SSL considerations

Consider this information before installing IBM® i Access for Windows on your computer.

With the institution of new security policies for many customers (banks and hospitals as examples), many times customers are reducing the number of additional features they are willing to install on client PCs. Currently, if a customer chooses to block port 23 from remote locations and allow only port 992 (PC5250 SSL connection port), the customer will need to use an alternative method to install the Certificate Authority (CA) from the IBM i system rather than downloading it via System i® Navigator. To do so, the customer will need to use the IBM Key Management utility.

IBM Key Management allows you to work with key databases for use with Secure Sockets Layer (SSL) connections. It allows you to register certificates from the IBM i system to the PC. In order for it to have all of its functionality available, this tool requires the following features to be installed:
  • Required Programs
  • SSL
  • Toolbox for Java™
Failure to install the required minimum components will result in the failure of IBM Key Management. If you are not going to be registering and managing certificates with IBM Key Management on the PC, then you are not required to install the Toolbox for Java.
For example, to use the PC5250 emulator over an SSL connection and register and manage certificates with IBM Key Management, you must install at least the following components of IBM i Access for Windows:
  • Required Programs
  • PC5250 Emulator
  • SSL
  • Toolbox for Java