Here are my notes to install a new certificate (port 23001 is my SSL port).
TO load this certificate without recycling..... 1) Take the port offline: V TCPIP,tcpip,T,STOP,PORT=23001 2) Now activate it: v tcpip,tcpip,obeyfile,dsn=SYS1.TCPPARMS($$dennis) v tcpip,tcpip,obeyfile,dsn=SYS1.TCPPARMS($$dennit) for Test LPAR Where the obeyfile member has the necessary begin VTAM and TELNETPARMS section in it. If you need more detailed examples, send me a note. Dennis -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Matt Simpson Sent: Tuesday, May 15, 2007 8:38 AM To: IBM-MAIN@BAMA.UA.EDU Subject: How to reload SSL certificate for z/OS TN3270 server Our SSL certificate is about to expire, and we have received a renewal certificate. Does the TN3270 server read the certificate each time a connection is established, so it will get the new one as soon as it is updated? Or is the certificate loaded into memory when the server is started, so that some action is necessary to reload it? And if it has to be reloaded, what is the least disruptive way to do it? I assume restarting the TCP/IP system would do it, but that tends to make the phones ring. -- Matt Simpson -- z/OS Support 219 McVey Hall -- (859) 257-2900 x300 University Of Kentucky, Lexington, KY 40506 http://jms.cc.uky.edu/ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
