85 lines
5.1 KiB
HTML
85 lines
5.1 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="task" />
|
||
|
|
<meta name="DC.Title" content="Setting up iSeries servers to use SSL" />
|
||
|
|
<meta name="abstract" content="To set up your iSeries servers to use SSL with IBM Toolbox for Java, complete the following steps." />
|
||
|
|
<meta name="description" content="To set up your iSeries servers to use SSL with IBM Toolbox for Java, complete the following steps." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="ssltrad.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="sslreq" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Setting up iSeries servers to use SSL</title>
|
||
|
|
</head>
|
||
|
|
<body id="sslreq"><a name="sslreq"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Setting up iSeries servers to use SSL</h1>
|
||
|
|
<div><p>To set up your iSeries™ servers to use SSL with IBM<sup>®</sup> Toolbox for Java™,
|
||
|
|
complete the following steps.</p>
|
||
|
|
<ol><li class="stepexpand"><span>Install the following to your iSeries servers:</span> <div class="note"><span class="notetitle">Note:</span> <img src="./delta.gif" alt="Start of change" />This
|
||
|
|
step is necessary only for server running i5/OS™ versions prior to V5R4. In V5R4 and
|
||
|
|
subsequent releases, the IBM Cryptographic Access Provider product is no longer
|
||
|
|
available.<img src="./deltaend.gif" alt="End of change" /></div>
|
||
|
|
<ul><li>IBM Cryptographic
|
||
|
|
Access Provider 128-bit for iSeries, 5722-AC3, which provides server-side encryption.</li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
<li class="stepexpand"><span> <a href="#sslreq__gettingandconfiguringservercertificates">Get
|
||
|
|
and configure the server certificate.</a></span></li>
|
||
|
|
<li class="stepexpand"><span>Apply the certificate to the following iSeries servers that are used by IBM Toolbox
|
||
|
|
for Java:</span> <ul><li>QIBM_OS400_QZBS_SVR_CENTRAL</li>
|
||
|
|
<li>QIBM_OS400_QZBS_SVR_DATABASE</li>
|
||
|
|
<li>QIBM_OS400_QZBS_SVR_DTAQ</li>
|
||
|
|
<li>QIBM_OS400_QZBS_SVR_NETPRT</li>
|
||
|
|
<li>QIBM_OS400_QZBS_SVR_RMTCMD</li>
|
||
|
|
<li>QIBM_OS400_QZBS_SVR_SIGNON</li>
|
||
|
|
<li>QIBM_OS400_QZBS_SVR_FILE</li>
|
||
|
|
<li>QIBM_OS400_QRW_SVR_DDM_DRDA</li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
</ol>
|
||
|
|
<div class="section"><p><strong><span class="synph" id="sslreq__gettingandconfiguringservercertificates"><a name="sslreq__gettingandconfiguringservercertificates"><!-- --></a><span class="kwd"></span></span>Getting
|
||
|
|
and configuring server certificates</strong></p>
|
||
|
|
<p>Before you get and configure
|
||
|
|
your server certificate, you need to install the following products:</p>
|
||
|
|
<ul><li><a href="http://www.ibm.com/eserver/iseries/products/http/httpindex.htm" target="_blank">IBM HTTP Server for iSeries</a> <img src="www.gif" alt="Link outside Information Center" /> (5722-DG1) licensed program</li>
|
||
|
|
<li><a href="../rzahu/rzahurzahu4aagetstarteddcm.htm">
|
||
|
|
Base operating system option 34 (Digital Certificate Manager)</a></li>
|
||
|
|
</ul>
|
||
|
|
<p>The process you follow to get and configure your server certificate
|
||
|
|
depends on the kind of certificate you use:</p>
|
||
|
|
<ul><li>If you get a certificate from a trusted authority (such as VeriSign, Inc.,
|
||
|
|
or RSA Data Security, Inc.), install the certificate on iSeries then
|
||
|
|
apply it to the host servers.</li>
|
||
|
|
<li>If you choose not to use a certificate from a trusted authority, you can
|
||
|
|
build your own certificate to be used on iSeries. Build the certificate by <a href="../rzahu/rzahurzahu401usingdcm.htm"> using
|
||
|
|
Digital Certificate Manager</a>:<ol><li>Create the certificate authority on the iSeries server. See the Information
|
||
|
|
Center topic, <a href="../rzahu/rzahurzahu4anactingownca.htm"> Acting as your own CA</a>.</li>
|
||
|
|
<li>Create a system certificate from the certificate authority that you created.</li>
|
||
|
|
<li>Assign which host servers will use the system certificate that you created.</li>
|
||
|
|
</ol>
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="ssltrad.htm" title="You can use SSL to encrypt data exchanged between IBM Toolbox for Java classes and i5/OS servers.">Using SSL to encrypt data between IBM Toolbox for Java and i5/OS servers</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|