RE: Importing renewed SSL certificate

["Haase, Justin C." <Justin.Haase@xxxxxxxxxxxx>]

Two things:

1.  The cert needs to be on the IFS of the AS/400.  Try \\home\verisign\ -
works well - easy to remember.  Then for the path, just type
/home/verisign/certificate.cer and click OK.  Then re-assign your secure app
on the "work with secure applications" tab.

2.  I've found the best way (and the only way I can get to work) is to
REVOKE the cert which VeriSign sent you on auto-renew, and generate a new
CSR request from the 400 to get a new cert.  This also creates a different
key pair which adds a bit of security.  The revoke/replace is free for 30
days after VSign sends you the cert.

Hope this helps.

Justin C. Haase
Midrange Systems Engineer - Kingland Systems Corporation
1401 - 6th Avenue South - Clear Lake, IA 50428 USA
IBM Certified AS/400 Systems Administrator
Microsoft Certified Professional
phone - 641.355.1035
e-mail - justin.haase@kingland.com
www.kingland.com


-----Original Message-----
From: tomh@simas.com [mailto:tomh@simas.com]
Sent: Friday, September 21, 2001 4:11 PM
To: midrange-l@midrange.com
Subject: Importing renewed SSL certificate


This is a multipart message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
I've gotten our renewed SSL certificate for internet use, and am trying to
figure out how to import (?) it into the system (we're at v4r5m0, btw).
I've started up the *admin instance and get to the Digital Certificate
Manager thru the browser.  I click on System Certificates, and I'm
prompted for my Certificate store (*SYSTEM) and password.

I then go to Change Password, and enter the same password that I logged in
with (just to verify that I've entered it correctly).  I get a screen
saying that the new password is identical to the old password, so I know
that it's right.

I then click on Receive a CA Certificate. I fill in the CA certificate
label (idocket.com) and the CA certificate file name
(d:\downloads\idocket.cer). The following screen tells me that the
Certificate store password is not valid.

Q1: why is it saying the password is wrong?
Q2: am I doing this right?

Tom Hightower
Solutions, Inc
http://www.simas.com
------------
If Bill Gates had a dime for every time a Windows box crashed... oh, wait
- he does.
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.