Re: Telnet concerns from auditors

Hello,

Setting up SSL Telnet would mean using the Digital Certificate Manager,
correct? Is that an administrative nightmare for hundreds of users, or is
there a method of using a 'blanket' cert that would cover an entire box?

In standard SSL, there's a certificate that identifies the server. That's all.

In client-authentication SSL (which is unusual) each PC has to have a certificate in addition to the server having to have one.

Then, of course, each certificate has to be verified against a trusted certificate authority (CA), that may or may not require CA certificates to be installed on the client side -- but if it does, it's one certificate -- the same certificate -- that has to be installed on every PC.

The client side software that we use does not require the CA certificate -- because our primary concern is that the connection be encrypted -- we're not worried about man-in-the-middle attacks.