions
Designer V5R3 IBM Certified Specialist- e(logo)server i5Series
Technical Solutions Implementer V5R3









----- Original Message ----
From: Paul Nelson <nelsonp@xxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, January 10, 2008 3:14:32 PM
Subject: RE: Configure INav to use SSL

Have you created the necessary certificate(s)?

You need to begin with configuring DCM through http://yoursystem:2001
after you start the ADMIN instance in your HTTP server

STRTCPSVR *HTTP HTTPSVR(*ADMIN)

Paul Nelson
Cell 708-670-6978
Office 512-392-2577
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jeff Young
Sent: Thursday, January 10, 2008 1:59 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Configure INav to use SSL

Where do I find the component to allow iNav to configure an SSL
connection to a remote system?
I am running iSeries Access V5R3M0 and do not see an SSL component in
the Selective Setup install window.

Thanks,

Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical
Solutions
V5R2
IBM Certified Specialist- e(logo) server i5Series Technical Solutions
Designer V5R3 IBM Certified Specialist- e(logo)server i5Series
Technical Solutions Implementer V5R3
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



As an Amazon Associate we earn from qualifying purchases.

This thread ...
Follow-Ups:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.