IBM Z and LinuxONE IBM Z

IBM Z

The enterprise platform for mission-critical applications brings next-level data privacy, security, and resiliency to your hybrid multicloud.


#Servers
#IBMZ
#Enterpriseserver
 View Only
  • 1.  Configuring FTP server on z/OS to use SSL?

    Posted 06/14/26 11:44 PM

    The company I work for has been acquired recently and I am moving my work to a new company laptop.

    I have been transferring files using FTP and this no longer works. I want to enable SFTP rather than FTP. Is this east to do? I assume I will need to modify one of the TCP configurations or is it as simple as starting something other than FTPSERVE? 



    ------------------------------
    Michael Taylor
    Chief/Principal Development Architect
    Informatica Australia Pty Ltd
    Canberra ACT
    ------------------------------


  • 2.  RE: Configuring FTP server on z/OS to use SSL?

    Posted 06/15/26 01:34 AM

    Michael, 

    If you are able to connect to USS on z/OS using SSH (PuTTY or equivalent for Mac) then you can just point your SFTP to the same port as SSH (22 by default). You won't notice the difference and you will already have a secured transmission of files. 

    If you use a client like Filezilla, you can move datasets in z/OS as well as USS files. 
    If you use the command line, you need to use SCP

    Hope this helps. 

    D.



    ------------------------------
    Diego Cardalliaguet
    IBM Data&AI zStack Leader for EMEA
    IBM
    ------------------------------



  • 3.  RE: Configuring FTP server on z/OS to use SSL?

    Posted 06/15/26 08:19 PM

    Thanks Diego,

    SSH is enabled and I am able to connect using SFTP and SCP with WinSCP. 

    I need to figure out FTPS or some way to transfer XMIT format datasets - maybe the omvs USS command can handle that.



    ------------------------------
    Michael Taylor
    Chief/Principal Development Architect
    Informatica Australia Pty Ltd
    Canberra ACT
    ------------------------------



  • 4.  RE: Configuring FTP server on z/OS to use SSL?

    Posted 06/15/26 03:06 AM

    For sftp you will need to start the OpenSSH-daemon. But sftp only works with USS-files (unless you have the Data Set File System active).

    As an alternative you can use FTPS, which is TLS-secured FTP. This works just like the traditional FTP.






  • 5.  RE: Configuring FTP server on z/OS to use SSL?

    Posted 06/15/26 08:59 AM

    The terminology is terribly confusing.

    SFTP is a fie transfer protocol as an extension to SSH. It transfers files, of course, but it is quite different in every little detail from traditional FTP. The core implementation supports only UNIX files, but there is an excellent enhancement that supports traditional data sets.

    FTPS is traditional FTP over the TLS (formerly SSL) protocol. It is exactly the FTP that you are familiar with, but you have to go through the whole certificate drill first.

    Hope this helps,



    ------------------------------
    Charles Mills
    ------------------------------



  • 6.  RE: Configuring FTP server on z/OS to use SSL?

    Posted 06/15/26 08:10 AM
      |   view attached

    I have uploaded an IBM presentation about FTP.  Slide 27 starts the conversation about Security.



    ------------------------------
    Keith Hays
    ------------------------------



  • 7.  RE: Configuring FTP server on z/OS to use SSL?

    Posted 06/15/26 09:53 PM

    Thanks Keith,

    I will see if IBM support can set up FTPS access for me before trying to configure it myself! I have found the PROCLIBs and TCPIP config if I need to try it myself.

    I do have SFTP and SCP working so am just missing the ability to upload and download XMIT datasets.

    Regards,

    Mick



    ------------------------------
    Michael Taylor
    Chief/Principal Development Architect
    Informatica Australia Pty Ltd
    Canberra ACT
    ------------------------------