Visara SSL1000 - Manual (Page 31)

707092-001 B-1
Appendix B. Emulator Setup
IBM Personal Communications
To Add SSL Security to an Existing PCOMM Session
• Open the session. Under Communication , choose Configure .
- Click on the Link Parameters button.
- Change the Host Name or IP Address to the IP address or DNS name of the
SSL1000.
- If necessary, change the Port Number as specified in the SSL1000 Mapping
for this session.
- The LU or Pool Name remains the same. This is used after the end-to-end
connection is made.
- Click the checkbox labeled Enable Security .
- Click OK to exit Link Parameters
• Click OK to save and exit Configuration
To Import the SSL1000 CA Certificate into PCOMM
You will have to import the CA certificate into the PCOMM Key Database if
• You use the default SSL1000 certificate as shipped (from the “Visara Certificate
Authority”)
• You imported a server certificate into the SSL1000 that is not from a “well known”
Certificate Authority (see list below)
You will have to import the Server certificate into the PCOMM Key Database if
• You imported a Self-Signed server certificate into the SSL1000
• You imported a server certificate into the SSL1000 that is not from a “well known”
Certificate Authority (see list below) and you do not have that CA Certificate available.
If you have replaced the factory default Server Certificate in the SSL1000 with one
from one of the “well known” Certificate Authorities listed below, then you do not need
to import the certificate. As shipped, PCOMM will trust any server certificate signed
by one of the following CAs:
• Thawte Personal Premium CA
• Thawte Personal Freemail CA
• Thawte Personal Basic CA
• Thawte Premium Server CA
• Thawte Server CA
• RSA Secure Server CA
• VeriSign Class 1 Public Primary CA
• VeriSign Class 2 Public Primary CA
• VeriSign Class 3 Public Primary CA
• VeriSign Test CA Root Certificate