ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzahq_5.4.0.1/rzahqautomaticsslinit.htm

60 lines
3.9 KiB
HTML

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="dc.language" scheme="rfc1766" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<meta name="dc.date" scheme="iso8601" content="2005-09-13" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<title>Automatic SSL initialization</title>
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
<link rel="stylesheet" type="text/css" href="ic.css" />
</head>
<body>
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
<img src="delta.gif" alt="Start of change" />
<a name="rzahqautomaticsslinit"></a>
<h4 id="rzahqautomaticsslinit">Automatic SSL initialization</h4>
<p>To initialize SSL automatically, do the following steps:</p>
<ol type="1">
<li>If the connection between the service processor and the iSeries&trade; uses a shared
network, consider temporarily connecting the service processor and the iSeries with an isolated network. If you do not, the automatic method is slightly
less secure than the manual methods during the short time it takes for the
Initialize task in step <a href="rzahqautomaticsslinit.htm#step3">3</a> to run.</li>
<li>Use the procedure described in <a href="rzahqchangespprops.htm#rzahqchangespprops">Change service processor configuration properties</a> to change
the properties of the service processor configuration for the server. Go
to the <span class="bold">Security</span> tab and select the <span class="bold">Automatically set up user and generate certificate</span> option. Press OK
to save the change.</li>
<li id="step3">
<a name="step3"></a>Use the procedure described in <a href="rzahqinitsp.htm#rzahqinitsp">Initialize a service processor</a> to
initialize the service processor:
<ol type="a">
<li>Specify the <span class="bold">Initialize a new service processor</span> option.
<a name="wq219"></a>
<div class="notetitle" id="wq219">Note:</div>
<div class="notebody">Use the <span class="bold">Synchronize certificate from service processor</span> option if this is an additional service processor configuration used
for the same service processor that has already been previously initialized
for use with another integrated server.</div></li>
<li>Specify the <span class="bold">User</span> and <span class="bold">Password</span> values.</li>
<li>Press <span class="bold">Initialize</span> to perform the operation.
<a name="wq220"></a>
<div class="notetitle" id="wq220">Note:</div><img src="delta.gif" alt="Start of change" />
<div class="notebody">The service processor automatically generates a self-signed
certificate, which is stored by i5/OS&trade;. The certificate is stored in the integrated
file system directory /QIBM/UserData/Director/classes/com/ibm/sysmgt/app/iide/
with a file name that matches the name of the service processor configuration.
This file will have a 'kdb' extension.</div><img src="deltaend.gif" alt="End of change" /></li></ol></li></ol><img src="deltaend.gif" alt="End of change" />
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
</body>
</html>