Setup for Secure FTP

jerryte · Posted: Thu Jun 07, 2012 2:54 am

I am running an FTP client on the mainframe using batch jcl. I have the jcl and parms configured to use secure FTP ie. "-a TLS". It fails on an authentication error.

Question: for secure FTP do I need two ports to be open on the destination server? There is one port open but it doesn't seem to work.

Which IBM manual and chapter can I read to understand how this is configured?

Robert Sample · Posted: Thu Jun 07, 2012 4:54 am

Try the Communication Server bookshelf, IP Configuration Guide manual, section 2.3.10.3 Steps for customizing the FTP client for TLS -- as well as Appendix B, TLS/SSL Security. However, be aware that TLS requires additional steps, such as setting up a key ring, acquiring a server certificate, etc. and can get pretty complex to set up.

jerryte · Posted: Fri Jun 08, 2012 2:28 am

Thanks. I had a look but it is outside my expertise.

dick scherrer · Posted: Fri Jun 08, 2012 3:15 am

Hello,

One of my clients tried for quite a while and were not successful getting secure ftp to run on their mainframe. In order to meet some Federal requirement, they dedicated a pc to this and discontinued working with the mainframe attempt.

I don't know if this would help you or not.

I only heard about it in a few meetings and might be able to find out which secure ftp they used on the pc. I'm fairly sure they only needed a secure client, not a server.

Robert Sample · Posted: Fri Jun 08, 2012 3:51 am

Using secure FTP is not merely a matter of changing which port you use in your FTP and a few parameter changes. Installing secure FTP requires a change in the infrastructure since the approach is different, and usually that means some management attention is needed as well to ensure that things get done differently.