Installation manual
2) Give users who need access to the SSL files *RX authority to the
directory. You can authorize individual users or groups of users.
Remember that users with *ALLOBJ special authority cannot be denied
access to the SSL files.
2. From a web browser, access http://<server.name>:2001 (where <server.name>
is the TCP/IP host name of your iSeries). If you are unable to connect, start the
HTTP server with the following OS/400 command:
STRTCPSVR SERVER(*HTTP) HTTPSVR(*ADMIN)
3. Enter the OS/400 user profile and password (when prompted). You must have
*ALLOBJ authority to complete the configuration activities below.
4. Click on Digital Certificate Manager.
5. Click on System Certificates.
6. Click Work with Secure Applications.
7. Click QIBM_OS400_QZBS_SVR_CENTRAL, then click Work with System
Certificate.
8. Verify that the *DFTSVR certificate is selected and click Assign New
Certificate.
9. Repeat steps 7 and 8 for the following applications:
v QIBM_OS400_QZBS_SVR_DATABASE
v QIBM_OS400_QZBS_SVR_DTAQ
v QIBM_OS400_QZBS_SVR_NETPRT
v QIBM_OS400_QZBS_SVR_RMTCMD
v QIBM_OS400_QZBS_SVR_SIGNON
v QIBM_OS400_QZBS_SVR_FILE
v QIBM_OS400_QRW_SVR_DDM_DRDA
10. Type the following OS/400 command: QSH
11. Type the following command:
cd /qibm/proddata/hostondemand/lib
Note: cd must be in lower case
12. The following command obtains a server certificate from an SSL-enabled
Telnet server. This command may span three lines.
java -classpath .:/QIBM/ProdData/hostondemand/lib/sm.zip
com.ibm.hodsslight.tools.keyrng com.ibm.as400.access.KeyRing connect
host.name:9476
Notes:
a. Substitute the value host.name with the TCP/IP host name or dotted
address in the string listed below. The value 9476 is the commonly used
port for secure connections.
b. The 9476 port is usually the secure signon server port
Proceed as follows for this command:
a. You must enter toolbox as the password. Press Enter to continue.
b. Multiple pages of information may be displayed; press the Page Up and
Page Down keys to see additional details about the certificates, including
the fingerprint. You will typically have two selections to choose from:
0 Trust the Telnet server
1 Trust the Certificate Authority
c. Select 0 to trust the Telnet server certificate, then press Enter.
Appendix C. Configuring on iSeries 73