SECData (Setting Data Security Protection)

FTP client subcommand

C

Data channel protection level is set to clear. This connection is not secure. This might be used for preencrypted data or nonsensitive data.

S

Data channel protection level is set to safe. When Kerberos is set, this connection is integrity protected.

Note: This is only used for data connection when Kerberos is set to the security authentication.

P

The data channel protection level is set to private. This connection is secure. When Transport Layer Security (TLS) authentication is set, a TLS negotiation between the client and the FTP server must take place before any data is transmitted over the connection. When Kerberos is set, this connection is integrity and confidentiality protected.

1. When no parameter is specified, SECData displays the present value used for setting data security protection.
2. The data protection level is initially set to the value specified by the DTAPROT parameter of the STRTCPFTP CL command when a secure control connection is established with an FTP server.
3. A secure control connection is required to use the SECData subcommand.
4. A PROT server subcommand is issued to the FTP server each time the SECDATA subcommand successfully sets the data protection level.
5. The SECData subcommand sends a PBSZ and a PROT subcommand to the FTP server when setting the data protection level. Also, the SECData subcommand sets a client variable for each successful PROT subcommand. This variable represents the last data protection level (C S or P) accepted by the FTP server. This variable is used to set the data protection level when the SECOpen subcommand opens a secure control connection. This variable can be changed using the LOCSITE DTAPROT option.
6. The parameters 'C' 'S' and 'P' for the SECData subcommand are the same as used by the PROT server subcommand.