Manage Trusted Signing Certificates; Import Remote Certificate Example; Configure 3270 Emulators - IBM z13s Technical Manual

Updates to x3270 support
The Configure 3270 Emulators task on the HMC and TKE consoles was enhanced with
Driver 15 to verify the authenticity of the certificate that is returned by the 3270 server when a
secure and encrypted SSL connection is established to an IBM host. This process is also
Secure 3270
known as .
Use the Certificate Management task if the certificates that are returned by the 3270 server
are not signed by a well-known trusted certificate authority (CA) certificate, such as VeriSign
or Geotrust. An advanced action within the Certificate Management task, Manage Trusted
Signing Certificates, is used to add trusted signing certificates.
For example, if the certificate that is associated with the 3270 server on the IBM host is
signed and issued by a corporate certificate, it must be imported, as shown in Figure 11-14.
Figure 11-14 Manage Trusted Signing Certificates
If the connection between the console and the IBM host can be trusted when importing the
certificate, the import from the remote server option can be used, as shown in Figure 11-15.
Otherwise, import the certificate from removable media.
Figure 11-15 Import Remote Certificate example
A secure Telnet connection is established by adding the prefix L: to the IP address port of the
IBM host, as shown in Figure 11-16.
Figure 11-16 Configure 3270 Emulators
408
IBM z13s Technical Guide