Re: ACS encryption keys

[Gerald Magnuson <gmagqcy.midrange@xxxxxxxxx>]

I had not followed those steps, as I feared breaking something.
(I had not created a master key as of yet)
I just did the needful, and it appears to have worked fine.



On Wed, Oct 12, 2022 at 10:21 AM Rob Berendt <rob@xxxxxxxxx> wrote:

> https://www.ibm.com/support/pages/node/6541302
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1
> Group Dekko
> Dept 1600
> Mail to:  7310 Innovation Blvd, Suite 104
>           Ft. Wayne, IN 46818
> Ship to:  7310 Innovation Blvd, Dock 9C
>           Ft. Wayne, IN 46818
> http://www.dekko.com
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
> Stephen Landess
> Sent: Wednesday, October 12, 2022 11:12 AM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
> Subject: ACS encryption keys
>
> CAUTION: This email originated from outside of the organization. Do not
> click links or open attachments unless you recognize the sender and know
> the content is safe.
>
>
> Not sure how to fix this - I haven't opened the IBM i Navigator lately and
> today I get this message:
> Warning: NAV_200001: The GUI is leveraging encryption to secure passwords.
> The encryption keys and the key to Web trust store are being protected by
> IBM Cryptographic Services for i. The GUI is using Master key 1 and this
> must be loaded and set. Currently, Master key 1 is not available on the GUI
> node. Users with *ALLOBJ and *SECADM special authorities are allowed to
> load and set Master key 1 within IBM Cryptographic Services for i. If the
> password and CA certificates in the trust store have previously been
> encrypted the Master Key 1 will need to be loaded and set again. You will
> need to re-input passwords and re-accept the CA certificates when prompted.
> To load and set the Master key, click on Serviceability, Connection
> Properties, then the Cryptographic Services tab to load and set master key
> 1.
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com