Re: Secure FTP.

[Tim Bronski <tim.bronski@xxxxxxxxx>]

Firstly pgp keys and ssh keys are different things. Yes, it is possible 
to use a pgp key for ssh but it's a convoluted and unnecessary process.

If you're doing authentication with keys then you will have to create an 
ssh key locally, either on the iseries or using putty or some other 
product. The key will have two parts and be in two files - one with a 
.pub suffix and one without. The key files will need to exist in the 
home directory for the user that uses them. You will need to send the 
.pub copy to the remote admin. To create the key go into PASE...
call qp2term
Then to create an rsa key:
ssh-keygen -t -rsa
It will then ask you to provide a file name - if you press enter it will 
create the 2 files id_rsa and id_rsa.pub in the .ssh subdirectory of the 
users home directory. With me? It will then ask for a password to 
encrypt the private key. If you intend to script this function just 
press enter to leave the private key unencrypted.

That's the key part setup.

If you want to make your life a little easier you might also want to 
look into downloading the free sftp client from 
www.arpeggiosoftware.com. It's a native, cl scriptable sftp client that 
supports keys and password and has a key manager built in. No need for 
pase or java.

Tim


On 7/11/2013 11:01 PM, Ray_Sprinkle@xxxxxxx wrote:
> Hello everyone.
>
> I'm finding a dirth of information concerning configuring an iSeries to
> perform SFTP.
>
> Particularly, I am having a debate with a colleague, how is the PGP key
> created? From the Midrange-L archives it seems that
> normally you ftp the key from the site you are ftp'ing to and place it in
> a directory on the IFS. And this directory is normally
> named the user profile that is to be used during the SFTP session. Is that
> correct?
>
> Is there a way to create a PGP key myself on the iSeries and then send the
> key to the target site during the setup of this?
>
> Thanks,