IBM Support

FAQs About GDPR-related Changes to ECuRep and Testcase FTP File Uploads

Question & Answer


Question

Which Data Privacy and Protection related changes were made to ECuRep and Testcase FTP file uploads?
Note: The Frequently Asked Questions (FAQs) in this Knowledge Article are related to and be used with the following blog announcement: "GDPR-related Changes to ECuRep and Testcase FTP File Uploads".

Answer

Frequently Asked Questions & Answers - General

Q. Where can I find detailed instructions on how to ftp documentation?

A. The ECuRep Send Data site has details about the DNS hostnames, ip addresses and FTP protocols. 

Q. How do I get the instructions for obtaining the necessary IDs?

A. You need to get an IBMid by using the create your IBM account function (if you don't already have one).
You will use the IBMid to generate an IBM Support File Transfer ID (required as of 31 August 2022) to upload and download to the ftp servers.  Obtain an IBM Support File Transfer ID by using the File Transfer ID Management app.

High-level steps for using an IBM Support File Transfer ID for authenticating the upload:

Protocol

Browser

Steps

FTPS / SFTP

No


1. Get an IBMid.

2. Authenticate with the IBMid on ECuRep's site and get a Support File Transfer ID/token.

3. Use the generated ID/token to authenticate to upload documentation.

HTTPS

Yes

HTTPS

No

 

Q. Does testcase support all transfer types?

A. Yes, An IBM Support File Transfer ID is needed for all transfer types. Use the File Transfer ID Management app to create a new ID. 

 

Q. Does ECuRep support uploads in a browser?

A. Yes, ECuRep will also support by using an IBM Support File Transfer ID for HTTPS uploads in a browser.

 

Q. How do I know whether I am connecting with FTP or FTPS?


A. On the server reply message, a request for FTP shows:

220 testcase-yellow secure FTP server ready.
EZA1459I NAME (170.225.15.31:WES):
 

A request for FTPS indicates the security method. In this case AUTH-TLS:

220 testcase-yellow secure FTP server ready.
EZA1701I >>> AUTH TLS                                          
234 TLSv1                                                      
EZA2895I Authentication negotiation succeeded
EZA1701I >>> PBSZ 0
200 PBSZ=0
EZA1701I >>> PROT P
200 Command PROT okay.
EZA2906I Data connection protection is private
EZA1459I NAME (170.225.15.31:WES):

Q. Does ECuRep support security/authentication requirements?

A. ECuRep supports security/authentication requirements by using a list of NEW hostnames:

  • ftps.ecurep.ibm.com is used for FTPS; that will support authentication using a Support File Transfer ID starting 24 May 2018
  • sftp.ecurep.ibm.com is used for SFTP; this will also support authentication using a Support File Transfer ID starting 24 May 2018


Q. Do I need anything special to connect to ECuRep with HTTPS?

A. To connect to ECuRep with HTTPS, you need our root certificate in your trust store. That can be downloaded from:

https://dl.cacerts.digicert.com/DigiCertGlobalRootG2.crt

 

Q. Do I need anything special to connect to ECuRep with FTPS?

A. To connect to ECuRep with FTPS, you need our root certificate in your trust store. That can be downloaded from:

https://dl.cacerts.digicert.com/DigiCertGlobalRootG2.crt

 

Q. Do I need anything special to connect to Testcase with SSL?

A. To connect to Testcase with SSL, you need our root certificate in your trust store. That can be downloaded from:

https://dl.cacerts.digicert.com/DigiCertGlobalRootCA.crt

 

Q. We utilize IBM Blue Diamond Enhanced Secure Support. Do I need to make any changes for Data Privacy and Protection?

A. If you are a Blue Diamond account, no changes are required.

 

Q. Does this change impact SR or CSP (case) attachments?

A. There is no change required for attaching files using SR or CSP (case).

 

 

Frequently Asked Questions & Answers - IBM Z specific

 

Q. How do I set up FTPS on z/OS?

A. You'll find the steps in this IBM Knowledge Center document: "Steps for customizing the FTP client for TLS"

 

Q. How can I test my connection to ECuRep or testcase to ensure things are configured correctly?

A. To test the new process, below is sample Job Control Language (JCL) that will allow you to confirm FTPS, the IBM Support File Transfer ID, and password connect. It works the same for both testcase.boulder.ibm.com and ftps.ecurep.ibm.com. For security, your credentials can be in a separate dataset catenated in this manner so they do not appear in the log.

Note: This is just one method we are sharing as an example for handling the IBM Support File Transfer ID and password, but there are other techniques (documented in TCP/IP manuals) that use the userid.NETRC dataset to manage ID/Password for different hosts.

//JOBNAME JOB ....
//******************************************************
//* >>>> use 'caps off' when editing <<<<<
//* Sample GET to test FTPS
//* //SYSFTPD DD statement is the FTP.DATA file with TLS (FTPS)
//* //INPUT DD Dataset hlq.FTPIFNO(IBMXFRID) has IBM Transfer id
//*   and password.
//******************************************************
//FTP    EXEC PGM=FTP,REGION=5000K,
//            PARM='testcase.boulder.ibm.com (EXIT'
//SYSFTPD  DD DISP=SHR,DSN=SYS1.TCPPARMS(FTPCDATA)
//SYSPRINT DD SYSOUT=*
//OUTPUT   DD SYSOUT=*
//INPUT    DD DISP=SHR,DSN=&SYSUID..FTPINFO(IBMXFRID)     
//         DD *
locsite recfm=fb lrecl=80                                 
cd /fromibm/mvs
get samp.txt 'WES.SAMP.TXT.BACK' (rep
quit
/*

Dataset referenced above as //INPUT DD:  UserHLQ.FTPINFO(IBMXFRID)

; Lines beginning with semicolon (;) treated as comment
; - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
; userid next line
E-IbMxfRUser
; password next line
dDyx-XrqH-1LdA-L6Rp-MFgp

JOB output:

EZA1736I FTP 170.225.15.31 (EXIT
EZY2640I Using dd:SYSFTPD=SYS1.TCPPARMS(FTPCDATA) for local site configuration
EZA1450I IBM FTP CS V2R3
EZA1772I FTP: EXIT has been set.
EZA1554I Connecting to:   170.225.15.31 port: 21.
220-IBM's internal systems must only be used for conducting IBM's
220-business or for purposes authorized by IBM management.
220-
220-Use is subject to audit at any time by IBM management.
220-
220-Before using this service for technical support purposes, refer
220-to the terms of use for Exchanging Diagnostic Data with IBM
220-(see http://www.ibm.com/support/pages/node/739283).
220-
220-Important changes are coming on May 24, 2018 due to GDPR
220-see http://public.dhe.ibm.com/SupportFileTransferDetails.html
220-
220 testcase-yellow secure FTP server ready.
EZA1701I >>> AUTH TLS                                          
234 TLSv1                                                      
EZA2895I Authentication negotiation succeeded
EZA1701I >>> PBSZ 0
200 PBSZ=0
EZA1701I >>> PROT P
200 Command PROT okay.
EZA2906I Data connection protection is private
EZA1459I NAME (170.225.15.31:WES):
EZA1701I >>> USER E-IbMxfRUser                                
331 Password required for E-IbMxfRUser.
EZA1789I PASSWORD:                                             
EZA1701I >>> PASS                                             
230 virtual user E-IbMxfRUser logged in from /129.42.208.176:17386.
EZA1460I Command:
EZA1736I locsite recfm=fb lrecl=80                             
EZA2280W BLOCKSIze must be a multiple of LRecl for FB data sets. BLOCKSIze set
EZA1460I Command:
EZA1736I cd /fromibm/mvs
EZA1701I >>> CWD /fromibm/mvs
250 CWD command successful.
EZA1460I Command:
EZA1736I get samp.txt 'WES.SAMP.TXT.BACK' (rep
EZA1701I >>> EPSV
229 Entering Passive Mode (|||65363|)
EZA1701I >>> RETR samp.txt
150 Opening ASCII mode data connection for samp.txt.
226 Transfer complete.
EZA1617I 902 bytes transferred in 0.005 seconds.  Transfer rate 180.40 Kbytes/s
EZA1460I Command:
EZA1736I quit
EZA1701I >>> QUIT
221 Goodbye.

[{"Business Unit":{"code":"BU051","label":"N\/A"},"Product":{"code":"SUPPORT","label":"IBM Worldwide Support"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB33","label":"N\/A"}}]

Document Information

Modified date:
11 May 2022

UID

ibm10749243

Page Feedback