Dear Planning Analytics On Cloud Customers,
To further modernize PAoC, we are transitioning to a centralized file transfer platform that supports both FTPS and SFTP in order to consolidate FTPS services. These updates aim to enhance security while providing the best quality of service.
The new service will be available starting 2025-02-03. Existing FTPS services will remain available for six weeks and will be discontinued on 2025-05-31.
For most users, the changes will be minor. However, certain cases will require action from customers to continue using the service.
For all customers using FTPS or SFTP for file transfers:
The service URL is changing for both protocols to ft-[region].planning-analytics.cloud.ibm.com:
· Existing SFTP URLs (SFTP-[REGION]) will continue to work for at least 3 months (until 2025-08-31). IP addresses will remain the same.
· Existing FTPS URLs ([your environment]) will remain functional for six weeks (until 2025-05-31).
· Additionally, note the domain change from ibmcloud.com to cloud.ibm.com.
Here’s what you need to do:
· Download an updated welcome kit from Planning Analytics Administration.
· Update any automation and processes you may have to use the new URLs.
For customers using FTPS accounts named FileShare:
All FTPS accounts named FileShare will be renamed fs_[your environment]. Passwords will not change.
During the transition period, the existing FileShare user account will remain accessible via your old URL.
Here’s what you need to do:
· Download an updated welcome kit from Planning Analytics Administration.
· Update any automation and processes you may have to use new URLs and the new account names.
For customers using FTPS or SFTP who have provided shared_folder_acls.txt files:
As we move to FTPS and SFTP for managing folder permissions (replacing Windows-based accounts), we will set permissions to match those in your shared_folder_acls.txt file as closely as possible. However, a review may be needed.
Please note, the new system does not support the "inherit" attribute. While we will try to apply inheritance rules to existing folders, any new folders you create will inherit settings from their parent folder. See below for more details.
Here’s what you need to do:
· Review the shared_folder_acls.txt file you have provided to us.
· If the rules include any with inherit=False, review and revise the rules to eliminate this requirement.
o For each rule with inherit=False, create additional rules for any descendant folders that should have different rules.
o Open a case with support and provide the updated shared_folder_acls.txt file.
· Alternatively, if new folders are added after implementation, open a case with support and request that the file transfer settings be re-applied.
Example:
· given this existing ACL list:
|
Path
|
User
|
Permissions
|
Inherited
|
Type
|
|
/
|
fs_env
|
rwd
|
TRUE
|
ALLOW
|
|
/prod
|
fs_env
|
wd
|
FALSE
|
DENY
|
· The fs_env user would be expected to have read-only access to /prod, but read-write-delete access to /prod/db1, /prod/db2, etc.
· Change this list to:
|
Path
|
User
|
Permissions
|
Inherited
|
Type
|
|
/
|
fs_env
|
rwd
|
TRUE
|
ALLOW
|
|
/prod
|
fs_env
|
wd
|
TRUE
|
DENY
|
|
/prod/db1
|
fs_env
|
rwd
|
TRUE
|
ALLOW
|
|
/prod/db2
|
fs_env
|
rwd
|
TRUE
|
ALLOW
|
For customers using SFTP and Cognos Command Center with the SFTP plugin:
Versions of the Cognos Command Center SFTP plugins prior to 10.2.5 use weak encryption ciphers that are no longer supported.
Here’s what you need to do:
· Upgrade immediately to version 10.2.5 Interim Fix 3 (CCC_10.2.5_IF3) or later of the SFTP plugin for Cognos Command Center.
To ensure your transition is smooth and successful, you may reach out to IBM Support.