There is a simple way but it may not fit your environment. During a downtime window do ENDTCP and STRTCP. That will end all TCP based services and restart them all. That is what we do. We actually do this every night at 3:00 am as part of our backup so if we put on a new certificate we just wait a day to get it applied. We do also have someone come in early the next day to test things to be sure all is well.
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Dan Lanza
Sent: Thursday, February 25, 2016 3:05 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Renewing iSeries Access SSL cert
One of my SSL certificates is due to expire soon and while I've research what is needed, I'm unsure of how to restart the affected applications after the renewal.
I can find plenty of documentation which describes this process, but at the end they all just say to restart the application(s), without describing how to restart the application(s). Granted this should be a simple task, but I'm relatively new to IBM i so I'm just ignorant of this and may not be searching with the correct terms. I'm not exactly sure which of these applications relates to an entry in the "Network" -> "Servers" -> "TCP/IP" section in Ops Nav. I could take a guess on some, but not all because the "Description" in Ops Nav for the TCP/IP servers doesn't match up to the "Description" in the DCM for the application. Plus, I'd really rather be sure before I potentially take down TCP traffic to and from the server. Just as an example, I'm not even sure if "HTTP Server Monitor" is considered the "HTTP Administration" in Ops nav.
Could anyone point me to some documentation or suggest where I can look which would provide more information on these applications and how to restart them?
I'm on v7r2 TR3
Some references I've used so far include (granted some are outdated and for different versions, but it's the best I could find):
https://publib.boulder.ibm.com/iseries/v5r1/ic2924/info/rzain/rzain.pdf
http://as400bks.rochester.ibm.com/html/as400/v4r5/ic2924/index.htm?info/RZAINRZAINCAESERVEPI.HTM
https://publib.boulder.ibm.com/iseries/v5r2/ic2924/books/c0924495473.htm
https://doudera.wordpress.com/2011/04/10/setting-up-client-access-express-servers-to-use-ssl/
http://www-304.ibm.com/support/knowledgecenter/ssw_ibm_i_61/rzahh/sslreq.htm
Application ID: Description:
QIBM_OS400_QZBS_SVR_CENTRAL Central Server
QIBM_OS400_QZBS_SVR_DATABASE Database Server
QIBM_OS400_QZBS_SVR_DTAQ Data Queue Server
QIBM_OS400_QZBS_SVR_NETPRT Network Print Server
QIBM_OS400_QZBS_SVR_RMTCMD Remote Command Server
QIBM_OS400_QZBS_SVR_SIGNON Signon Server
QIBM_OS400_QZBS_SVR_FILE File Server
QIBM_OS400_QRW_SVR_DDM_DRDA IBM i DDM/DRDA Server - TCP/IP
QIBM_QTV_TELNET_SERVER IBM i TCP/IP Telnet Server
QIBM_QCST_CLUSTER_SECURITY Cluster Security
QIBM_OS400_QZBS_SVR Host Servers
QIBM_OS400_QYPS_MGTCTRL_SVR Management Central Server
QIBM_GLD_DIRSRV_SERVER IBM Tivoli Directory Server
QIBM_QTOK_VPN_KEYMGR IBM i VPN Key Manager
QIBM_QZHB_HTTP_SERVER_MONITOR HTTP Server Monitor
QIBM_QTMF_FTP_SERVER IBM i TCP/IP FTP Server
QIBM_DIRECTORY_SERVER_QUSRDIR QIBM_DIRECTORY_SERVER_QUSRDIR
QIBM_HTTP_SERVER_IBMTEST No Description (I don't think this is being used)
Much appreciation, and glad to be a part of the IBM i world.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
midrange.com
