> There is a requirement that the client must be FTPS enabled to connect to IBM
> site.
> Can i use Self signed certificate for my FTP server ? Or IBM distributes
> certificate to their customer to upload them in our mainframe and trust it ?
If you download from an IBM FTP server to your z/OS,
> So these certificate needs to be connected to the keyring assigned to the
> started owner ID right ?
The certificate authority (CA) root certificate needs to be in a truststore on
z/OS. The acceptable types of truststore depends on the application using it,
but often a SAF keyring is used.
: Re: FTPS for IBM download
[CAUTION: This Email is from outside the Organization. Unless you trust the
sender, Don’t click links or open attachments as it may be a Phishing email,
which can steal your Information and compromise your Computer.]
What he said!
Also: this is not difficult. IBM
I believe you have two choices. You can put it on the keyring configured for
the application (NOT "the owner" -- userids can own multiple keyrings, but
applications in my experience are only configured for one).
Or you can install it owned by CERTAUTH. I believe System SSL (who does the
real wo
What he said!
Also: this is not difficult. IBM should make it clear what root certificate
they require. Make sure you get it right -- not just "a DigiCert root" --
DigiCert has about ten different roots, so get the specific name. The names are
similar -- often differing only by one word or "G3"
Can I spell it out a different way.
Your client can check the validity of the server's certificate, and make
sure it is IBM you are connected to.
To do this, you need a CA certificate matching the IBM server's
certificate. Most machines have a wide selection, and so this should not be
a problem.
Any self signed would also need to be on the keyring - but Self Signed
should never be used outside of a sandpit - so ignore this.
All CA certificates used to validate certificates need to be on the trust
store keyring.
The server's certificate needs to be on the private-key keyring.
Some people
Thanks Kurt
I am not a racf certificate expert
So these certificate needs to be connected to the keyring assigned to the
started owner ID right ?
On Thu, 20 Mar 2025, 17:19 Paul Gilmartin, <
042bfe9c879d-dmarc-requ...@listserv.ua.edu> wrote:
> On Thu, 20 Mar 2025 12:52:57 +, Kurt Quacke
On Thu, 20 Mar 2025 12:52:57 +, Kurt Quackenbush wrote:
>> There is a requirement that the client must be FTPS enabled to connect to
>> IBM site.
>
>What are you tryingoto download, and which IBM server are you trying to
>download from?
>
And is HTTPS or SFTP an alternative?
--
gil
--
Jake Anderson <0655e880aa7d-dmarc-requ...@listserv.ua.edu>
Sent: Thursday, March 20, 2025 08:01
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] FTPS for IBM download
Hello,
There is a requirement that the client must be FTPS enabled to connect to
IBM site.
Can i use Self signed certi
Hello,
There is a requirement that the client must be FTPS enabled to connect to
IBM site.
Can i use Self signed certificate for my FTP server ? Or IBM distributes
certificate to their customer to upload them in our mainframe and trust it ?
how exactly the process works ? I am just new to this a
11 matches
Mail list logo
