IBM i Global

IBM i Global

Connect, learn, share, and engage with IBM Power.

 View Only
  • 1.  IBM i DCM - What is a Default Certificate for?

    Posted Thu August 24, 2023 08:14 AM

    I notice in IBM i DCM that an option "Set as Default" is available for certificates. My Google search was surprisingly unhelpful in providing any explanation on what utility a default certificate is for - I only found Q&A about default certificate in various ways but no explanation what it is for.  I would be grateful to any kind soul to help cast a light on this for me.

    Thanks in advance. 



    ------------------------------
    Education is not the learning of facts but the training of the mind to think. -- Albert Einstein.
    ------------------------------
    Satid S.
    ------------------------------


  • 2.  RE: IBM i DCM - What is a Default Certificate for?

    Posted Fri August 25, 2023 02:32 AM

    Hi Satid, 

    First thing I tried was to look for a Help link on the DCM page.  Ha!

    Using the search string 'IBM i DCM set as default', drew a blank using Google. Tried DuckDuckGo and that included your question in the returned list. (Google didn't do that). 

    Just for fun I tried the Bing app on my iPad - search string "IBM i DCM certificate set as default" -and the result is as follows: 

    A default certificate is a certificate used by default when a server application does not specifiy a certificate to use for SSL [TLS] communication. A default certificate can be set for each certificate store in DCM, and it can be changed or removed as needed. To set a default certificate, you need to access DCM .... and select the certificate store you want to modify. Then you can choose the certificate that you want to set as default and click on the "set as Default" option.

    Also found this - https://www.ibm.com/docs/en/ssw_ibm_i_75/pdf/rzahupdf.pdf. Pages 53-54 discuss the use of default certificates. 

    Hope that helps. 



    ------------------------------
    Jozsef Torok
    ------------------------------



  • 3.  RE: IBM i DCM - What is a Default Certificate for?

    Posted Fri August 25, 2023 08:19 AM

    Dear Joszef

    You are the real web data hunter indeed!   The description of default certificate that you found is informative and gives me new knowledge that this can be potentially useful.  If I want to use the same CA with many servers in IBM i, then this default certificate will help save my time.  As for the link you provided, it says We're Sorry Content not found for now.  I will try it later on. 

    Thanks. 



    ------------------------------
    Education is not the learning of facts but the training of the mind to think. -- Albert Einstein.
    ------------------------------
    Satid S.
    ------------------------------



  • 4.  RE: IBM i DCM - What is a Default Certificate for?

    Posted Fri August 25, 2023 03:39 PM
    Edited by Jozsef Torok Sun August 27, 2023 01:35 AM

    Hello Satid,

     

    Oops, sorry about the dodgy URL.   I forgot to remove the full stop after '....pdf'.

    So the correct URL is -  https://www.ibm.com/docs/en/ssw_ibm_i_75/pdf/rzahupdf.pdf  

     

    Regards,

    Jozsef