IBM Support

TLS Override

News


Abstract

Using IBM Navigator with non-secure ports restricted requires valid certificates. The TLSoverride option is available if anything with the system causes the TLS connections to fail. Use the TLSoverride option to log in and reconfigure secure connections. This document explains how to set TLS Override manually.

Content

​
 
​You are in: IBM i Technology Updates  > Navigator for i > Documentation on Functional Areas > Connection Properties > TLS Override
Connection Properties topics:
TLS Override
The TLS override will ignore any system and user settings to use secure connections to the host servers.  This allows an administrator to log in and fix any issues with certificates. 
This can be done in two ways:
  • On the GUI node set Configuration Properties (which requires ability to access IBM Navigator for i through the GUI so will not work for emergency situations)
  • Manually modify the preferences file to set tlsOverride to true - /qibm/userdata/os400/Navigator/preferences/pIgMiytjMDLAhlQ1m+wcBQ==
    • Edit preferences file (name: pIgMiytjMDLAhlQ1m+wcBQ==) found here: /qibm/userdata/os400/Navigator/preferences
      • Add "tlsOverride":true or if it exists with value set to false, change to true.  Your file will then look something like this:
        • {"prefDirAdjustedRel":460288,"globalTLSList":[],"tlsOverride":true,"localhostOverride":true}
    • If the file does not exist, create "pIgMiytjMDLAhlQ1m+wcBQ==" (CCSID 819) with the contents:
      • {"prefDirAdjustedRel":459776,"globalTLSList":[],"tlsOverride":false,"localhostOverride":true}
CHGATR OBJ('/qibm/userdata/os400/navigator/preferences/pIgMiytjMDLAhlQ1m+wcBQ==') ATR(*CCSID) VALUE(819)                                          
chgown obj('/qibm/userdata/os400/Navigator/preferences/pIgMiytjMDLAhlQ1m+wcBQ==') newown(QWEBADMIN)
chgaut obj('/qibm/userdata/os400/Navigator/preferences/pIgMiytjMDLAhlQ1m+wcBQ==') user(QWEBADMIN) dtaaut(*RWX) OBJAUT(*NONE)
chgaut obj('/qibm/userdata/os400/Navigator/preferences/pIgMiytjMDLAhlQ1m+wcBQ==') user(*PUBLIC) dtaaut(*EXCLUDE) OBJAUT(*NONE)
  • Log out and back in
After the TLS configuration has been fixed and tested, turn off the TLS override using the GUI in Serviceability > Connection Properties > GUI Preferences. 
Then log out and back in for Navigator to use secure connections.

[{"Type":"MASTER","Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CH1AAM","label":"IBM Navigator for i"}],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0;7.4.0;and future releases"}]

Document Information

Modified date:
13 June 2025

UID

ibm17230537

Page Feedback