Index

A

account

local, User Authentication with Public Keys in File

active mode FTP, Tunneling FTP in Active Mode

advice string, Advice String

agent forwarding, The default-settings Element, Secure Shell Tunneling

application tunneling, Secure Shell Tunneling

audit messages, Audit Messages

authentication, Authentication, User Authentication with Public Keys in File

certificate, Server Authentication with Certificates, User Authentication with Certificates
host-based, Host-Based User Authentication
keyboard-interactive, User Authentication with Keyboard-Interactive
PAM, User Authentication with Keyboard-Interactive
password, Using Password Authentication, User Authentication with Passwords, User Authentication with Keyboard-Interactive
public-key, Authenticating Remote Server Hosts, Using Public-Key Authentication, Server Authentication with Public Keys in File, User Authentication with Public Keys in File, Using Public-Key Authentication from Other Hosts to z/OS
RADIUS, User Authentication with Keyboard-Interactive
SAF, CA Certificates Stored in SAF, Server Certificates Stored in SAF, Certificates Stored in SAF
SecurID, User Authentication with Keyboard-Interactive

authentication methods, The default-settings Element, Authentication

authority info access, Server Authentication with Certificates

authorization file, Files

authorized_keys directory, Files

authorized_keys file, Files

B

base-64, Options
basic configuration, Configuring Client Tools

C

CA certificate, The general Element

case-sensitivity, Filename Support, Filename Support

certificate

enrolling, Certificates Stored in File
revoked, Server Authentication with Certificates

certificate authentication

server, The general Element, Server Authentication with Certificates
user, User Authentication with Certificates

certificate revocation list (CRL), The general Element, Server Authentication with Certificates, CA Certificates Stored in File, CA Certificates Stored in SAF

certificate validation, The general Element

certificate viewer, ssh-certview-g3

certification

FIPS 140-2, The general Element

certification authority (CA), The general Element, Server Authentication with Certificates

CertKey, Certificates Stored in File

channel, Secure Shell Tunneling

characters

valid, Filename Support, Filename Support

checkpoint-restart, Enhanced File Transfer Functions, Commands

ciphers, The default-settings Element

client configuration, Configuring Client Tools

client tools, Configuring Client Tools

CMP client, ssh-cmpclient-g3

command-line options, Command-Line Options

command-line tools, Command-Line Tools

components, Product Components

compression, The default-settings Element

configuration file

syntax, Broker Configuration File Syntax

configuration files, Client Configuration Files

Connection Broker, Running Connection Broker, Configuring Client Tools

debugging, Starting Connection Broker in Debug Mode
reconfiguring, Reconfiguring ssh-broker-g3
starting, Starting ssh-broker-g3 Manually under USS
stopping, Stopping ssh-broker-g3

connection profile, The profiles Element

controlling file transfer, Controlling File Transfer, Alternate Methods for Controlling File Transfer

CRL

disabling, The general Element, CA Certificates Stored in File

CRL distribution point, Server Authentication with Certificates

CRL prefetch, The general Element

cryptographic library, The general Element

customer support, Customer Support

D

dataset access, Dataset and HFS File System Access, Dataset and HFS File System Access
DD cards, Dataset Access Using DD Cards
default domain, The general Element
Diffie-Hellman key exchange, Server Authentication with Public Keys in File, Server Authentication with Certificates
digital signature, User Authentication with Public Keys in File
disabling CRL, The general Element, CA Certificates Stored in File
distributing keys, Distributing Public Keys Using the Key Distribution Tool
dns, The filter-engine Element
Document Type Definition (DTD), Broker Configuration File Syntax
documentation, About This Document
documentation conventions, Documentation Conventions
DoD PKI, The general Element
domain user account, Special Considerations with Windows Servers
dynamic tunnels, SOCKS Tunneling

E

editing configuration files, Editing the Configuration Files

egrep syntax, Egrep Syntax

end-point identity check, The general Element

enrolling user certificate, Certificates Stored in File

environment variables, Environment Variables for Client Applications, Environment Variables, Environment Variables, Environment Variables, Environment Variables

error situations, Solving Problem Situations

event log, The logging Element

exclusive-connection, The general Element

exit values

scpg3, Exit Values
sftpg3, Exit Values
sshg3, Exit Values

expired CRL, The general Element

external key viewer, ssh-ekview-g3

F

Federal Information Processing Standard (FIPS), The general Element

file transfer, Secure File Transfer Using SFTP, Using scpg3, Using sftpg3, sftpg3

controlling, Controlling File Transfer, Alternate Methods for Controlling File Transfer

file transfer home, Setting the File Transfer Home Location, Setting the File Transfer Home Location

filename characters, Filename Support, Filename Support

filename support, Filename Support, Filename Support

filter, The filter-engine Element

filter engine, Connection Broker Files, The filter-engine Element

fingerprint, Server Authentication with Public Keys in File, Options

FIPS 140-2 certification, The general Element

firewall, CA Certificates Stored in File, CA Certificates Stored in SAF

forwarding

agent, Secure Shell Tunneling
local, Local Tunnels
remote, Remote Tunnels
X11, Secure Shell Tunneling

FTP active mode, Tunneling FTP in Active Mode

FTP passive mode, Tunneling FTP in Passive Mode

G

Generation Data Group (GDG), Accessing Generation Data Groups (GDG), Accessing Generation Data Groups (GDG)
Generation Data Set (GDS), Accessing Generation Data Groups (GDG), Accessing Generation Data Groups (GDG)
getting started with SSH Tectia client tools, Getting Started
glob patterns, Command Interpretation

H

hashed host key format, Host Key Storage Formats

Hexl, Options

HFS files, Handling MVS Datasets and HFS File System Access, Case-Sensitivity of HFS and MVS Names, Handling MVS Datasets and HFS File System Access, Case-Sensitivity of HFS and MVS Names

HFS Root, Accessing HFS Root

home directory, Setting the File Transfer Home Location, Setting the File Transfer Home Location

host key

hashed format, Host Key Storage Formats
public, Server Authentication with Public Keys in File

host-based authentication, Host-Based User Authentication

hostkeys directory, Files

HTTP proxy URL, The general Element

HTTP repository, Server Authentication with Certificates

library

cryptographic, The general Element

library certification

FIPS 140-2, The general Element

Lightweight Directory Access Protocol (LDAP), Server Authentication with Certificates

local port forwarding, Local Tunnels

local tunnel, Local Tunnels

local user account, User Authentication with Public Keys in File

logging, The logging Element

M

MACs, The default-settings Element
man pages, Command-Line Tools
man-in-the-middle attack, Server Authentication with Public Keys in File, Server Authentication with Certificates
migrated datasets, Migrated Datasets, Migrated Datasets
modifying configuration files, Editing the Configuration Files
MVS, Under MVS
MVS datasets, Handling MVS Datasets and HFS File System Access, Case-Sensitivity of HFS and MVS Names, Handling MVS Datasets and HFS File System Access, Case-Sensitivity of HFS and MVS Names
MVS user prefix, Setting the File Transfer Home Location, Setting the File Transfer Home Location

N

network, The filter-engine Element

notation

path, Filename Support, Filename Support

O

OCSP responders, The general Element
Online Certificate Status Protocol (OCSP), Server Authentication with Certificates
OpenSSH authorized_keys file, Files
OpenSSH keys, Software Provider, Using Keys Generated with OpenSSH, From OpenSSH Client on Unix to SSH Tectia Server on z/OS
OpenSSH known_hosts file, The general Element, Files

P

PAM authentication, User Authentication with Keyboard-Interactive

passive mode FTP, Tunneling FTP in Passive Mode

passphrase, Creating Keys with ssh-keygen-g3 on z/OS

password authentication, Using Password Authentication, User Authentication with Passwords, User Authentication with Keyboard-Interactive

path notation, Filename Support, Filename Support

pattern syntax, Egrep Patterns

PEM encoding, Options

PKCS #11 token, Certificates Stored in File

PKCS #7 package, CA Certificates Stored in File

PKCS#12, Software Provider

PKCS#7, Software Provider

Pluggable Authentication Module (PAM), User Authentication with Keyboard-Interactive

port forwarding, Secure Shell Tunneling

local, Local Tunnels
remote, Remote Tunnels
restricting, Secure Shell Tunneling

private key

user, Creating Keys with ssh-keygen-g3 on z/OS, Certificates Stored in File

problem situations, Solving Problem Situations

proxy rules, The default-settings Element

public key

host, Server Authentication with Public Keys in File
user, Creating Keys with ssh-keygen-g3 on z/OS

public-key authentication, User Authentication with Public Keys in File

server, Authenticating Remote Server Hosts, Server Authentication with Public Keys in File
user, Using Public-Key Authentication, User Authentication with Public Keys in File, Using Public-Key Authentication from Other Hosts to z/OS

R

RADIUS authentication, User Authentication with Keyboard-Interactive

random_seed file, Files

reconfiguring the Connection Broker, Reconfiguring ssh-broker-g3

regex syntax, Egrep Patterns

regular expression (regex), Filename Support, Filename Support, Egrep Syntax

regular expressions, Egrep Patterns

rekey interval, The default-settings Element

related documents, About This Document

remote administration, System Administration

remote environment, The default-settings Element

remote port forwarding, Remote Tunnels

remote tunnel, Remote Tunnels

return values

scpg3, Exit Values
sftpg3, Exit Values
sshg3, Exit Values

revoked certificate, Server Authentication with Certificates

RFC 4253, Options

RFC 4716, Options

rule, The filter-engine Element

running client programs, Running Client Programs

S

SAF authentication

server, z/OS SAF Provider, CA Certificates Stored in SAF, Server Certificates Stored in SAF
user, z/OS SAF Provider, Certificates Stored in SAF

sample files, Unattended File Transfers

SAMPLIB, Unattended File Transfers

SCEP client, ssh-scepclient-g3

scpg3, Running Client Programs, Using scpg3, scpg3

environment variables, Environment Variables
exit values, Exit Values

secure application connectivity, Secure Shell Tunneling

secure copy (SCP), Using scpg3, scpg3

secure file transfer, Secure File Transfer Using SFTP

Secure File Transfer Protocol (SFTP), Using sftpg3, sftpg3

Secure Shell client, Using Other Secure Shell Clients

Secure Shell version 2, sshg3

secure system administration, System Administration

SecurID authentication, User Authentication with Keyboard-Interactive

server authentication with certificates, Server Authentication with Certificates

server authentication with public key, Server Authentication with Public Keys in File

server authentication with SAF keys, CA Certificates Stored in SAF, Server Certificates Stored in SAF

server certificate, Server Authentication with Certificates

SFTP

checkpoint, Enhanced File Transfer Functions, Commands
streaming, Enhanced File Transfer Functions, Commands

sftpg3, Running Client Programs, Using sftpg3, sftpg3

commands, Commands
environment variables, Environment Variables
exit values, Exit Values

smart card, Certificates Stored in File

SOCKS Proxy, Configuring Client Tools

SOCKS server, SOCKS Tunneling

SOCKS server URL, The general Element

SSH Tectia Client, Component Terminology

SSH Tectia Client components, Product Components

SSH Tectia ConnectSecure, Component Terminology

SSH Tectia Server, Component Terminology

SSH Tectia Server for IBM z/OS, Component Terminology

SSH Tectia Server for Linux on IBM System z, Component Terminology

ssh-broker-config.xml, Client Configuration Files

ssh-broker-ctl, Running Connection Broker, ssh-broker-ctl

commands, Commands

ssh-broker-g3, Running Connection Broker, ssh-broker-g3

ssh-certview-g3, ssh-certview-g3

ssh-cmpclient-g3, ssh-cmpclient-g3

ssh-ekview-g3, ssh-ekview-g3

ssh-keydist-g3, Distributing Public Keys Using the Key Distribution Tool, ssh-keydist-g3

ssh-keyfetch, ssh-keyfetch

ssh-keygen-g3, Using Public-Key Authentication, CA Certificates Stored in File, Creating Keys with ssh-keygen-g3 on z/OS, ssh-keygen-g3

ssh-scepclient-g3, ssh-scepclient-g3

ssh-sft-stage, ssh-sft-stage

ssh-socks-proxy, ssh-broker-g3

ssh-socks-proxy-config.xml, Client Configuration Files

SSH2, sshg3

SSH2 keys, Software Provider

SSHBRKR, Running ssh-broker-g3 as a Started Task

SSHENV, Environment Variables for Client Applications

sshg3, Running Client Programs, sshg3

environment variables, Environment Variables
exit values, Exit Values

sshsetenv, Environment Variables for Client Applications

ssh_ftadv_config, Client Configuration Files

STAGE, Staging

staging, Staging

starting the Connection Broker, Starting ssh-broker-g3 Manually under USS

stopping the Connection Broker, Stopping ssh-broker-g3

streaming, Enhanced File Transfer Functions, Commands

strict host key checking, The general Element

support, Customer Support

system log, The logging Element

T

technical support, Customer Support

terminology, Component Terminology

transport distribution, The default-settings Element

troubleshooting, Troubleshooting SSH Tectia

tunnel

local, Local Tunnels
remote, Remote Tunnels

tunneling, Secure Shell Tunneling

applications, SOCKS Tunneling
restricting, Secure Shell Tunneling

U

uploading public keys, Uploading Public Keys from z/OS to Remote Host

user account

domain, Special Considerations with Windows Servers
local, User Authentication with Public Keys in File

user authentication based on host, Host-Based User Authentication

user authentication with certificates, User Authentication with Certificates

user authentication with keyboard-interactive, User Authentication with Keyboard-Interactive

user authentication with password, Using Password Authentication, User Authentication with Passwords

user authentication with public key, Using Public-Key Authentication, User Authentication with Public Keys in File, Using Public-Key Authentication from Other Hosts to z/OS

user authentication with SAF keys, Certificates Stored in SAF

user certificate

enrolling, Certificates Stored in File

user identity, The profiles Element

user key, Uploading Public Keys from z/OS to Remote Host

using secure copy, Using scpg3

using secure file transfer, Using sftpg3

USS, Under USS

USS home directory, Setting the File Transfer Home Location, Setting the File Transfer Home Location

V

valid characters, Filename Support, Filename Support

W

wild card, Command Interpretation
wildcard, Filename Support, Filename Support

X

X.509 certificate, CA Certificates Stored in File, Certificates Stored in File

X.509 certificates, Software Provider

X11 forwarding, The default-settings Element, Secure Shell Tunneling

XML attribute

allow-relay, The profiles Element, The static-tunnels Element
data, The profiles Element
default-domain, The general Element
disable-crls, The general Element
end-point-identity-check, The general Element
file, The profiles Element
gateway-profile, The profiles Element
hash, The profiles Element
http-proxy-url, The general Element
id, The profiles Element
identity-file, The profiles Element
socks-server-url, The general Element
use-expired-crls, The general Element

XML element

accept-unknown-host-keys, The general Element
auth-gssapi, The default-settings Element
auth-hostbased, The default-settings Element
auth-keyboard-interactive, The default-settings Element
auth-password, The default-settings Element
auth-publickey, The default-settings Element
authentication-method, The default-settings Element
authentication-methods, The default-settings Element, The profiles Element
ca-certificate, The general Element
cert-validation, The general Element
cipher, The default-settings Element
ciphers, The default-settings Element, The profiles Element
compression, The default-settings Element, The profiles Element
crl-prefetch, The general Element
crypto-lib, The general Element
default-settings, The default-settings Element
dns, The filter-engine Element
dod-pki, The general Element
environment, The default-settings Element
exclusive-connection, The general Element, The default-settings Element, The profiles Element
filter, The filter-engine Element
filter-engine, The filter-engine Element
forward, The default-settings Element
forwards, The default-settings Element, The profiles Element
general, The general Element
host-key-always-ask, The general Element
hostbased-default-domain, The default-settings Element
hostkey, The profiles Element
identification, The general Element
identity, The profiles Element
idle-timeout, The default-settings Element, The profiles Element
key-store, The general Element
key-stores, The general Element
known-hosts, The general Element
ldap-server, The general Element
local-tunnel, The profiles Element
log-events, The logging Element
logging, The logging Element
mac, The default-settings Element
macs, The default-settings Element, The profiles Element
network, The filter-engine Element
ocsp-responder, The general Element
profile, The profiles Element
profiles, The profiles Element
proxy, The default-settings Element, The profiles Element
rekey, The default-settings Element, The profiles Element
remote-environment, The default-settings Element, The profiles Element
remote-tunnel, The profiles Element
rule, The filter-engine Element
server-authentication-methods, The profiles Element
server-banners, The default-settings Element, The profiles Element
static-tunnels, The static-tunnels Element
strict-host-key-checking, The general Element
transport-distribution, The default-settings Element, The profiles Element
tunnel, The static-tunnels Element
tunnels, The profiles Element
user-identities, The profiles Element
user-keys, The general Element