We got the fix to this issue and it was using iKeyMan to install two new InCommon CA certificates to the local KeyStore as Doug suggested. We are still not sure why we never had to do this in the past. Maybe IBM preinstalled Verisign CA certs in Client Access KeyStore since they were very widely used but our new InCommon one is used mostly only in Higher Education. Ultimate solution (as per IBM) is to get rid of the old Client Access as soon as possible and use only the new java client (which was already on our roadmap just that our desktop group has not had time to get to everyone yet)
Thanks for the responses to my original post
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Bak, Doug (LMF)
Sent: Tuesday, August 08, 2017 3:11 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: Certificate change broke client access
Did you add the new CA certificate to the iSeries Access keystore? This link should help:
http://www-01.ibm.com/support/docview.wss?uid=nas8N1012724
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
Sent: Tuesday, August 08, 2017 3:06 PM
To: midrange-l@xxxxxxxxxxxx
Subject: [EXTERNAL] Certificate change broke client access
We still use the older client access in some older office computers (new ones get access client). We recently changed our IBM i server certificate from Verisign to one issued by InCommon. As soon as we assigned that new certificate to secure telnet all client access users could not logon. Newer access client users can still sign on. Does anyone have any idea why this would occur and how to fix it?Mike CunninghamPenn CollegeSent from my iPad________________________________This email may contain confidential information about a Pennsylvania College of Technology student. It is intended solely for the use of the recipient. This email may contain information that is considered an “educational record” subject to the protections of the Family Educational Rights and Privacy Act Regulations. The regulations may be found at 34 C.F.R. Part 99 for your reference. The recipient may only use or disclose the information in accordance with the requirements of the Federal Educational Rights and Privacy Act Regulations. If you have received this transmission in error, please notify the sender immediately and permanently delete the email.-- This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.midrange.com_mailman_listinfo_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=T99FM2vCjX95n-TtzaBk89Ev_afULuFrkcPIxWLjRUs&s=1luFEvDHrEVT4l6g2nS7hTKprlvltyXcDeSgQARK1Yg&e=
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
https://urldefense.proofpoint.com/v2/url?u=http-3A__archive.midrange.com_midrange-2Dl&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=T99FM2vCjX95n-TtzaBk89Ev_afULuFrkcPIxWLjRUs&s=P8tC3sUzxJXj1p5DbNxAgnhJtaCnzwB4nrjgxZzyunQ&e= .
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://urldefense.proofpoint.com/v2/url?u=http-3A__amzn.to_2dEadiD&d=DwIGaQ&c=TRM22a2q2ENZDxdZ_Nz-0OCGEspXTWPuaB6Jil0RfKE&r=o-YzpsmRCPgZlWO4EB4wsOj50O0KPLUTK9BP-UzK-UQ&m=T99FM2vCjX95n-TtzaBk89Ev_afULuFrkcPIxWLjRUs&s=Vy6VVvZN5TGh65W1nNg2t-J8EBmYZalcS2OL62ViNH4&e=
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
http://amzn.to/2dEadiD
________________________________
This email may contain confidential information about a Pennsylvania College of Technology student. It is intended solely for the use of the recipient. This email may contain information that is considered an “educational record” subject to the protections of the Family Educational Rights and Privacy Act Regulations. The regulations may be found at 34 C.F.R. Part 99 for your reference. The recipient may only use or disclose the information in accordance with the requirements of the Federal Educational Rights and Privacy Act Regulations. If you have received this transmission in error, please notify the sender immediately and permanently delete the email.
midrange.com
