Configure SSL on the Telnet server

Use this topic to set up SSL on your iSeries™ server.

You can configure the i5/OS® Telnet server to secure sessions with SSL. The most important factor to consider when enabling SSL on the Telnet server is the sensitivity of the information that is involved in client sessions. If the information is sensitive, or private, then securing the iSeries Telnet server with SSL is recommended.

To configure SSL on the Telnet server, follow these steps:

  1. Install the following software to support Telnet SSL and to manage digital certificates:
    • TCP/IP Connectivity Utilities for iSeries, 5722-TC1
    • Digital Certificate Manager, 5722-SS1 - Boss Option 34
    • IBM® HTTP Server for iSeries, 5722-DG1
    • Developer Kit for Java™, 5722-JV1
  2. Ensure that you have removed port restrictions and allowed SSL to start.
  3. Assign a certificate to the Telnet server.
  4. Enable client authentication for the Telnet server (optional step).
  5. Enable SSL on the Telnet server.
  6. Start the Telnet server.

For additional information about solving SSL problems related to Telnet server, see Troubleshooting your Telnet SSL server. Sometimes understanding what goes on during SSL processing can also help you determine where a problem might have occurred. Review SSL initialization and handshake for more information about SSL processing.

  1. Remove port restrictions
    In releases before V5R1, port restrictions were used because Secure Sockets Layer (SSL) support was not available for Telnet. Now you can specify whether SSL, non-SSL, or both are to start. Therefore, there is no longer a need for port restrictions.
  2. Assign a certificate to the Telnet server
    When you enable the Telnet server on your system to use SSL, you can establish secure Telnet connections to your system from iSeries Access for Windows® or from any other SSL-enabled Telnet client, such as a Personal Communications emulator.
  3. Enable client authentication for the Telnet server
    The Telnet server supports the authentication of Telnet client certificates. This means that during the SSL handshake, not only will the server generate a server certificate for the client, but also can optionally check for a valid client certificate depending on how Digital Certificate Manager (DCM) is configured.
  4. Enable SSL on the Telnet server
    You can use this topic to understand how to enable SSL on the Telnet server.
Parent topic: Secure Telnet with SSL
Related concepts
SSL initialization and handshake
Related tasks
Troubleshoot your Telnet SSL server
Check system status