Contents 2
Getting Started 9
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Getting Internet Server Transfers Working 10
Creating a Transfer User 10
Creating a Server Definition 11
Retrieving Keys From Target Servers 12
Creating a Transfer Definition 12
Performing a File Transfer 13
Viewing File Transfer History 14
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Adding Server Definitions 15
Server Types Supported by MFT 15
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Viewing Audit Records 38
Configuring and Starting MFT Transfer Services 40
Configuring and Starting the SSH Service 41
Configuring and Starting the FTP Service 43
Configuring and Starting the Platform Server Service 47
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring PGP 51
How PGP Works 51
When to Use PGP? 52
Creating a PGP System Key 53
Configuring the Public Key: Client Sends or Receives PGP-Encrypted Data 55
Configuring the Public Key: Client Sends or Receives PGP-Encrypted Data With
Target Server 56
Client Sends PGP-Encrypted Data to MFT Internet Server 57
Client Receives PGP-Encrypted Data from MFT Internet Server 58
MFT Internet Server Sends PGP-Encrypted Data to MFT Internet Server 59
MFT Internet Server Receives PGP-encrypted Data from a Target Server 60
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring MFT for Key or Certificate Authentication 62
Incoming HTTPS Client Requests Certificate Authentication 63
Configuring the MFT Server for HTTPS Certificate Authentication 63
Configuring the MFT Server to Allow or Require HTTPS Certificate Authentication 65
Incoming FTPS Client Requests Certificate Authentication 67
Configuring the MFT Server to Allow or Require FTPS Certificate Authentication 68
Incoming SSH or SFTP Client Requests Key or Certificate Authentication 72
Configuring the MFT Server to Allow or Require SFTP Key Authentication 72
Incoming Platform Server Client Request Certificate 76
Saving the MFT Platform Server Public Certificate in the Trusted Authority File 77
Creating a Platform Server Keypair 77
Configuring the MFT Server to Allow or Require Platform Server Authentication 78
Authenticating Outgoing Certificate to Target HTTPS Server 82
Authenticating Outgoing Certificate to Target FTPS Server 83
Authenticating Outgoing Key or Certificate to Target SFTP Server 84
Authenticating Outgoing Certificate to Target Platform Server 86
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Creating and Using Alerts 89
Login Alerts 91
Transfer Non-Event Alerts 91
Adding a Transfer Non-Event Alert 91
Create a Scheduler Job Type: Non-Event Transfer Alert 92
Transfer Event Alerts 94
Adding a Transfer Non-Event Alert 94
Collecting Platform Server Transfer Audit Records 95
Configuring Platform Server 95
Configuring Command Center 96
Configuring Server Definition to Turn Collection On 96
Configuring Command Center Collection Service 97
Start or Restart Command Center Collection Service 99
Viewing Platform Server Audit Records 99
Polling Platform Servers for Audit Record Inquiry 100
Diagnosing Problems 100
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Managing Platform Servers 102
Configuring Command Center to Support Platform Server Configuration 103
Configuring Platform Server Definitions 104
Performing Platform Server Node Configuration 105
Managing and Updating Platform Server Nodes 106
Executing Platform Server Transfers 108
Configuring Command Center and Platform Server 109
Configuring Platform Server Definitions 110
Adding and Executing Platform Server Transfers 111
Credentials and Security Properties 112
Updating and Executing Platform Transfer 114
Executing Platform Transfers 115
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
FileShare and Mailbox 119
Creating PGP System Key 120
Creating Repository Server Definition 121
Associating PGP Public Key with Server Definition 124
Updating the Global Configuration 125
Updating the FileShare Configuration 127
Updating User Definition 128
Test the Mailbox Browser 129
Testing the FileShare Browser 131
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configure and Start the AS2 Transfers 133
Configuring MFT AS2 Transfer Server 134
Creating AS2 System Key to Decrypt Data 135
Creating User Definition for Incoming AS2 Requests 136
Server Definition for Incoming and Outgoing AS2 Requests 137
Creating Server Definition for Incoming and Outgoing AS2 Requests 138
Creating Transfer Definitions for Incoming and Outgoing AS2 Requests 140
Information for AS2 Transfers 143
Executing AS2 Transfers 144
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Using the MFT Scheduler 146
Configuring and Starting Command Center Scheduler 147
Calendars 148
Creating Exclusion Calendar 148
Creating Inclusion Calendar 149
Scheduler Jobs 150
Creating Scheduler Jobs 151
Schedule Triggers 155
Debugging Scheduler Jobs 156
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Delegated Administration 157
Creating Departments 158
Adding Users to Departments 159
Managing Other Resources 161
Viewing Resources 162
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring and Managing DNI Daemons 163
Installing DNI 164
Starting the DNI Daemon 165
Configuring Command Center to Support DNI Management 166
Managing DNI Daemons 167
Generating Templates 169
Using DNI to Send and Receive files to Internet Server Partners 172
File Transfer Initiated by pDNI to Target SSH Server 173
Configure the Internet Server Platform Server Service and Start the Platform
Server Service 174
Configuring a Server Definition to Define the Connectivity and Credentials for
Target SSH Server 174
Creating a User Definition for Incoming Client Request 175
Configuring Platform Server Definitions to Connect to Internet Server 176
Create Transfer Definition for Defined User and Server Definitions 177
Creating and Configuring the pDNI Template 179
Starting pDNI Template 181
Receiving Files from Target SSH Servers 183
Configure the Internet Server Platform Server Service and Start the Platform
Server Service 184
Configuring a Server Definition to Define the Connectivity and Credentials for
Target SSH Server. 185
Creating a User Definition for Incoming Client Request 186
Configuring Platform Server to Connect to Internet Server 186
Create Transfer Definition for Defined User and Server Definitions 188
Creating and Configuring the pDNI Template 189
Starting pDNI Template 191
Verifying the pDNI Template is Transferring Files 192
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring MFT for LDAP Authentication 194
Defining LDAP Authenticators 195
Testing the LDAP Authenticator 199
Syncing LDAP to Database 200
Debug LDAP Problems 201
Sync Users at Login 201
LDAP and SSO (Single SignOn) 202
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring Single SignOn support using OIDC (OpenID Connect) 203
Constructing MFT OIDC Redirect URL 204
TIBCO® Managed File Transfer Internet Server Quick Start Guide
7 | Contents
Configuring the OIDC Authentication Server 205
Adding the OIDC Provider 205
Configuring the OIDC Information for Internet Server and Command Center
Instances 206
Testing the OIDC Log In 208
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring OFTP2 Transfers 209
Creating OFTP2 System Keys 212
Configuring MFT OFTP2 Transfer Server 214
Create a User Definition for incoming OFTP2 Requests 215
Create a Server Definition for Incoming and Outgoing OFTP2 Requests 216
Create Transfer definitions for Incoming and Outgoing OFTP2 Requests 222
Starting OFTP2 Service 225
Send Information about the MFT OFTP2 Environment to OFTP2 Transfer Partner225
Executing OFTP2 Transfers 226
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring MFT for SAML SSO 228
Creating SAML Private Keys 229
Importing SAML Identity Provider Metadata 230
Configuring SAML Service Provider Metadata 231
Generating SAML Service Provider Metadata 233
Sending SAML Service Provider Metadata to the Identity Provider 234
Restarting the MFT Server 234
Updating MFT Shortcuts 234
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Diagnosing and Debugging Problems 236
Dashboard 241
Active Transfers 243
MFT Tracing 245
Login Tracing 245
SSH Tracing 246
JMS Tracing 247
MFT Tracing 247
Other Types of Tracing 249
Common Debugging Scenarios 249
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Using REST calls to configure Internet Server and Command Center 261
Supported Admin and Command Center REST Calls 261
Documentation on REST Calls 263
Format of the REST Call 264
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuring and Using JMS 267
JMS Support Overview 267
Command Center 267
Supported JMS Software 268
Installing TIBCO EMS Jar Files 269
Configuring JMS On Command Center 269
Testing JMS Connections 271
Starting the JMS Service 272
Using JMS on Command Center and Internet Server 273
Configuring Alerts to Send JMS Messages 273
Configuring JMS Servers and Transfers 274
Initiating Transfers to a JMS Queue 277
-----------------------------------------------------------------------------------------------------------------------------------------------------------------
TIBCO Documentation and Support Services 278
Legal and Third-Party Notices 280