SSL for Telnet using client certificate

  1. Create an HFS KEYRING file. Refer to Creating HFS KEYRING files for more information.
  2. Create a self-signed certificate if a trusted CA is not available. Refer to Creating self-signed certificates for more information.
  3. Create a server certificate. Refer to Creating server certificates for more information.
  4. Create a client certificate. Refer to Creating client certificates for more information.
  5. Add the following to TCPIP.PROFILE:
    1. TelnetParms
    2. SECUREPORT 992
    3. KEYRING HFS /ssl/key.kdb
    4. CLIENTAUTH SAFCERT
    5. SSLTIMEOUT 120
    6. EndTelnetParms