Use the following procedure to configure SSL or TLS connections using the upgraded security protocols.
NOTE:To secure your connections with SSL or TLS, your system must include an SSL/TLS host (server or servers).
To configure the session
Create a new display (or printer) session.
For the connection type, specify TN3270.
In the tabbed window, click thebutton.
In thedialog box, specify the host name or IP address (IPv6, IPv4 or URI), device type, and port.
For, choose the appropriate TLS or SSL option. If you leave at the default setting ( ) Extra! will negotiate with the host to choose the strongest encryption level supported by the host and the PC. Choosing a value greater than that which the host or PC supports may cause the connection to fail.
To select a client certificate for authentication, do one of the following:
Leaveselected (the default). When you connect, Extra! will search the Windows certificate store and use the first certificate it finds that is both valid and designated for client authentication. If this certificate is not the correct one, the connection will fail.
Choose a certificate from the drop-down list, or selectto open the Windows Personal certificate store and choose the appropriate certificate. The specified certificate will be stored in the session file by subject name, issuer and serial number.
NOTE:Even though you may have multiple host addresses specified in an Extra! session for a fail-over configuration, you can only specify one client certificate and one encryption strength for a host. For this reason, it's generally best to use the default certificate and encryption strength settings.
To have the client compare the host name in the session against the common name in the certificate and validate the certificate authority (CA) chain, select.
To ensure that the certificate is valid and hasn't been revoked, selectand/or
Specify the remaining options to complete the configuration.
To change the security settings, in an open session, choose> , and on the left, click .