How to Establish a Secure Host Session

By default, BlueZone is not configured for secure SSL or TLS encrypted sessions.  In order to establish a Secure host connection, you will have to configure the security settings in BlueZone.

NOTE  Keep in mind that your telnet host must be capable of negotiating a secure telnet session, using either TLS v1 or SSL v3.  If your host is not secure telnet capable, one option is to use a product like BlueZone Security Server in "front" of your host to perform the Telnet encryption and decryption functions.

To enable SSL encryption in BlueZone, follow this procedure.

Procedure:

  1. From the BlueZone MenuBar, select Session::Configure.  The Connection dialog will be displayed.

  2. Click the Configure button located on the right.  This will bring up the Connections dialog.

  3. In the Connection List, choose or highlight the session that you wish to secure and click the Edit button.  If you don't have any existing sessions, or you want to create a new one, click the New button.

  4. Edit the Host Address and the TCP Port if necessary.  Your telnet host administrator will give you correct values to use.

  5. Click the OK button to close the dialog.

  6. Click the Security tab.  This will display the Security dialog

  7. From the drop down listbox, choose either Implicit SSL/TLS or Explicit SSL/TLS.

  8. Choose the SSL Provider, either OpenSSL or MS-CAPI.

  9. Choose the SSL version, either SSL v3 or TLS v1.

  10. Choose how you want to handle Invalid certificates.  We suggest choosing "Ask before Accepting" until you are sure you can use one of the other settings.

  11. Choose a preferred CypherSuite only if directed by you host administrator.  By leaving it set to None, BlueZone will automatically negotiate the highest encryption that both BlueZone and the host can support.

  12. Click the OK button two times to close out all dialogs.

Now that you have BlueZone configured, you are ready to make a secure SSL connection with your host.

From the BlueZone MenuBar, select Session:Connect or press the Connect icon located on the BlueZone ToolBar.

At the start of a secure telnet connection, a negotiation takes place.  Part of the negotiation is to examine the SSL certificate that is being presented by the host.  You may get a warning message like this:

This message is normal if you are using a "self signed" SSL certificate like the one that comes with BlueZone Security Server.  In some situations this might be perfectly acceptable.

TIP  If you are using encryption to allow secure remote telnet connections from users that are not employees of your organization, like your customers, you may want to consider purchasing a verified SSL certificate from a Certification Authority (CA).  Using a verified, rather than a "self-signed" SSL certificate, will give confidence to your remote users that they are indeed connecting to the correct telnet host and that their information is encrypted and secure.  It will also prevent an invalid certificate error.

To make these messages go away, follow these steps:

When the Certificate Error message is displayed, and you are sure that you trust the issuer of the SSL certificate, place a check in the "Add this Certificate to Trusted List" checkbox.  Once the certificate is in your trusted list, this error message will no longer be displayed.

Once you are connected, you will see the SSL Connection Status icon in the BlueZone StatusBar, as shown here:

Also, you can left click the SSL Connection Status icon to bring up the SSL Connection Status dialog, as shown here:

This is an easy way to verify the type and strength of your encryption.  It also allows you to view the certificate that was presented by the host telnet server.  In addition, if you are using client certificates, you can view that as well.