Connect to an IBM AS/400 Host via SSL/TLS

Use the following procedure to configure SSL or TLS connections using the upgraded security protocols.

The Secure Sockets Layer protocol (SSL) and its compatible successor, the Transport Layer Security protocol (TLS), enable a client and server to establish a secure, encrypted connection over a public network. When you connect using SSL/TLS, the client authenticates the server before making a connection, and all data passed between EXTRA! X-treme and the server is encrypted. Depending on the server configuration, the server may also authenticate the client.

Note: To secure your connections with SSL or TLS, your system must include an SSL/TLS host (server or servers).

To configure the session

Create a new display (or printer) session.
1. From the Start menu, select Attachmate EXTRA! X-treme, and click Create a new session. Or, if a session is already open, choose File > New Session.
2. In the New Session Wizard, respond to the prompts to select the host type and the session type.
For the connection type, specify TN5250.
On the General tab, specify the host name, IP address, and port. You can specify a primary and a backup address using IPv6 or IPv4 addresses.
For Security Type, choose Attachmate SSL v3.0 or Attachmate TLS v1.0.
For Encryption strength, specify a value or Auto (the default). If you specify a value that your connection cannot support, the connection will fail. When Auto is selected, EXTRA! X-treme negotiates with the host system to choose the strongest encryption level supported by both the host and the PC.
To select a client certificate for authentication, do one of the following:
- Leave Automatically select client certificate selected (the default). When you connect, EXTRA! X-treme will search the Windows certificate store and use the first certificate it finds that is both valid and designated for client authentication. If this certificate is not the correct one, the connection will fail.
- Choose a certificate from the drop-down list, or select Browse to open the Windows Personal certificate store and choose the appropriate certificate. The specified certificate will be stored in the session file by subject name, issuer and serial number.
  Note: Even though you may have multiple host addresses specified in an EXTRA! X-treme session for a fail-over configuration, you can only specify one client certificate and one encryption strength for a host. For this reason, it's generally best to use the default certificate and encryption strength settings.
Specify the remaining options to complete the configuration.
Note: To change the security settings, in an open session, choose Options > Settings, and on the left, click Connection.

Connect to an IBM AS/400 Host via SSL/TLS

About SSL/TLS