Well, for one, right now we can even start testing IBM I Access Client because it will not work with our current certificate setup. And we can't change the certificate to make Access Client work without breaking Client Access. So I don't see any other path then to update all the Client Access versions so we can then install the new certificate so we can then start testing and finally deploy Access Client and remove Client Access.
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Friday, December 18, 2015 10:04 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: Client Access, Access Client and certificates
<snip>
It looks like the only solution for us is to get around 500 clients upgraded to the most recent version of Client Access </snip>
No, it freaking isn't!!!! (Sorry, now let me calm down...)
Why are you running a mix of "IBM i Access Client Solutions" and the deprecated "IBM i Access for Windows"? And why would you go through the pain of upgrading the deprecated "IBM i Access for Windows" to some newer patch instead of replacing it with "IBM i Access Client Solutions"?
I think we've covered this replacement in a thread or two recently.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: Mike Cunningham <mike.cunningham@xxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 12/18/2015 09:57 AM
Subject: Client Access, Access Client and certificates
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>
Just want to share a situation that we are having related to Client
Access, Access Client and certificates. After upgrading from a Power 6 to
a Power 8 system (staying at the same OS level 7.1) we had trouble using
System I Navigator in SSL mode. Client Access Telnet SSL worked OK but
Navigator would not work under SSL. It would work non-SSL. We also could
not get Access Client (new java tool) to connect using SSL. Even Telnet
under Access Client would not work SSL when Client Access telnet SSL did
work. IBM got involved, IBM got Verisign involved. Traced it back to a G4
Verisign Intermediate certificate. We got a new G5 certificate from
Verisign and applied it. That fixed the problem with Navigator and with
Access Client. But it broke Client Access telnet SSL for most of the
campus. Client Access has to be at certain patch level of version 7.1 to
work with the new G5 Verisign certificate. We had to remove the G5 cert
and go back to the G4 cert to get our users back on the sy
stem. It looks like the only solution for us is to get around 500 clients
upgraded to the most recent version of Client Access before we can put the
G5 certificate back on so we can again use Navigator under SSL and start
using Access Client.
Mike Cunningham
PA College of Technology
midrange.com
