Tony, You need to do a TCPIP command to stop and then start the TN3270 port number using the new cert.
Thank you. Geza Szentmiklosy -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Tony Harminc Sent: Friday, February 16, 2024 12:48 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Tn3270 back door On Fri, 16 Feb 2024 at 05:54, James Cradesh < 000005a6576c6fa2-dmarc-requ...@listserv.ua.edu> wrote: > I’m locked out of my test lpar. The ssl cert expired. A new cert was > uploaded but the tn3270 doesn’t see it. I did refresh Pagent but it > didn’t help. How do you get around this situation? Is there a way to > enable the non ssl port? > Can you get into line-mode UNIX? SSH or (sigh) telnet? What about line-mode TSO? If these ports are open it seems unlikely they'd be secured with the same SSL cert. Maybe they're not secured at all... Tony H. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
