Syntax

open [primary={*|local|host-name} [port=broker-port] [user=username [pwd=password]] [codepage=codepage] [{file=filename | xfile=filename [key=key]}] [verserial=serial number|no] [verhost=yes|no|host name]
secondary=host-name [port=broker-port] [user=username [pwd=password]] [codepage=codepage] [{file=filename | [xfile=filename [key=key]}] [verserial=serial number|no] [verhost=yes|no]
[encrypt=yes|no|cipher] [compress=compression-method] [nft=yes|no] [comment=text] [tt=direct|deferred] [minsslprotocol=tls1_0|tls1_2|tls1_3]

Description

The open command opens a UDM transfer session: two-party or three-party.
 

Each transfer session has a primary server and a secondary server. These servers are given logical names (primary and secondary) by the user.

For a two-party transfer session, a UDM Manager acts as the primary server, and its logical name (primary) is set to:

• * or local as the host name, if the logical name of the secondary server is specified.

Optionally, an open command can specify only a secondary server logical name (secondary), which implies a two-party transfer. In this case, the primary server (the UDM Manager) automatically is assigned local as the logical name.

For a three-party transfer session, a UDM Server is the primary server, and its logical name (primary) must be set to host name as the host name.

Each server parameter (primary and secondary) can be followed by one or more of the following parameters that further define the transfer set-up: port, user, pwd, codepage, file or xfile, key, verserial, and verhost. Each of these parameters applies to the server parameter (primary or secondary) that it immediately follows.

• port specifies the port that the broker is accepting requests on to start a UDM server.
• user specifies the user (local to the host on which the server will be running) under which the transfer operation is being carried out
• pwd is the password for the user.

• codepage specifies the codepage that will be used for text translation of transferred data. In addition to codepage (.utt) files supplied by the Universal Agent install, UDM supports codepage values of UTF-8, UTF-16, UTF-16BE (except on AIX), and UTF-16LE.
  
  When specified as the source codepage of a file transfer, the UTF-16 encodings describe the type of encoding - little endian or big endian - the conversion routines can expect to encounter in the input file. When a codepage of UTF-16 is specified the conversion routines will rely on the input file's byte order mark (BOM) or - if no BOM is present - the default encoding of the system on which the input file resides. When a codepage of UTF-16BE or UTF-16LE is specified, the conversion routines expect the input file to be encoded as big endian or little endian, respectively, regardless of what the file's actual encoding is.
  
  When specified as the target codepage of a file transfer, the UTF-16 encodings specify the encoding - little endian or big endian - the output file receives. When a codepage of UTF-16 is specified, the output file receives the default encoding of the system upon which it is written. When a codepage of UTF-16BE or UTF-16LE is specified, the output file is encoded as big endian or little endian, respectively, regardless of the system's native encoding.

• file or xfile parameter specifies a file (plain text or Universal Encrypted text, respectively) that contain *port*, *user*, *pwd*, and/or *codepage* in the format of a UDM command file (see [#file / xfile Parameters Format]). If file or xfileis specified, its values apply to the server (primary or secondary) preceding it in the command. These file or xfilevalues override any values specified by the port, user, pwd, and /or codepage parameters following that server.
• key specifies the encryption key used to decrypt the encrypted file specified by xfile.
• verserial specifies either:
  • <serial number>
    • For a Two-Party Transfer Session: The secondary verserial <serial number> is verified by the UDM Manager (the primary server) against the serial number contained in the secondary UDM Server's Universal Broker X.509 certificate.
    • For a Three-Party Transfer Session: The primary verserial <serial number> is verified by the UDM Manager against the serial number contained in the primary UDM Server's Universal Broker X.509 certificate. The secondary verserial <serial number> is verified by the primary UDM Server against the serial number contained in the secondary UDM Server's Universal Broker X.509 certificate.
  • no
    • For a Two-Party Transfer Session: UDM Manager (the primary server) will not verify the serial number of the UDM Server (the secondary server).
    • For a Three-Party Transfer Session: If the primary verserial is no, the UDM Manager will not verify the serial number of the primary UDM Server. If the secondary verserial is no, the primary UDM Server will not verify the serial number of the secondary UDM Server.
• verhost specifies either:
  • yes
    • For a Two-Party Transfer Session: The secondary verhost <host name> is verified by the UDM Manager (the primary server) against the host name contained in the secondary UDM Server's Universal Broker X.509 certificate.
    • For a Three-Party Transfer Session: The primary verhost <host name> is verified by the UDM Manager against the host names contained in the primary UDM Server's Universal Broker X.509 certificate. The secondary verhost <host name> is verified by the primary UDM Server against the host names contained in the secondary UDM Server's Universal Broker X.509 certificate.
  • no
    
    • For a Two-Party Transfer Session: UDM Manager (the primary server) will not verify the host name of the UDM Server (the secondary server).
    • For a Three-Party Transfer Session: If the primary verhost is no, the UDM Manager will not verify the host name of the primary UDM Server. If the secondary verhost is no, the primary UDM Server will not verify the host name of the secondary UDM Server.
  • <host name>
    • For a Two-Party Transfer Session: The secondary verhost <host name> is verified by the UDM Manager (the primary server) against the host names contained in the secondary UDM Server's Universal Broker X.509 certificate.
    • For a Three-Party Transfer Session: The primary verhost <host name> is verified by the UDM Manager against the host names contained in the primary UDM Server's Universal Broker X.509 certificate. The secondary verhost cannot use <host name>.

The encrypt parameter specifies either:

• yes
  An agreed-upon cipher will be negotiated based on the components data_ssl_cipher_list configuration value.
• no
  NULL-MD5 is used as the encryption method.
• • cipher
    Specific cipher to use as encryption method: AES256-GCM-SHA384,AES256-SHA,AES128-GCM-SHA256,AES128-SHA,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-GCM-SHA256,RC4-SHA,RC4-MD5,DES-CBC3-SHA,NULL-SHA,NULL-SHA256,NULL-MD5. Specifying NULL-NULL as the cipher completely disables SSL/TLS when NULL-NULL also is specified in the UDM Server Data Cipher Lists associated with a transfer.

The compress parameter can have either of the following values:

• yes
  Compression option in the UDM Manager's configuration file is used.
• no
  No compression is required when transferring data. However, compression will be used if the UDM Server DATA_COMPRESSION configuration option is set to yes.
• force
  No compression is used when transferring data, even if the UDM Server DATA_COMPRESSION option is set to yes.
• zlib
  Forces the transfer servers to use ZLIB compression when transferring files.
• hasp
  Forces the transfer servers to use HASP compression.

If compress is not specified, a default value of no is used.
 

The nft parameter specifies whether or not the UDM sessions will be network fault tolerant.
 

The comment parameter specifies a comment for a single session (or overrides a comment specified by the COMMENT option.)

For example: open src=* dst=zos14 comment="Data transfer for account 94882"
 

The tt parameter specifies where codepage translation is performed for files transferred in text mode, thus allowing you to choose which side of the connection will incur the overhead of codepage translation

The tt parameter can have either of the following values:

• direct specifies that codepage translation will be performed in the component sending the file - prior to transmission.
• deferred specifies that codepage translation will be performed in the component receiving the file - after transmission.

If tt is not specified, the translation defaults to direct.

The minsslprotocol parameter specifies the minimum SSL/TLS protocol to be used in both control and data sessions between client and server parties.

The minsslprotocol parameter can have either of the following values:

• tls1_0 specifies that the minimum SSL/TLS protocol is TLS 1.0.
• tls1_2 specifies that the minimum SSL/TLS protocol is TLS 1.2.

• tls1_3 specifies that the minimum SSL/TLS protocol is TLS 1.3.

  TLS 1.3 is NOT currently supported on HP-UX and z/OS

Parameters

Examples

To open a two-party transfer session between two machines, explicitly specifying the primary server:

open primary=* secondary=mvsmachine

To open a two-party transfer session between two machines, not specifying the primary server:

open secondary=mvsmachine

To open a three-party transfer session between two machines:

open primary=ntmachine secondary=mvsmachine

To open a three-party transfer session between two machines with the primary server's options coming from an encrypted configuration file and the secondary server having an authenticate user and changing the codepage for its side of the transfer:

open primary=ntmachine xfile=enc.dat dst=test.bak user=me pwd=mypwd
     codepage=IBM277

To open a three-party transfer session between two machines and verify the name and serial number between the UDM Manager and the primary server's Universal Broker X.509 certificate, as well as between the primary server and the secondary server's Universal Broker X.509 certificate:

open primary=abc port=7887 user=user1 pwd=pwd11 verhost=yes verserial=1234 +
      secondary=def port=7887 user=user2 pwd=pwd2 verhost=yes verserial=5678

To open a two-party transfer session between two machines and verify the host name and serial number of the UDM server's Universal Broker X.509 certificate:

open dst=l64agent port=7887 user=user1 pwd=pwd1 verhost=yes verserial=1234

OR

open src=* port=7887 +
      dst=l64agent port=7887 user=user1 pwd=pwd1 verhost=yes verserial=1234

file / xfile Parameters Format

The parameters in a file or xfile are in the same format as the parameters in a UDM command file, as shown in the following table.