Previous Topic: Configuring SSL FTPNext Topic: How to Configure SSL FTP Using a Generated Certificate

Setting Up and Running FTP Workload › Configuring SSL FTP › Configure SSL FTP Using the Default Certificates and Settings

Configure SSL FTP Using the Default Certificates and Settings

The default certificates and settings provided during the agent installation let you set up SSL FTP without generating your own certificates and settings.

To set up SSL FTP using the default certificates and settings

  1. Ensure that the following parameter is defined in the QIBM/ProdData/Java400/jdk14/lib/security/java.security file on your i5/OS operating system: 
    security.overridePropertiesFile=true

    The JVM uses the customized java.security file that is installed with the agent. This value allows the JVM to use the java.security provided with the agent for its own communications, but does not affect other instances of the JVM for other applications on the i5/OS system. Without defining this property the i5/OS agent will not be able to use SSL.

  2. In the SSL FTP server directory, export the certificate used by the SSL FTP server, for example 
    jre\bin\keytool -export -alias agent -file key.cer -keystore serverkeystore

    You are prompted for a password. The default password is cyberuser.

    Note: You require the alias “agent” to ensure you use the certificate provided by the agent.

  3. Copy the created file, in this case, key.cer, to the SSL FTP client directory if it is different from the server directory.
  4. Import the created file, in this case, key.cer, into the truststore file supplied by Sun (cacerts), for example 
    D:\agent\R6SP2>jre\bin\keytool -import -file key.cer -keystore cacerts
Enter keystore password: changeit
Owner: CN=cyberuser, OU=ESP System Agent, O=Cyber, L=Markham, ST=Ont, C=CA
Issuer: CN=cyberuser, OU=ESP System Agent, O=Cyber, L=Markham, ST=Ont, C=CA
Serial number: 4152d5dc
Valid from: Thu Apr 21 09:55:40 EDT 2005 until: Mon Jun 05 09:55:40 EDT 2006
Certificate fingerprints:
MD5: 74:F2:17:20:B6:B0:10:AE:AC:88:9A:BA:AA:3A:6D:73
SHA1:4C:88:B6:39:64:65:98:AD:3E:1E:33:05:12:13:9C:4A:F4:4E:E7
:FA
Trust this certificate? [no]: yes
Certificate was added to keystore
  5. Start the agent acting as an FTP server.

    Note: If another agent acts as an FTP client, start that agent as well.

  6. Run a test upload and download job to verify the setup.