Re: allow only secure connections to AS/400

[Scott Klement <klemscot@xxxxxxxxxxxx>]

You can use SSL to protect against man-in-the-middle attacks.  The most
secure way is to enable client certificates as well as server
certificates.   Tell the digital cetificate manager that you only want
to trust client certificates that are signed by the local certificate
authority.

I don't have any direct experience with Client Access, but the
documentation says that it supports SSL.   Our open-source TN5250 also
supports it, including client-side certificates.  (Which Rumba and
Mochasoft do not support, last I checked, but Client Access should.)

Here's a link in the Information Center about securing telnet:
http://publib.boulder.ibm.com/iseries/v5r1/ic2924/info/rzain/rzainrzaintelntpi.htm

On Fri, 11 Oct 2002, James Rich wrote:

> Is there a way I can configure the AS/400 to only allow secure
> connections?  I'm on V5R1 and I want to disable telnet into the machine.
>
> And I don't know how to set up client access to use a secure connection.
> It uses SSL I assume, anything that I have to do on the AS/400 to enable
> it?  And does client access offer the same kind of IP spoofing and man in
> the middle protection as SSH?
>
> James Rich
>