On Fri, 21 Jan 2011 08:47:58 -0600, Bruce Wheatley <bwheat...@cds.ca> wrote:

>Question from our sysprog group:
>
>Is it true that most SFTP clients do not support certificates?

I'm not sure they asked the question they really intended, so it would help
to know why they are asking the question.

Whether the client supports certificates or not has no bearing on whether
you can use certificates and keyrings on z/OS to store the public/private
OpenSSH keys when you have IBM Ported Tools for z/OS V1.2. 

The client can use a standard OpenSSH public/private key file stored on
their system, while the server can use certificates and SAF keyrings for
both its public/private key and for the client's public/private key.

-- 
Walt Farrell
IBM STSM, z/OS Security Design

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to