RE: Configure INav to use SSL

["Chris Bipes" <chris.bipes@xxxxxxxxxxxxxxx>]

under:
\\iSeriesName\qibm\ProdData\Access\Windows 
I have three folders
Install
MRI2924
SSL

Try running the setup under the "Install" directory and see if you can
choose SSL.  If the SSL folder is missing, then your 5722CE3 did not
install correctly.  Try reinstalling it.


Chris Bipes
Director of I.S.
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jeff Young
Sent: Thursday, January 10, 2008 1:49 PM
To: Midrange Systems Technical Discussion
Subject: Re: Configure INav to use SSL

Chris,
I have Client Encryption (5722CE3) installed, but do not see the SSL
client in iNav selective setup.
I am installing from the QIBM/QCA400 directory on my System i.

What am I missing?

Thanks,

 
Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical
Solutions V5R2 IBM  Certified Specialist- e(logo) server i5Series
Technical Solutions Designer V5R3 IBM  Certified Specialist-
e(logo)server i5Series Technical Solutions Implementer V5R3 


  
 





----- Original Message ----
From: Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, January 10, 2008 4:19:46 PM
Subject: RE: Configure INav to use SSL

You may not have installed the SSL part on your PC.  Start with
selective setup and make sure SSL client is installed on your PC.  If
not, verify that the client encryption is installed on the iSeries you
installed your PC from.  Once you have the Client SSL on your PC, you
can right click the server in iNav / properties / Secure Sockets.
Click
on Download button under OS/400 Certificate Authority.

Close iNav and reopen.  Now go back to connection properties / secure
sockets and click the verify SSL connection.

Now you can decide what you want to be secure.  iNav and / or PC5250.


Chris Bipes
Director of I.S.
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of DeLong, Eric
Sent: Thursday, January 10, 2008 1:00 PM
To: Midrange Systems Technical Discussion
Subject: RE: Configure INav to use SSL

I think you must use iSeries Navigator to define the SSL connection
properties.  Open the properties for the system, Select the Secure
Sockets tab, check "Use Secure Sockets Layer...."  There is a button for
downloading the SSL certificate from the host.  The certificate must be
available on the host...

Eric

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Jeff Young
Sent: Thursday, January 10, 2008 2:48 PM
To: Midrange Systems Technical Discussion
Subject: Re: Configure INav to use SSL


The problem is that I do not see any place to indicate SSL for my
connection properties.
The Help contents indicate that there is a component IKEYMAN that is
used to install the CA certificate into iSeries Access key database, but
I do not see that either.
> From what I recall in the past, there was an SSL component it iSeries
Access that needed to be installed, but I do not see it in the selective
setup window.

Thanks,

Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical
Solutions V5R2 IBM  Certified Specialist- e(logo) server i5Series
Technical Solutions Designer V5R3 IBM  Certified Specialist-
e(logo)server i5Series Technical Solutions Implementer V5R3 


  






----- Original Message ----
From: Paul Nelson <nelsonp@xxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, January 10, 2008 3:30:01 PM
Subject: RE: Configure INav to use SSL

You need to get the certificate from that system's administrator and
import it into your PC.

Then, in the configuration of your CA session, you click the properties
of the server, and define you are using SSL and where to get the
certificate.

Paul Nelson
Cell 708-670-6978
Office 512-392-2577
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jeff Young
Sent: Thursday, January 10, 2008 2:25 PM
To: Midrange Systems Technical Discussion
Subject: Re: Configure INav to use SSL

I am connecting to a remote System i that uses SSL.
I need to configure iSeries Access to get the certificate and use SSL
for connections.

Thanks,

Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical
Solutions
V5R2
IBM  Certified Specialist- e(logo) server i5Series Technical Solutions
Designer V5R3 IBM  Certified Specialist- e(logo)server i5Series
Technical Solutions Implementer V5R3 


  






----- Original Message ----
From: Paul Nelson <nelsonp@xxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, January 10, 2008 3:14:32 PM
Subject: RE: Configure INav to use SSL

Have you created the necessary certificate(s)?

You need to begin with configuring DCM through http://yoursystem:2001
after you start the ADMIN instance in your HTTP server

STRTCPSVR *HTTP HTTPSVR(*ADMIN)

Paul Nelson
Cell 708-670-6978
Office 512-392-2577
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jeff Young
Sent: Thursday, January 10, 2008 1:59 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Configure INav to use SSL

Where do I find the component to allow iNav to configure an SSL
connection to a remote system?
I am running iSeries Access V5R3M0 and do not see an SSL component in
the Selective Setup install window.

Thanks,

Jeff Young
Sr. Programmer Analyst
IBM -e(logo) server Certified Systems Exper - iSeries Technical
Solutions
V5R2
IBM  Certified Specialist- e(logo) server i5Series Technical Solutions
Designer V5R3 IBM  Certified Specialist- e(logo)server i5Series
Technical Solutions Implementer V5R3
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.