Troubleshooting
Problem
How to display SYSTEM SSL properties on the IBM i platform.
Symptom
System SSL handshakes failing on protocol or ciphers.
Cause
SSL protocols and ciphers may be deprecated or disabled.
Diagnosing The Problem
The SSLCONFIG macro allows viewing or altering system-wide System SSL default properties.
With the SSLCONFIG macro output values, you can complete the IBM i setup technote Configuring Your IBM i System Secure Sockets Layer (SSL)/Transport Layer Security (TLS) Protocols and Cipher Suites
The SSLCONFIG macro output can also be found in the QMGTOOLS/SYSSNAP .zip file.
Path example; ......\SYSSNAP\SSTDUMPS\TLSCONFIG.txt
Resolving The Problem
To use the SSL configuration IBM-supplied macro support, follow these steps:
- Access System Service Tools by using SST.
- Select Start a service tool.
- Select Display/Alter/Dump.
- Select Display/Alter storage.
- Select Licensed Internal Code (LIC) data.
- Select Advanced analysis. (You must page down to see this option.)
- Page down until you find the SSLCONFIG option. Then, place a 1 (Select) next to the option and press Enter. You are now on the Specify Advanced Analysis Options window. The command shows as SSLCONFIG.
- Enter '-h' without the quotation marks and press Enter to display the available options.
- Best practice is to start with Options -DISPLAY
Related Information
[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CIJAA2","label":"SSL TLS Communications"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
More support for:
IBM i
Component:
SSL TLS Communications
Software version:
All Versions
Operating system(s):
IBM i
Document number:
668083
Modified date:
15 August 2022
UID
nas8N1021985
Manage My Notification Subscriptions