TIBCO MFT Platform Server for IBM i User Guide. Software Release April 2013

Transcription

1 TIBCO MFT Platform Server for IBM i User Guide Software Release April 2013

2 Important Information SOME TIBCO SOFTWARE EMBEDS OR BUNDLES OTHER TIBCO SOFTWARE. USE OF SUCH EMBEDDED OR BUNDLED TIBCO SOFTWARE IS SOLELY TO ENABLE THE FUNCTIONALITY (OR PROVIDE LIMITED ADD-ON FUNCTIONALITY) OF THE LICENSED TIBCO SOFTWARE. THE EMBEDDED OR BUNDLED SOFTWARE IS NOT LICENSED TO BE USED OR ACCESSED BY ANY OTHER TIBCO SOFTWARE OR FOR ANY OTHER PURPOSE. USE OF TIBCO SOFTWARE AND THIS DOCUMENT IS SUBJECT TO THE TERMS AND CONDITIONS OF A LICENSE AGREEMENT FOUND IN EITHER A SEPARATELY EXECUTED SOFTWARE LICENSE AGREEMENT, OR, IF THERE IS NO SUCH SEPARATE AGREEMENT, THE CLICKWRAP END USER LICENSE AGREEMENT WHICH IS DISPLAYED DURING DOWNLOAD OR INSTALLATION OF THE SOFTWARE OR IF THERE IS NO SUCH SOFTWARE LICENSE AGREEMENT OR CLICKWRAP END USER LICENSE AGREEMENT, THE LICENSE(S) LOCATED IN THE LICENSE FILE(S) OF THE SOFTWARE. USE OF THIS DOCUMENT IS SUBJECT TO THOSE TERMS AND CONDITIONS, AND YOUR USE HEREOF SHALL CONSTITUTE ACCEPTANCE OF AND AN AGREEMENT TO BE BOUND BY THE SAME. This document contains confidential information that is subject to U.S. and international copyright laws and treaties. No part of this document may be reproduced in any form without the written authorization of TIBCO Software Inc. TIBCO, The Power of Now, TIBCO Managed File Transfer, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, TIBCO Managed File Transfer Platform Server, TIBCO Managed File Transfer Platform Server Agent, Edge Server, RocketStream Accelerator, and Slingshot are either registered trademarks or trademarks of TIBCO Software Inc. or its subsidiaries in the United States and/or other countries. All other product and company names and marks mentioned in this document are the property of their respective owners and are mentioned for identification purposes only. THIS SOFTWARE MAY BE AVAILABLE ON MULTIPLE OPERATING SYSTEMS. HOWEVER, NOT ALL OPERATING SYSTEM PLATFORMS FOR A SPECIFIC SOFTWARE VERSION ARE RELEASED AT THE SAME TIME. THIS DOCUMENT IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THIS DOCUMENT COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN; THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THIS DOCUMENT. TIBCO SOFTWARE INC. MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS DOCUMENT AT ANY TIME. THE CONTENTS OF THIS DOCUMENT MAY BE MODIFIED AND/OR QUALIFIED, DIRECTLY OR INDIRECTLY, BY OTHER DOCUMENTATION WHICH ACCOMPANIES THIS SOFTWARE, INCLUDING BUT NOT LIMITED TO ANY RELEASE NOTES AND "READ ME" FILES. TIBCO Managed File Transfer Internet Server with RocketStream Accelerator is entitled TIBCO Managed File Transfer Internet Server in certain other product documentation and in user interfaces of the product. Copyright TIBCO Software Inc. ALL RIGHTS RESERVED. TIBCO Software Inc. Confidential Information

3 3 Contents Contents Preface... 7 RELATED DOCUMENTATION... 8 TIBCO MFT Platform Server for IBM i... 8 HOW TO CONTACT TIBCO CUSTOMER SUPPORT... 9 Installation SYSTEM REQUIREMENTS Supported Platforms Minimum Hardware Sizing Guidelines Installation Notes INSTALLATION ON IBM I Upload the Installation Package Steps to FTP the Save file from Windows to IBM i Restore the MFT Library Apply License Key Upgrade Administration Main Menu CONFIGURATION MENU Global Parameter Menu Global Parameter Display: Global Parameter Update Network Configuration Menu Work With Network Configuration Reorganize Network Configuration User Profile Menu Work With User Profile Reorganize User Profile MESSAGE LOG MENU... 44

4 Contents 4 Work With Message Log Purge Message Log PURGE AUDIT MENU Purge Audit DATA TRANSFER MENU Send File Panel Receive File Panel Send and Receive File Parameters Send IFS File Panel Receive IFS File Panel Send and Receive IFS File Parameters Send Save File Panel Receive Save File Panel Send and Receive Save File Parameters Send Library Panel Receive Library Panel Send and Receive Library Parameters Send Object Panel Receive Object Panel Send and Receive Object Parameters Execute Remote Command Panel ADMINISTRATION TRANS MENU Transaction Selection Transaction Selection Criteria Parameters Purge Request Queue INITIATOR SCHEDULER MENU Starting the Initiator Scheduler Stopping the Initiator Scheduler RESPONDER MENU Starting the Responder Start SSL Responder... 97

5 5 Contents Stopping the Responder Stopping SSL Responder User Main Menu DATA TRANSFER MENU TRANSACTION SELECTION Command Line Transfers TRANSFER COMMANDS Sending a File by Command Line Receive a File by Command Line Execute Remote Command Line Transfers Sample Command Line Transfers Security Information SECURITY Security Validation Security Validation of Incoming MFT Platform Server Transfer Requests IBM i Security Incoming Processing Security Validation of MFT Platform Server Outgoing Transfer Requests IBM i Security Outgoing Processing Already Verified Users AUTO-START JOB ENTRIES Job Entry for Start TCP/IP Command Job Entry for Start Initiator Scheduler Job Entry for Start Responder Command SSL AUTHENTICATION DATA ENCRYPTION Asymmetrical Encryption Symmetrical Encryption DIGITAL CERTIFICATES Certificate Authority

6 Contents 6 Creating and Importing Certificates SSL AUTHORIZATION SSL Authorization Parameters Utilities FUSUTIL Overview FUSUTIL Command Format Special Processing Return Codes Monitoring Messages FUSPING Overview FUSPING Command Parameters FUSPING Command Line Parameters FUSPING Command Format Sample of the FUSPING Command FUSPING Help Monitoring Messages RENAMING THE PRODUCT LIBRARY Appendix A Code Page Conversion CODE PAGE CONVERSION PANEL Code Page Conversion Parameters Example Command Line Code Page Conversions Appendix B Time File Name Token Index...159

7 7 Preface Preface This publication is intended for those individuals responsible for installing, configuring, managing, and operating the IBM i component of the File Transfer Management System. Topics Related Documentation How to Contact TIBCO Customer Support

8 Preface 8 Related Documentation This section lists documentation you may find useful. TIBCO MFT Platform Server for IBM i The following documents below form the TIBCO MFT Platform Server for IBM i: TIBCO MFT Platform Server for IBM i Users Guide.docx: Read this manual for instructions on site preparation, installation, and on using the product to perform transfer requests and more between other Platform Server nodes. TIBCO MFT Platform Server for IBM i v7.1 Release Notes.docx: Read the release notes for a list of new and changed features. This document also contains lists of known issues and closed issues for this release.

9 9 Preface How to Contact TIBCO Customer Support For comments or problems with this manual or the software it addresses, contact TIBCO Support, as follows: For an overview of the TIBCO Support and information on getting started with TIBCO Support, visit If you already have a valid maintenance or support contract, visit Entry to this site requires a user name and password. If you do not have to login credentials, click Register with Support. Technical Support address support@tibco.com Technical Support Call Centers: o North and South America: or ( TACS) o EMEA (Europe, Middle East, Africa): +44 (0) o Australia: or o Asia:

10 Installation 10 Installation In this chapter you will learn how to install MFT Platform Server for IBM i. The main procedures will instruct you how to: Topics System Requirements Minimum Hardware Sizing Guidelines Installation on IBM i

11 11 Installation System Requirements Supported Platforms Minimum Hardware Sizing Guidelines The MFT Platform Server for IBM i is supported on IBM i Series 32- bit and 64-bit Versions 5.4, 6.1, and 7.1. Note: Support for TIBCO Managed File Transfer is provided for IBM products that are currently in the mainstream support. When IBM reaches end of mainstream support they will fix security issues but there are limits on what they will do for non-security related issues. Because of this we may run into a problem where there is an IBM i issue that will not be addressed by IBM that may affect the level of support that TIBCO would be able to provide. Therefore, support for TIBCO MFT may be limited in some circumstances for the IBM I products that are in the Extended Support phase. Once an IBM product reached the end of the Extended Support phase TIBCO no longer provides any support for that product. 1 GB of memory 100 MB of disk space An appropriate amount of additional local storage is recommended for file transfer data In addition to the above minimum requirements: For up to 100 concurrent transfers, two or more processor cores at 2.5 GHz or faster For up to 200 concurrent transfers, four or more processor cores at 2.5 GHz or faster

12 Installation 12 Installation Notes For more than 200 concurrent transfers, eight or more processor cores at 2.5 GHz or faster One additional processor core at 2.5 GHz or better for extensive use of encryption or compression To verify that MFT Platform Server will run properly on your system, please use the following as a guide. Step 1: On the command line type the following: DSPPTF Step 2: The output from the display PTF command will display the PTF status. Check the FIRST TL number listed. The TL number must be equal or greater to TL If your TL number is less than what is listed here, you will have to contact IBM to acquire the cumulative PTF in order for MFT Platform Server to function properly on your system.

13 13 Installation Installation on IBM i Upload the Installation Package MFT Platform Server for IBM i must be downloaded from the TIBCO download site at The user must transfer the MFT Platform Server for IBM i save file to their system. The save file is MFT710V5. Steps to FTP the Save file to IBM i Step 1: Sign on to IBM i with QSECOFR authority and create an empty save file called MFT710 using the following command: Step 2: CRTSAVF MFT710 Transfer the save file to the IBM i system using the following command: Step 3: FTP (Substitute the IP Address of your IBM i system here) Sign on with QSECOFR authority and enter the appropriate password. Step 4: Set the transfer mode to BINARY. To do this, enter the following on the command line: BINARY

14 14 Installation Step 5: Execute the FTP PUT command to transfer the appropriate save file to IBM i. The target save file name should be QGPL/MFT710. Below is an example of the FTP commands needed to transfer the file to the IBM i system. PUT c:\directory_name\mft710v5 QGPL/MFT710 Step 6: When the file has been uploaded to the IBM i machine, you can end the FTP session by typing the following on the command line: QUIT Restore the MFT Library To restore the product on IBM i, you should follow the steps below while signed on as QSECOFR. Please note that the upper case values should be typed in exactly as stated. The lower case values may be changed to conform to your installation s needs. Step 7: Create the MFT library on the IBM i. Enter the following command to create the MFT library: CRTLIB LIB(MFTPLAT710) TEXT( MFT Platform Server v.v.v Product Library ) This will create a library on your system that will be used with the restore command. Where v.v.v is the new version of MFT Platform Server for IBM i. Step 8: Restore all objects into the MFT Platform Server library on the IBM i. Enter the following command to restore the MFT Platform Server objects:

15 Installation 15 RSTLIB SAVLIB(MFTPLATSHP) DEV(*SAVF) SAVF(QGPL/MFT710) MBROPT(*ALL) ALWOBJDIF(*ALL) RSTLIB(MFTPLAT710) MFTPLATSHP is embedded in the MFT710 save file when they are created. All objects from the MFT710 save file are restored to library MFTPLAT710. When this restore is complete you will get a message similar to the following: Step 9: 414 objects restored from MFTPLATSHP to MFTPLAT710 Add MFT Platform Server Library to the IBM i Library List. ADDLIBLE MFTPLAT710 This adds the MFTPLAT100 library to your library list. Step 10: To create the MFT Platform Server user profile on IBM i, issue the following command from the IBM i command line: CFCRTPRF This runs the MFT Platform Server Create Product User Profile command. This will create a user profile called MFTPLAT710. This user profile is required to run the MFT Platform Server product. You must sign on as QSECOFR or have QSECOFR rights to run this command. If you have QSECOFR rights and have the Limit Capabilities parameter set to anything other than *NO in your profile, then you will not be able to execute this command.

16 16 Installation Apply License Key Upgrade You will be presented with the End User License Agreement. Page Down to read the agreement and then press F10 to accept the terms of the EULA by entering YES. When this MFT Platform Server Program is completed, you will get a message similar to the following: Installation of MFT Platform Server completed normally. MFT Platform Server needs a license key to function. The license is available on the TIBCO download site, download.tibco.com. Once the key is obtained, apply the key using the CFAPYKEY program. From the command line, type the following and press Enter: CFAPYKEY Copy and Paste the License Key provided in the field available and press the <Enter> key. The following message will appear when the license is applied correctly: License Key applied successfully If the license key is not applied the Initiator will shut down upon the first attempt at a transfer. In this section you will learn how to upgrade MFT Platform Server for IBM i. The main procedures will instruct you how to upload the files to your IBM i system, shutdown all MFT Platform Server Service Programs on the IBM i system and restore the MFT Platform Server for IBM i libraries. Upload MFT Platform Server to an IBM i System MFT Platform Server for IBM i must be downloaded from the TIBCO download site at The

17 Installation 17 user must transfer the appropriate MFT Platform Server for IBM i save file to their system. The save file is MFT710V5. This section will describe how to FTP the MFT Platform Server save file to an IBM i system. Steps to FTP the Save file from Windows to an IBM i System Step 1: Sign on to the IBM i with QSECOFR authority and create an empty save file called MFT710 using the following command: Step 2: CRTSAVF MFT710 Transfer the save file to the IBM i System using the following command: Step 3: FTP (Substitute the IP Address of your IBM i here) Sign on with QSECOFR authority and enter the appropriate password. Step 4: Set the transfer mode to BINARY. To do this, enter the following on the command line: Step 5: BINARY Execute the FTP PUT command to transfer the appropriate save file to IBM i. The target save file name should be QGPL/MFT710. Below is an example of the FTP commands needed to transfer the file to the IBM i system. PUT c:\directory_name\mft710v5 QGPL/MFT710

18 18 Installation Step 6: When the file has been uploaded to the IBM i machine, you can end the FTP session by typing the following on the command line: QUIT Shutdown all MFT Platform Server Service Programs on IBM i Make sure all previous MFT Platform Server transfer file requests have been processed. Step 7: After all transfer file requests have been process, stop all the MFT services. To stop the MFT Initiator Scheduler (CFSCHED in the QSYSWRK subsystem) issue the following command: CFSTOPINT To stop the MFT Responder (CFSERVER in the QSYSWRK subsystem) issue the following command: CFSTOPRSP Restore the MFT Platform Server Library on the system To restore the product on the IBM i system, you should follow the steps below while signed on as QSECOFR. Please note that the upper case values should be typed in exactly as stated. The lower case values may be changed to conform to your installation s needs. Step 8: Create the MFT Platform Server library on IBM i. Enter the following command to create the MFT Platform Server library: CRTLIB LIB(MFTPLAT710) TEXT( MFT Platform Server v.v.v PTF nn Product Library ) This will create a library on your system that will be used with the restore command.

19 Installation 19 Where v.v.v is the new version of MFT Platform Server for IBM I and nn is the new PTF number of MFT Platform Server for IBM i. Step 9: Restore all objects into the MFT library on the IBM i. Enter the following command to restore the MFT objects: RSTLIB SAVLIB(MFTPLATSHP) DEV(*SAVF) SAVF(QGPL/MFT710) MBROPT(*ALL) ALWOBJDIF(*ALL) RSTLIB(MFTPLAT710) MFTPLATSHP is embedded in the MFT710 save file when they are created. All objects from the MFT710 save file are restored to library MFTPLAT710. When this restore is complete you will get a message similar to the following: 414 objects restored from MFTPLATSHP to MFTPLAT710 Please note: the number of objects restored may vary slightly. There should never be any objects not restored. Step 10: Add MFT Library to the IBM i Library List. ADDLIBLE MFTPLAT710 This adds the MFTPLAT710 library to your library list. Step 11: Upgrade MFT Platform Server on the IBM i. Issue the following command from the IBM i command line: CFUPGRADE FRMLIB(MFTPLAT700) This runs the MFT Platform Server Upgrade Program. This will upgrade the new MFT Platform Server by copying all configuration and message records from the previous MFT Platform Server to the new MFT Platform Server. The Upgrade

20 20 Installation Program will also remove the previous MFT Platform Server user profile called MFTPLAT700. Note: If the previous MFT Platform Server release does not have the Message Log Selection Screen then the administrator must clear the MFT Platform Server Message Log File on the previous MFT Platform Server release before upgrading the current MFT Platform Server product. When this MFT Program is completed, you will get a message similar to the following: Step 12: Upgrade of MFT Platform Server completed normally. Create the MFT Platform Server User Profile on IBM i using the program provided. Issue the following command from the IBM i command line: CFCRTPRF This runs the MFT Platform Server Create Product User Profile command. This will create a user profile called MFTPLAT710. This user profile is required to run the MFT Platform Server product. To run the CFCRTPRF command, you must sign on as QSECOFR or have QSECOFR rights. If you have QSECOFR rights and have the Limit Capabilities parameter set to anything other than *NO in your profile, then you will not be able to execute this command. You will be presented with the End User License Agreement. Page Down to read the agreement and then press F10 to accept the terms of the EULA by entering YES. When this MFT Platform Server Program is completed, you will get a message similar to the following: Installation of MFT Platform Server completed normally.

21 Administration Main Menu 21 Administration Main Menu This chapter discusses how to administer MFT Platform Server for IBM i from the Administration Main Menu. From this Menu a user can customize the MFT Platform Server for IBM i product for their environment. To display the Administration Main Menu the MFT Platform Server library must be added to any users library list that will be using MFT Platform Server for IBM i. If this is not automatically done type the following command on the command line and pressing the <Enter> key: ADDLIBLE MFTPLAT710 Topics Configuration Menu Message Log Menu Purge Audit Menu Data Transfer Menu Administration Trans Menu Initiator Scheduler Menu Responder Menu

22 22 Administration Main Menu Configuration Menu To access the Configuration Menu for MFT Platform Server for IBM i type the following command on the command line and pressing the <Enter> key: GO CFADM Note: The MFT Platform Server library, MFTPLAT710, must be added to the user s library list for the above command to run successfully. From the Administration Main Menu select Option 1. The following panel will be displayed: CFADM MFT Platform Server Administration Main Menu System: SYSTEM NAME Select one of the following: Menus 1. Configuration Menu 2. Message Log Menu 3. Purge Audit Menu 4. Data Transfer Menu 5. Administration Trans Menu 6. Initiator Scheduler Menu 7. Responder Menu 90. Sign off Selection or command ===> F1=Help F3=Exit F4=Prompt F9=Retrieve F12=Cancel F13=Information Assistant F16=System main menu

23 Administration Main Menu 23 CFCONFMNU MFT Platform Server Configuration Menu System: SYSTEM NAME Select one of the following: Menus 1. Global Parameter Menu 2. Network Configuration Menu 3. User Profile Menu 90. Sign off Selection or command ===> F1=Help F3=Exit F4=Prompt F9=Retrieve F12=Cancel F13=Information Assistant F16=System main menu This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: GO CFCONFMNU The following panel will be displayed: The configuration process is broken up into three components: Global Configuration: defines parameters used by the entire MFT Platform Server System. Network Configuration: defines the remote systems to MFT Platform Server. User Profile Configuration: defines users to MFT Platform Server.

24 24 Administration Main Menu Global Parameter Menu Select Option 1 from the MFT Platform Server Configuration Menu to access the MFT Platform Server Global Parameter Menu. From this panel you can display or update the global parameters. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: GO CFGLBMNU The following panel will appear: CFGLBMNU MFT Platform Server Global Parameter Menu System: SYSTEM NAME Select one of the following: Commands 1. Global Parameter Display CFDSPGLB 2. Global Parameter Update CFUPDGLB 90. Sign off Selection or command ===> F1=Help F3=Exit F4=Prompt F9=Retrieve F12=Cancel F13=Information Assistant F16=System main menu Global Parameter Display: Select Option 1 from the MFT Platform Server Global Parameter Menu to access the MFT Platform Server Work with Global Parameter Screen. This displays the global parameters that have

25 Administration Main Menu 25 been defined. This is a view only panel. No changes can be made here. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: CFDSPGLB A panel similar to the following will appear: CFWRKGLB TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With Global Parameter Screen DISPLAY 14:54:50 Press Enter to continue. Error Try...: 1 Init Scheduler Interval..: 60 (SS) Required Node Init: N Resp: N (Y/N) Trace Initiator/Responder..: N (Y/N) TCP/IP Listen Port No: ( ) Version: SMTP Server.: smtp.server.com From..: mftadmin@company.com Subj..: MFT Platform Server Notification License Key.: SR# ********* Expiration 12/31/2035 Build Number: F1=Help F3=Exit F12=Cancel ENTER=Next Screen

26 26 Administration Main Menu CFWRKGLB TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With Global Parameter Screen DISPLAY 14:54:50 Press Enter to continue. SSL TCP/IP Listen Port No..: ( ) SSL Encryption..: 3 (0=None 1=DES 2=TDES 3=Blowfish 4=Blowfish Long 5=Rijndael) SSL Client Application ID..: SSLCERTIFICATE SSL Server Application ID..: SSLCERTIFICATE Use SSL Authorization File.: N (Y/N) SSL Authorization File Name: /qsys.lib/mftplat710.lib/sslauth.file/sslauth.mbr_ F1=Help F3=Exit F12=Previous Screen ENTER=Update Record Copyright (C) TIBCO Software Inc ALL RIGHTS RESERVED. Below is a list of all the fields in alphabetical order for easy reference as well as a brief description of each. Parameter Build Number From Subj Error Try Description This parameter shows the Build Number of the MFT Platform Server product. This field is display only. This parameter allows the user to specify the From Address that appears on the sent by MFT. This value can be up to 55 bytes and dots. This parameter cannot contain any spaces. If this parameter is not specified, the address you specify during sending or receiving will be ignored. This parameter allows the user to specify what will appear in the Subject line of the sent by MFT Platform Server. This value can be up to 64 bytes. The user can configure MFT Platform Server to set a number of error try

27 Administration Main Menu 27 Parameter Expiration Init Scheduler Interval License Key Required Node Init Description value for all transfer request records that have an error status. The error try number value will determine how many tries to give to the transfer request records with an error status. The number of error try entered should be a value number between 1 to 99. This field is display only and is updated by the MFT Platform Server apply key program, CFAPYKEY. The user can configure MFT Platform Server to set an Initiator Scheduler Interval time which will delay the Initiator Scheduler program until the interval value is reached. The Initiator Scheduler Interval time entered should be in seconds with valid values of 1 to This parameter shows the serial number of the machine where MFT Platform Server is running. This field is display only and updated by the MFT Platform Server apply key program, CFAPYKEY. The user can configure MFT Platform Server to validate all outgoing initiator transfer requests in order to ensure that the receiving MFT Platform Server system is defined in the MFT Platform Server for IBM i network configuration. It does this by matching the Remote Name of the outgoing initiator transfer request against the Node Name defined in the Network Configuration. Values N/Y If Y, MFT Platform Server will validate all MFT Platform Server Network Configuration record settings for all of the remote systems. Before

28 28 Administration Main Menu Parameter Required Node Resp SMTP Server Description an outgoing transfer request is sent, MFT Platform Server will ensure that the network definition has been configured for the remote system that will receive the transfer request. If there is no match for the Remote Node Name, the transfer request is terminated with an error status. If N, MFT Platform Server will not validate outgoing initiator transfer requests against the MFT Platform Server Network Configuration. The user can configure MFT Platform Server to validate all incoming transfer requests in order to ensure that the initiating MFT Platform Server system is defined in the MFT Platform Server for IBM i network configuration. It does this by matching the IP address of the incoming request against the IP address defined in the Network Configuration. Values N/Y If Y, MFT Platform Server will validate all MFT Platform Server Network Configuration record settings for all of the remote systems. Before an incoming transfer request is accepted, MFT Platform Server will ensure that the network definition has been configured for the system that initiated the transfer request. If there is no match for the IP address, the transfer request is terminated with a network error. If N, MFT Platform Server will not validate incoming transfer requests against the MFT Platform Server Network Configuration. This parameter allows the user to

29 Administration Main Menu 29 Parameter SSL Authorization File Name SSL Client Application ID SSL Encryption SSL Server Application ID Description specify the SMTP (Simple Mail Transfer Protocol) server name. If this parameter is specified, MFT Platform Server sends messages though this SMTP server. If this parameter is not specified, the address you specify during sending, or receiving will be ignored. This parameter allows the user to specify the SMTP (Simple Mail Transfer Protocol) server name. If this parameter is specified, MFT Platform Server sends messages though this SMTP server. If this parameter is not specified, the address you specify during sending, or receiving will be ignored. This parameter allows the user to specify the Client Application ID Name for outgoing SSL transfer requests. Default Value: SSLCERTIFICATE The user can configure the encryption type to use for all outgoing SSL transfer requests. Values: 0= None 1=DES 2=3DES (Triple DES) 3=Blowfish 4=Blowfish Long 5=Rijndael Note: If an SSL transfer is setup and the Encryption type value is left blank, then the Global SSL Encryption Type value will be used. This parameter allows the user to specify the Server Application ID Name for incoming SSL transfer requests.

30 30 Administration Main Menu Parameter SSL TCP/IP Listen Port No TCP/IP Listen Port Number Trace Initiator/Responder Use SSL Authorization File Version Description Default Value: SSLCERTIFICATE This parameter defines the SSL port that MFT Platform Server will listen on for incoming transfer requests using SSL. The number entered should be a valid IP port between 1024 and This parameter must match the IPPORT defined on the remote system. This parameter defines the TCP/IP port that MFT Platform Server for IBM i will listen on for incoming transfer requests. The number entered should be a valid IP port between 1024 and This parameter must match the IPPORT defined on the remote system. MFT Platform Server can be configured to trace both incoming and outgoing MFT transfer requests. MFT Platform Server will create secure files containing information about the data received from and sent to the remote systems, as well as status information about the programs processing the transfer request. This option should be turned on only when TIBCO technical support requests a trace. If Y, MFT Platform Server will trace all incoming and outgoing transfer requests. The user can select if the incoming SSL transfer requests the remote user to be validated by its SSL Authorization File. Values N/Y If Y, the incoming SSL transfer requests the remote user to be validated by its SSL Authorization File. This field displays the version of MFT Platform Server for IBM i that is

31 Administration Main Menu 31 Parameter Description currently running. This field is display only. Global Parameter Update Select Option 2 from the MFT Platform Server Global Parameter Menu to access the MFT Platform Server Work with Global Parameter Screen. This screen enables the user to define the status, control settings, security, debugging and TCP/IP parameters that are required by MFT. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: CFUPDGLB Network Configuration Menu Note: You must stop the Responder before updating the Global settings. For a description of each field found on the screens see the Global Parameter Display section of the manual. Select Option 2 from the MFT Configuration Menu in order to access the MFT Network Configuration Menu. All of the network configuration will be done through this set of panels. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: GO CFNETMNU The following panel will appear:

32 32 Administration Main Menu CFNETMNU MFT Platform Server Network Configuration Menu System: SYSTEM NAME Select one of the following: Commands 1. Work With Network Configuration CFWRKNET 2. Reorganize Network Configuration CFREORGNET 90. Sign off Selection or command ===> F1=Help F3=Exit F4=Prompt F9=Retrieve F12=Cancel F13=Information Assistant F16=System main menu Work With Network Configuration The Work with Network Configuration Screen allows a user to Add, Change, Copy, Delete or Display the detailed network configuration for a remote MFT Platform Server configured in the system. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: CFWRKNET A panel similar to the following will appear:

33 Administration Main Menu 33 CFWRKNET TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With Network Configuration Screen JOB NAME 14:54:50 Type action, Press Enter: 1=Add 2=Change 3=Copy 4=Delete 5=Display Remote Link System Act Node Type Type System Description _ IBMISYS *TCPIP IBM i IBM i System Configuration _ ZOSSYS *TCPIP z/os z/os System Configuration _ WINSYS *TCPIP Windows WINDOWS System Configuration _ UNIXSYS *TCPIP UNIX UNIX System Configuration F1=Help F3=Exit F5=Refresh F7=Page Up F8=Page Down F12=Cancel Add a remote MFT Platform Server When a user chooses to add the details of a remote MFT Platform Server, a screen similar to the one below will be displayed:

34 34 Administration Main Menu CFWRKNET TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With Network Configuration Screen MODE 14:55:10 Type choices, Press Enter. Remote Node Name...: Remote Link Type...: 1 (1=TCPIP) Remote System Type...: _ (1=z/OS 2=Windows 3=UNIX 4=IBM i) System Description...: Accept Verified User.: N (Y=Yes N=No) Data Compression...: 0 (0=None 1=RLE 2=LZ) Remote TCP/IP Port Number...: ( ) Remote TCP/IP Address/Host Name: Encryption: 0 (0=None 1=DES 2=TDES 3=Blowfish 4=Blowfish Long 5=Rijndael) Command Center Support (Y=Yes) All: Audit: Node: Ping: Profile: Transfer: Maintain by..: QSECOFR Maintain Date: 2/21/13 F1=Help F3=Exit F5=Refresh F12=Cancel A list of all the fields available and a brief description has been provided below in alphabetical order for ease of reference: Parameter Accept Verified Used Command Center Support Description MFT Platform Server can be configured to accept or reject verified users for incoming MFT transfer requests for this node. For more information on MFT Platform Server Accept Verified User please refer to Chapter 6. Valid Values: N/Y The Command Center Support parameters are explained below. To turn on a parameter, enter a Y next to the parameter. All - Allows the MFT Platform Server for IBM i to accept all MFT Command Center requests. All of the functions

35 Administration Main Menu 35 Parameter Description within Node, Profile, Transfer and Audit are allowed. Audit - Allows the MFT Platform Server for IBM i to accept MFT Command Center requests to view and retrieve information in the MFT Platform Server for IBM i Audit log. MFT Command Center Collector and Audit Polling functions require this option to be set on the MFT Platform Server for IBM i Node definition. Node - Allows the MFT Platform Server for IBM i to accept MFT Command Center requests to Add, List, Update and Delete MFT Platform Server for IBM i Node entries. Ping - Allows remote MFT Platform Servers to check if MFT Platform Server for IBM i is running. Profile - Allows the MFT Platform Server for IBM i to accept MFT Command Center requests to Add, List, Update and Delete MFT Platform Server for IBM i User Profile entries. Encryption Transfer - Allows the MFT Platform Server for IBM i to accept MFT Command Center requests to initiate a Transfer on this MFT Platform Server for IBM i to send a file to a different MFT Platform Server system The user can configure the encryption type to use for all outgoing transfer requests for this particular node.

36 36 Administration Main Menu Parameter Maintain by Maintain Date Remote Link Type Remote Node Name Description Values: 0= None 1=DES 2=TDES (Triple DES) 3=Blowfish 4=Blowfish Long 5=Rijndael The MFT Platform Server Work With Network Configuration Program will automatically update the Maintain by field with the current user when they change, copy or add a record to the MFT Platform Server Network Configuration File. The MFT Platform Server Work With Network Configuration Program will automatically update the Maintain Date with the current date when a user changes, copies, or adds a record to the MFT Platform Server Network Configuration File. After entering the appropriate values, press Enter to process the network configuration record. The MFT Platform Server Work With Network Configuration Program will automatically update the Remote Link Type field. The Remote Link Type value will be 1 for TCPIP. The Remote Node Name is a name the user gives to a remote system configuration for MFT Platform Server for IBM i. The remote system configuration record will be in the MFT Platform Server Network Configuration File. The user can enter the remote node name on the selection field either to enter a new record or to update a Network

37 Administration Main Menu 37 Parameter Remote System Type Remote TCP/IP Address/Host Name Remote TCP/IP Port Number System Description Description Configuration record. This name gives the user the ability to associate a name with a remote location instead of just using an IP address. The remote node entered by the user must be the name of a MFT Platform Server Remote System Configuration record, which will be used by MFT Platform Server to connect from a local location to a remote location. MFT Platform Server only accepts A-Z, $, #, and _ (underscore). The Node name cannot begin with an underscore. The user must enter one of four valid remote MFT Platform Server system types - IBM i, z/os, Windows and UNIX. The user can enter the Remote TCP/IP Address Number or a Remote Host Name for a particular Remote System. MFT Platform Server will use this address/host name to locate that Remote System for incoming and outgoing transfer request processing. This field also is used when the Global Required Node initiator or responder parameters are set to YES. The IP address/host Name of the incoming and outgoing transfer requests will be checked against this field to ensure that the remote system is defined to this MFT Platform Server system. The user may enter a Remote TCP/IP Port Number between 1024 and This parameter must match the IP port that the remote MFT Platform Server is listening to connect. Default value is The user may enter the System Description of the MFT Network

38 38 Administration Main Menu Parameter Description Configuration record setting. This field allows a user to attach a comment to a Network Configuration. Reorganize Network Configuration User Profile Menu Select Option 2 from the MFT Platform Server Network Configuration Menu in order to access the MFT Reorganize Network Configuration Command. The Reorganize Network Configuration Command purges deleted records from the Work With Network Configuration file and then sorts the file. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: CFREORGNET This screen does not contain any parameters. Press <Enter> to reorganize the system. Note: Do not run this command when the Network Configuration File contains no records. Select Option 3 from the MFT Platform Server Configuration Menu to access the MFT User Profile Menu. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: GO CFPRFMNU

39 Administration Main Menu 39 CFPRFMNU MFT Platform Server User Profile Menu System: SYSTEM NAME Select one of the following: Commands 1. Work With User Profile CFWRKPRF 2. Reorganize User Profile CFREORGPRF 90. Sign off Selection or command ===> F1=Help F3=Exit F4=Prompt F9=Retrieve F12=Cancel F13=Information Assistant F16=System main menu Work With User Profile The Work With User Profile screen allows a user to Add, Change, Copy, Delete or Display the details of a defined local user profile configured in the system that is directly linked to one of the defined remote MFT Platform Server configured in the Work With Network Configuration Screen. All standard IBM i security is utilized for the user profile's job running on the local location. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: CFWRKPRF A panel similar to the following will appear:

40 40 Administration Main Menu CFWRKPRF TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With User Profile Screen JOB NAME 14:54:50 Type action, Press Enter: 1=Add 2=Change 3=Copy 4=Delete 5=Display Remote Local Local User Act Node User Description UNIX TSS01 TSS01 User Profile Description _ HPUX TSS02 TSS02 User Profile Description _ WINDOWS TSS03 TSS03 User Profile Description _ ZOSSYS TSS04 TSS04 User Profile Description _ IBMISYS TSS05 TSS05 User Profile Description F1=Help F3=Exit F5=Refresh F7=Page Up F8=Page Down F12=Cancel Add a local User Profile When a user chooses to add a user profile to be user when sending to a specific remote MFT Platform Server, a screen similar to the one below will be displayed:

41 Administration Main Menu 41 CFWRKPRF TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With User Profile Screen ADD 14:55:10 Type choices, Press Enter. Remote Node Name...: SYSISYS Local User Name...: TSS01 (Name *All) Remote User Name...: TSS02 New Remote Password...: (Case Sensitive) New Password (To Verify): (Case Sensitive) Maintain by...: QSECOFR Maintain Date...: 2/21/13 F1=Help F3=Exit F5=Refresh F12=Cancel A list of all the available fields and a brief description has been provided below in alphabetical order for ease of reference: Parameter Local User Name Maintain by Maintain Date Description Used to define the local IBM i user id that will have the authorization to conduct transfer requests to the particular Remote Node. Enter *ALL in the Local User Profile Name field. This will allow all User Profile to transfer requests to that particular remote node. Valid Values: 1-32 characters, *ALL The Work With User Profile screen will automatically update the Maintain by field with the current user adding a profile to the system. The Work With User Profile screen will automatically update the Maintain Date with the current date when a

42 42 Administration Main Menu Parameter New Remote Password New Password (To Verify) Remote Node Name Remote User Name Description user adds a new profile to the system. This password field holds the present password being used to login to the remote MFT Platform Server Node this local profile is being associated with. The Remote Password can be up to 32 characters in length and is upper and lower case sensitive. This is a nondisplay field. This field is used to verify the password defined in the New Remote Password field. The Remote Node is a name the user gives to a remote system configuration for the MFT Platform Server for IBM i. The remote system configuration record will be in the MFT Platform Server Network Configuration File. The user can enter the remote node name on the selection field to either enter a new record or to update a User Profile record. This name gives the user the ability to associate a name with a remote location rather than just an IP address. The Remote User Name is the name of a user on a remote node system that will be used by MFT Platform Server on the IBM i. The Remote User Name can be up to 32 characters in length while the IBM i System user profile can only be 10 characters in length. The Remote User Name will be used to sign-on the remote node system for outgoing transfer requests using MFT Platform Server product.

43 Administration Main Menu 43 Reorganize User Profile After entering the appropriate values, press Enter to process the user profile record. Select Option 2 from the User Profile Menu in order to access the Reorganize User Profile Command. The Reorganize User Profile Command purges deleted records from the Work With User Profiles Menu and then sorts the file. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key: CFREORGPRF This screen does not contain any parameters. Press <Enter> to reorganize the system. Note: Do not run this command when the Work With User Profiles file contains no records.

44 44 Administration Main Menu Message Log Menu Select Option 2 from the Administration Main Menu to access the MFT Platform Server Message Log Menu. The Message Log Menu allows a user to work with all the MFT Platform Server Messages and Audit records generated for transaction requests. This panel can also be accessed directly by typing the following command on the command line: GO CFMSGMNU CFMSGMNU MFT Platform Server Message Log Menu System: Select one of the following: SYSTEM NAME Commands 1. Work With Message Log CFWRKMSG 2. Purge Message Log CFPRGMSG 90. Sign off Selection or command ===> F1=Help F3=Exit F4=Prompt F9=Retrieve F12=Cancel F13=Information Assistant F16=System main menu Work With Message Log To view user(s) message records from the message record log file that have been generated for MFT Platform Server transaction requests, select the Work With Message Log option. This panel can also be accessed directly by typing the following command on the command line and pressing the <Enter> key:

45 Administration Main Menu 45 CFWRKMSG The following panel will appear: CFWRKMSG TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With Message Log Selection Screen Job Name 15:44:19 Type choices, Press Enter. Selection Criteria Value Local User Profile: *ALL *ALL From Date and Time: (MM/DD/YYYY) (HHMMSS) To Date and Time..: TODAY (MM/DD/YYYY) (HHMMSS) Number of Days...: 1 F1=Help F3=Exit F5=Refresh F12=Cancel A list of all the available fields and a brief description has been provided below in alphabetical order for ease of reference: Parameter From Date and Time Local User Profile Number of Days Description The user can select the From Date and Time to display all MFT Platform Server message log records from the MFT Platform Server Message Log file that are greater than or equal to the date and/or time entered. The user can select any user profile and display all its MFT Platform Server message log records from the MFT Platform Server Message Log file. Valid Values: User ID or *ALL The user can select the number of day s worth of message log records to

46 46 Administration Main Menu Parameter To Date and Time Description display. This parameter can also be used with the From Date and Time parameter. This will give message log records starting with the From Date and continuing through the number of days specified. This parameter can also be used with the To Date and Time parameter. In this case the number of days would go back in time. The user can select the To Date and Time to display all MFT Platform Server message log records from the MFT Platform Server Message Log file only that are less than or equal to the date and/or time entered. Valid Values: MM/DD/YYYY or TODAY When message logs are displayed the records will be in descending order showing the most recent record first.

47 Administration Main Menu 47 FWRKMSG TIBCO Software Inc. MFT Platform Server QSECOFR 2/321/13 SYSTEM NAME Work With Message Log Screen JOB NAME 14:54:50 Type action, Press Enter: 5=Display Trans Message Message Local Message Act Number Date Time User Text _ I /16/2008 9:55:23 TSS02 <INITIATOR> END OF _ I /16/2008 9:55:22 TSS02 <INITIATOR> Status _ I /16/2008 9:55:22 TSS02 <INITIATOR> Commun _ I /16/2008 9:50:26 TSS01 <INITIATOR> END OF _ I /16/2008 9:50:26 TSS01 <INITIATOR> Status _ R /13/ :57:33 TSS03 <RESPONDER> END OF _ R /13/ :57:32 TSS03 <RESPONDER> Transa _ R /13/ :57:23 TSS02 <RESPONDER> END OF _ R /13/ :57:22 TSS02 <RESPONDER> Transf _ R /13/ :57:21 TSS01 <RESPONDER> Transa _ R /13/ :57:17 TSS01 <RESPONDER> END OF F1=Help F3=Exit F5=Refresh F7=Page Up F8=Page Down F12=Cancel To display the details of a transaction record, type a 5 on the line next to the transaction number and press enter. A screen similar to the one below will be shown: CFWRKMSG TIBCO Software Inc. MFT Platform Server QSECOFR 2/21/13 SYSTEM NAME Work With Message Log Screen DISPLAY Init Trans No...: I Remote IP Address: Message Date...: 02/16/2013 Message Time...: 09:50:26 Transfer Process: FILE Local User...: TSS01 Remote User...: TSS02 Message Text Message...: <INITIATOR> END OF TRANSACTION F1=Help F3=Exit F12=Cancel

48 48 Administration Main Menu Purge Message Log To purge old messages from the system select option 2 for the Purge Message Log screen. From this screen an IBM i user can delete records from the MFT Platform Server for IBM i Message Log file. This panel can also be accessed directly by typing the following command on the command line and pressing the <F4> key: CFPRGMSG Purge Message Log (CFPRGMSG) Type choices, press Enter. Number of Days to Retain Number, *NONE F3=Exit F4=Prompt F5=Refresh F12=Cancel F13=How to use this display F24=More keys Specify in the field available the records that should be saved by setting the number of days to retain the log file. For instance if the current date is the 15th of February and the number of days to retain is specified as 3, records with dates February 13th through February 15th inclusively will be retained. All other records prior to February 13 th will be purged. If you would like to purge all the messages from the system set the value to *NONE. Note: Purging the messages should be done regularly to keep the file size small as part of the general maintenance for this product.