RE: Telnet SSL in a HA (Mimix) shop

Wouldn't you have to copy the store to the backup LPAR?
How would SSL function on the backup if the primary was totally down?

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Krill, Coy
Sent: Wednesday, February 11, 2015 2:32 PM
To: Midrange Systems Technical Discussion
Subject: RE: Telnet SSL in a HA (Mimix) shop

We use a wildcard cert issued by Geotrust and have it on all of our LPARs. We don't' replicate the certificate store either, though, I did originally copy it over from our production lpar to our test and dr lpars. It worked fine once I set the security appropriately on the files in the IFS. That led me to conclude that we probably could replicate it, but we don't.

Coy Krill
Core Processing Administrator/Analyst
Washington Trust Bank

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Wednesday, February 11, 2015 09:36
To: midrange-l@xxxxxxxxxxxx
Subject: Telnet SSL in a HA (Mimix) shop
Importance: Low

I'm dabbling a little with
http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_72/rzaj4/rzaj45raddingtelnet.htm?lang=en-us

Before I get started I want to ensure that if I put a certificate on MAIN and then we do a Mimix switch and they come up on BACKUP that their sessions don't complain because the server isn't who it said it was. Valid concern? Easily alleviated provided you apply the certificates just right?


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.




=====================================================================================================
This electronic mail message and any attachments may contain confidential or privileged information and is intended for use solely by the above-referenced recipient. Any review, copying, printing, disclosure, distribution, or other use by any other person or entity is strictly prohibited under applicable law. If you are not the named recipient, or believe you have received this message in error, please immediately notify the sender by replying to this message and delete the copy you received. =====================================================================================================

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.