113 lines
6.8 KiB
HTML
113 lines
6.8 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="topic" />
|
||
|
|
<meta name="DC.Title" content="Scenario: Secure File Transfer Protocol with Secure Sockets Layer" />
|
||
|
|
<meta name="abstract" content="Use Secure Sockets Layer (SSL) to secure data being transferred to your partner company." />
|
||
|
|
<meta name="description" content="Use Secure Sockets Layer (SSL) to secure data being transferred to your partner company." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqscenarioparent.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqscenariossldetails.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../rzahu/rzahudcmintaccessscen.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqtlsssl.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../rzahu/rzahurzahu437completenewstore.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../rzahu/rzahurzahu66adcmstart.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzaiqscenariossl" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Scenario: Secure File Transfer Protocol with Secure Sockets Layer</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzaiqscenariossl"><a name="rzaiqscenariossl"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Scenario: Secure File Transfer Protocol with Secure Sockets Layer</h1>
|
||
|
|
<div><p>Use Secure Sockets Layer (SSL) to secure data being transferred
|
||
|
|
to your partner company.</p>
|
||
|
|
<div class="section"><h4 class="sectiontitle">Situation</h4><p>Suppose that you work
|
||
|
|
for MyCo, a company that researches startup companies and sells the research
|
||
|
|
to companies in the investment planning industry. One such company, TheirCo,
|
||
|
|
needs the services that MyCo provides, and would like to receive research
|
||
|
|
reports through File Transfer Protocol (FTP). MyCo has always ensured the
|
||
|
|
privacy and security of the data it disperses to its customers--whatever the
|
||
|
|
format. In this case, MyCo needs SSL-secured FTP sessions with TheirCo.</p>
|
||
|
|
</div>
|
||
|
|
<div class="section" id="rzaiqscenariossl__objective"><a name="rzaiqscenariossl__objective"><!-- --></a><h4 class="sectiontitle">Objectives</h4><p>The following items are
|
||
|
|
your objectives in this scenario:</p>
|
||
|
|
<ul><li>Create and operate a local Certificate Authority on the MyCo iSeries™ server</li>
|
||
|
|
<li>Enable SSL for MyCo's FTP server</li>
|
||
|
|
<li>Export a copy of MyCo's local CA certificate to a file</li>
|
||
|
|
<li>Create a *SYSTEM certificate store on TheirCo's server</li>
|
||
|
|
<li>Import MyCo's local CA certificate into TheirCo's *SYSTEM certificate
|
||
|
|
store</li>
|
||
|
|
<li>Specify MyCo's local CA as a trusted CA for TheirCo's FTP client</li>
|
||
|
|
</ul>
|
||
|
|
</div>
|
||
|
|
<div class="section" id="rzaiqscenariossl__prereq"><a name="rzaiqscenariossl__prereq"><!-- --></a><h4 class="sectiontitle">Prerequisites</h4><p><strong>MyCo</strong></p>
|
||
|
|
<ul><li>Has an iSeries server that is running on OS/400<sup>®</sup> V5R1
|
||
|
|
or later of i5/OS™ operating
|
||
|
|
system.</li>
|
||
|
|
<li>Has the V5R1 or later TCP/IP Connectivity Utilities (5722-TC1) installed
|
||
|
|
on the iSeries server.</li>
|
||
|
|
<li>Has the Cryptographic Access Provider 128-bit for iSeries server (5722-AC3) installed on
|
||
|
|
their iSeries server.</li>
|
||
|
|
<li>Has the IBM<sup>®</sup> Digital
|
||
|
|
Certificate Manager (DCM) (5722-SS1 option 34) installed on the iSeries server.</li>
|
||
|
|
<li>Has the IBM HTTP
|
||
|
|
Server (5722-DG1) installed on the iSeries server.</li>
|
||
|
|
<li>Uses certificates to protect access to public applications and resources.</li>
|
||
|
|
</ul>
|
||
|
|
<p><strong>TheirCo</strong></p>
|
||
|
|
<ul><li>Has an iSeries server that is running OS/400 V5R2
|
||
|
|
or later of the operating system.</li>
|
||
|
|
<li>Has the V5R2 TCP/IP Connectivity Utilities (5722-TC1) installed on the iSeries server.</li>
|
||
|
|
<li>Has the Cryptographic Access Provider 128-bit for iSeries server (5722-AC3) installed on
|
||
|
|
their iSeries server.</li>
|
||
|
|
<li>Has the IBM Digital
|
||
|
|
Certificate Manager (5722-SS1 option 34) installed on the iSeries server.</li>
|
||
|
|
<li>Has the IBM HTTP
|
||
|
|
Server (5722-DG1) installed on the iSeries server.</li>
|
||
|
|
<li>Uses an i5/OS operating system with a TCP/IP FTP client for
|
||
|
|
FTP sessions.</li>
|
||
|
|
</ul>
|
||
|
|
</div>
|
||
|
|
<div class="section" id="rzaiqscenariossl__details"><a name="rzaiqscenariossl__details"><!-- --></a><h4 class="sectiontitle">Details</h4><p>TheirCo
|
||
|
|
uses an i5/OS operating
|
||
|
|
system with a FTP client to request a secure FTP file transfer from MyCo's
|
||
|
|
FTP server. The server is authenticated. TheirCo receives financial reports
|
||
|
|
from MyCo by using an SSL-secured FTP session.</p>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<ul class="ullinks">
|
||
|
|
<li class="ulchildlink"><strong><a href="rzaiqscenariossldetails.htm">Configuration details</a></strong><br />
|
||
|
|
In order to secure File Transfer Protocol (FTP) with Secure Sockets Layer (SSL), you need to configure the server.</li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaiqscenarioparent.htm" title="Read scenarios to understand how File Transfer Protocol (FTP) is configured and used.">Scenarios: File Transfer Protocol</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
||
|
|
<div><a href="rzaiqtlsssl.htm" title="You can use Transport Layer Security (TLS) or Secure Sockets Layer (SSL) connections to encrypt data transferred over File Transfer Protocol (FTP) control and data connections.">Secure the FTP client with Transport Layer Security or Secure Socket Layer</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="reltasks"><strong>Related tasks</strong><br />
|
||
|
|
<div><a href="../rzahu/rzahurzahu437completenewstore.htm">Use a public certificate</a></div>
|
||
|
|
<div><a href="../rzahu/rzahurzahu66adcmstart.htm">Start DCM</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relinfo"><strong>Related information</strong><br />
|
||
|
|
<div><a href="../rzahu/rzahudcmintaccessscen.htm">Scenario: Use certificates to protect access to public applications and resources</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|