Setting up iSeries servers to use SSL

To set up your iSeries™ servers to use SSL with IBM^® Toolbox for Java™, complete the following steps.

Install the following to your iSeries servers:
Note: This step is necessary only for server running i5/OS™ versions prior to V5R4. In V5R4 and subsequent releases, the IBM Cryptographic Access Provider product is no longer available.
- IBM Cryptographic Access Provider 128-bit for iSeries, 5722-AC3, which provides server-side encryption.
Get and configure the server certificate.
Apply the certificate to the following iSeries servers that are used by IBM Toolbox for Java:
- QIBM_OS400_QZBS_SVR_CENTRAL
- QIBM_OS400_QZBS_SVR_DATABASE
- QIBM_OS400_QZBS_SVR_DTAQ
- QIBM_OS400_QZBS_SVR_NETPRT
- QIBM_OS400_QZBS_SVR_RMTCMD
- QIBM_OS400_QZBS_SVR_SIGNON
- QIBM_OS400_QZBS_SVR_FILE
- QIBM_OS400_QRW_SVR_DDM_DRDA

Getting and configuring server certificates

Before you get and configure your server certificate, you need to install the following products:

The process you follow to get and configure your server certificate depends on the kind of certificate you use:

If you get a certificate from a trusted authority (such as VeriSign, Inc., or RSA Data Security, Inc.), install the certificate on iSeries then apply it to the host servers.
If you choose not to use a certificate from a trusted authority, you can build your own certificate to be used on iSeries. Build the certificate by using Digital Certificate Manager:
1. Create the certificate authority on the iSeries server. See the Information Center topic, Acting as your own CA.
2. Create a system certificate from the certificate authority that you created.
3. Assign which host servers will use the system certificate that you created.