How To - Connecting via the Internet (Installing SSL)

This article describes how to install SSL (Secure Socket Layer) functionality for use with Konnexions. This will enable you to connect to IBM over an existing Internet connection. SSL functionality is included in Konnexions v1.01 and above.

IMPORTANT: Before installing, please ensure that all programs are closed.

Note: If you have the same IBM mailbox configured in both Konnexions v1s and v1c then you need only request the X509 certificate once, but please let us know that you need both when you email the Support Team.

Konnexions v1.01s

Please follow the steps below to install SSL functionality for Konnexions v1s:

1) X509 certificates are required to connect via SSL. Send an email to our Support Team requesting the X509 certificates for your IBM mailboxes, the email will need to contain the following details:

a) Your company's name
b) Your name
c) IBM mailbox details (Information Exchange Account, and User ID) for each IBM mailbox that you use with Konnexions v1s.
d) Version of Konnexions (i.e. Konnexions v1s)

Please be aware that it normally takes at least an 1 day for us to get the X509 certificates certificates from IBM, we will acknowledge receipt of your email and send you the certificates in due course.

2) Ensure that Konnexions v1.01s (or higher) is installed (Note: the version is displayed in the title bar when Konnexions v1s is run) - if it is not, please follow the relevant instructions below:

CD Install: Install from the new CD by following the instructions provided with the CD. NOTE: When the install runs, the window title should begin Konnexions v1.01; if it is not then please check you have the correct CD in the drive and not an old version of Konnexions (the CD's look almost identical).

Download: Click here to download the latest version of Konnexions v1s (approximately 9Mb). After the download is complete please contact our Support Team to request the unlock password.

3) When installation is complete you will need to install the SSL connectivity module by following the relevant instructions below:

CD Install: open Windows Explorer and navigate to the CD Drive (which should have a blue Konnexions icon). Open the Bin folder, then the 3rd Party folder and finally the IBM folder. Double-click the intexp program to run it.

Download: Click here to download and run the intexp program (approximately 6.5Mb).

4) Follow the installation wizard to install the programs required for SSL connectivity:

- Click Next on the first screen
- Read and accept the license agreement by clicking Yes
- Click Next (we recommend that you do not change the Destination Folder)
- Click Next
- When the install is complete, click Finish.

5) When you receive the X509 certificate(s) from Kewill via email there will be a program attached. Please run the program; after a few seconds the Konnexions X509 certificate installer window will appear, check the feedback window to ensure that no errors were encountered and click OK to close the window.

6) Run Konnexions v1s

7) Click on the Mailboxes icon

8) Open your IBM mailbox (normally called EXPWIN) by selecting the mailbox and clicking the open book icon. Follow the steps below:

- Click Next (on the first Mailbox setup wizard page)
- Click Next (on the Identifies page)
- Click Next (on the Traces page)
- You should now be on the General page. From the Comms type list, select T - TCP/IP (via Internet SSL) and click Next.
- The Konnexions Dial window should appear:

- If you have a permanent Internet connection then select the first option "I want to connect through a local area network (LAN)".
- If you connect to the Internet via a modem then select the second option "I want to connect using a modem (Dial-up)". Dial-up Settings will appear; we recommend that you select the second option "Use the following dial-up connection (Recommended)", then select the dial-up connection that you normally use to connect to the Internet (do not select AT&T Global Network).
- Click Next

- The Details window should appear (it may be hidden by other windows, if so then click on Mailbox setup wizard at the bottom of the screen). Click Finish.

9) If you have more than one IBM mailbox, please repeat step 8 (above) for each of your IBM mailboxes.

10) You should now be able to connect to IBM as you would do normally, however the messages will go via the Internet rather than via the AT&T dialer.

Konnexions v1.01c

Please follow the steps below to install SSL functionality for Konnexions v1c:

1) X509 certificates are required to connect via SSL. Send an email to our Support Team requesting the X509 certificates for your IBM mailboxes, the email will need to contain the following details:

a) Your company's name
b) Your name
c) IBM mailbox details (Information Exchange Account, and User ID) for each IBM mailbox that you use with Konnexions v1c.
d) Version of Konnexions (i.e. Konnexions v1c)

Please be aware that it normally takes at least an 1 hour for us to get the X509 certificates certificates from IBM, we will acknowledge receipt of your email and send you the certificates in due course.

2) Ensure that you have the Konnexions v1.01 CD in the CD Drive; when you insert the CD the install will try to run (NOTE: the window title should begin Konnexions v1.01; if it is not then please check you have the correct CD in the drive and not an old version of Konnexions; the CD's look almost identical), close it by clicking on the X in the top right-hand corner.

3) When you receive the X509 certificate(s) from Kewill via email there will be a program attached. Please run the program and click the Update button. You will be prompted to select your IBM certificate which should be shown in the list of files; select the file and click Open.

4) If you have not already installed Open Internet access for Information Exchange then the install will automatically run:

- Click Next on the first screen
- Read and accept the license agreement by clicking Yes
- Click Next (we recommend that you do not change the Destination Folder)
- Click Next
- When the install is complete, click Finish.

5) The Please Choose your Connection Method will be displayed:

- If you have a permanent Internet connection then select the first option "Let Windows manage my Internet connection".
- If you connect to the Internet via a modem then select the second option "Make connection using selected Dial-up". From the second drop-down list, select the dial-up connection that you normally use to connect to the Internet (do not select AT&T Global Network).
- Click Close

6) Click Close on the Konnexions - SSL Upgrade window

7) You should now be able to connect to IBM as you would do normally, however the messages will go via the Internet rather than via the AT&T dialer.

Firewall Settings

If you have a personal Firewall install on your computer then the following rules will need to be added to your Firewall to enable Konnexions to communicate with IBM via SSL:

Allow: stunnel.exe - any port - TCP - out

The stunnel application should be installed in the following location:

c:\program files\ibm\open internet access for information exchange

If you are connect to the Internet via a local area network and have a corporate Firewall, please ask your network administrator to add the following rules to the Firewall policy:

Allow: 129.35.78.164:3669 - TCP - out
Allow: 129.35.76.97:3667 - TCP - out

If you experience problems installing SSL, please contact the Kewill helpdesk with details of the steps you have performed and any errors that you received.

back - begin again