Hi Ed -
Thank you for the information you have provided. I haven't yet started implementing them, but I will need the steps you have detailed for securing mainframe to ICN connection
On the other hand, I was able to complete the SSL configuration for our 2 ICN environments - not the most straight forward process due to the exceptions I encountered along the way. Here are the high level steps if anyone is going through the same requirement of providing secure connection to ICN:
- Install IBM HTTP Server with Java
- Install WebSphere Plugins with Java
- Create Self signed Certificate
- Get the certificate issued by your CA
- install your signed certificates - root & intermediate - on the HTTP server
- open x443 port and make sure HTTPS works from the secure port
- once HTTPS works, use /navigator and that too should work
Along the way you may get a lot of errors, firewall issues and you may need to do a lot of research to move past each issue.
Good luck,
Mehmet
-