RE: Certificate change broke client access

Verisign is a well-known CA... not so sure about InCommon, but if you're sure that the InCommon CA is in the keystore, it should work.

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
Sent: Tuesday, August 08, 2017 4:03 PM
To: Midrange Systems Technical Discussion
Subject: [EXTERNAL] RE: Certificate change broke client access

We have never touched the local PCs keystore using iKayMan in all the years that we have been doing secure telnet (SSL) with Client Access or Access Client or System i Access for Windows. We started with a Verisign certificate many years ago and have always done a new certificate from Verisign every few years as required and that cert change never before caused a problem with secure telnet and we never did anything the PC level. It always just worked. We also turned off all SSL levels and TLS 1.0 on our desktops long ago so I don't think it’s a TLS level issue with the newer certificate. We did change to 4096 from a 2048 cert when we dis this.-----Original Message-----From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Bak, Doug (LMF)Sent: Tuesday, August 08, 2017 3:11 PMTo: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>Subject: RE: Certificate change broke client accessDid you add the new CA certificate to the iSeries Access keystore? This link should help:https://urldefense.proofpoint.com/v2/url?u=http-3A__www-2D01.ibm.com_support_docview.wss-3Fuid-3Dnas8N1012724&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=5RACbTg7It053stw4cbrHjku7StQcPeqshWmKJc1u3E&s=ETo1-x-NJ85Ez0Y2H863OoS6biyzEBkAtXRuHTyGvaI&e= -----Original Message-----From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike CunninghamSent: Tuesday, August 08, 2017 3:06 PMTo: midrange-l@midrange.comSubject: [EXTERNAL] Certificate change broke client accessWe still use the older client access in some older office computers (new ones get access client). We recently changed our IBM i server certificate from Verisign to one issued by InCommon. As soon as we assigned that new certificate to secure telnet all client access users could not logon. Newer access client users can still sign on. Does anyone have any idea why this would occur and how to fix it?Mike CunninghamPenn CollegeSent from my iPad________________________________This email may contain confidential information about a Pennsylvania College of Technology student. It is intended solely for the use of the recipient. This email may contain information that is considered an “educational record” subject to the protections of the Family Educational Rights and Privacy Act Regulations. The regulations may be found at 34 C.F.R. Part 99 for your reference. The recipient may only use or disclose the information in accordance with the requirements of the Federal Educational Rights and Privacy Act Regulations. If you have received this transmission in error, please notify the sender immediately and permanently delete the email.-- This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,visit: https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.midrange.com_mailman_listinfo_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=T99FM2vCjX95n-TtzaBk89Ev_afULuFrkcPIxWLjRUs&s=1luFEvDHrEVT4l6g2nS7hTKprlvltyXcDeSgQARK1Yg&e=or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at https://urldefense.proofpoint.com/v2/url?u=http-3A__archive.midrange.com_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=T99FM2vCjX95n-TtzaBk89Ev_afULuFrkcPIxWLjRUs&s=P8tC3sUzxJXj1p5DbNxAgnhJtaCnzwB4nrjgxZzyunQ&e= .Please contact support@xxxxxxxxxxxx for any subscription related questions.Help support midrange.com by shopping at amazon.com with our affiliate link: https://urldefense.proofpoint.com/v2/url?u=http-3A__amzn.to_2dEadiD&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=T99FM2vCjX95n-TtzaBk89Ev_afULuFrkcPIxWLjRUs&s=Vy6VVvZN5TGh65W1nNg2t-J8EBmYZalcS2OL62ViNH4&e=--This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,visit: https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.midrange.com_mailman_listinfo_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=5RACbTg7It053stw4cbrHjku7StQcPeqshWmKJc1u3E&s=beTfSAUA0wQjbjhwJrb90Lz8JtYlU0SAZ7XXLRKaqVc&e= or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at https://urldefense.proofpoint.com/v2/url?u=http-3A__archive.midrange.com_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=5RACbTg7It053stw4cbrHjku7StQcPeqshWmKJc1u3E&s=rVjmLYHWHzb_U2d59WCHS-ORVCZEm-x9HmFKvSNVc_0&e= .Please contact support@xxxxxxxxxxxx for any subscription related questions.Help support midrange.com by shopping at amazon.com with our affiliate link: https://urldefense.proofpoint.com/v2/url?u=http-3A__amzn.to_2dEadiD&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=5RACbTg7It053stw4cbrHjku7StQcPeqshWmKJc1u3E&s=7FNASaxrf3SJ625jOeXZ1ROGVXXab2siP9bjyx9IAAw&e= ________________________________This email may contain confidential information about a Pennsylvania College of Technology student. It is intended solely for the use of the recipient. This email may contain information that is considered an “educational record” subject to the protections of the Family Educational Rights and Privacy Act Regulations. The regulations may be found at 34 C.F.R. Part 99 for your reference. The recipient may only use or disclose the information in accordance with the requirements of the Federal Educational Rights and Privacy Act Regulations. If you have received this transmission in error, please notify the sender immediately and permanently delete the email.-- This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.midrange.com_mailman_listinfo_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=5RACbTg7It053stw4cbrHjku7StQcPeqshWmKJc1u3E&s=beTfSAUA0wQjbjhwJrb90Lz8JtYlU0SAZ7XXLRKaqVc&e=
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at https://urldefense.proofpoint.com/v2/url?u=http-3A__archive.midrange.com_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=5RACbTg7It053stw4cbrHjku7StQcPeqshWmKJc1u3E&s=rVjmLYHWHzb_U2d59WCHS-ORVCZEm-x9HmFKvSNVc_0&e= .

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://urldefense.proofpoint.com/v2/url?u=http-3A__amzn.to_2dEadiD&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=5RACbTg7It053stw4cbrHjku7StQcPeqshWmKJc1u3E&s=7FNASaxrf3SJ625jOeXZ1ROGVXXab2siP9bjyx9IAAw&e=