Transfer CFT 3.6 Users Guide Save PDF Selected topic Selected topic and subtopics All content Axway AMPLIFY Transfer CFT 3.6 Release Notes New features and enhancements Platform features Limitations Prerequisites Deprecated features Discontinued support Documentation Support services New features and enhancements This section lists new features and product enhancements added since the last major Transfer CFT release. Major evolutions File transfer protocol SFTP is now available on Transfer CFT HP NonStop exclusively for OSS files. Added SFTP support when using Transfer CFT with Secure Relay. File storage Support for CEPH storage. Transfer CFT can read and write objects to the Ceph Storage Cluster using the Ceph Object Gateway and the S3 compatible API. Integration/standarization Support for SAML 2.0 as an Identity Provides (IdP) with Transfer CFT installations enables Single Sign-On (SSO) for z/OS, in addition to Unix, Windows, and HP NonStop. Added a folder monitoring option that allows you to access files on the behalf of a specific user (USERID). Available on Unix and Windows You can automatically move a file to a specified directory following a successful file transfer either with or without folder monitoring (FACTION=ARCHIVE). User Interface and REST API updates New REST API security requests (PKI) for managing certificates, entities, and keys. Manage hosts and nodes using REST APIs. Additional UI functionalities including a landing page dashboard, node administration, and security features (PKI) such as managing certificates, entities, and keys. Security Added Brute force protection for logging on the UI, REST API, and Web services (available on Unix, IBM i, HP NonStop, and Windows). Support passphrase of up to 32 characters for login connections with the Copilot server (UI, REST API) for Transfer CFT IBM i. Added support for 4096-bit key for certificates generated during registration with Central Governance. Miscellaneous Support the AMPLIFY Edge Agent for usage tracking. Improved overall SFTP implementations so that there are now SecureTransport metadata extensions for Sentinel Monitoring, and an increased PART ID field of up to 64 characters. Minor evolutions and enhancements The workingdir parameter is available for SEND and RECV commands. Added an alert mechanism for the Transfer CFT communication media file (CFTCOM) to indicate that the COM is nearing its threshold. Extended RCVALLER to include additional file-access type errors. Enhanced the CLEARCMD command so that INDEX is optional and you can use a wildcard in the JOBNAME. Added the SORTBY parameter for the DISPLAY and LISTCAT commands. Added filtering using the ROOTCID parameter for the LISTPKI and PKIEXT commands. Symbolic link support for an installation directory path. Windows Details and UNIX Password encryption for silent file installations. VSAM component suffix parameter on Transfer CFT z/OS. Removed the dependency to Xerces XML library. Added ability to enable/disable the PassPort AM persistent cache daemon (CFTSXPAM). Note Refer to the Transfer CFT Changelog for links to details on new features and evolutions. Platform features The table below lists the available Transfer CFT 3.6 features according to the version and operating system where they were introduced. Function OS Windows UNIX z/OS IBM i HP NS OpenVMS Flow Manager 3.3.2 3.3.2 3.3.2 3.3.2 3.3.2 - Flow Manager SaaS 3.6 3.6 3.6 3.6 3.6 - Using tracking with Edge Agent 3.5 3.5 3.5 3.5 3.5 3.5 SAML 3.5 3.5 3.6 3.6 SP1 3.5 - REST API 3.2.4 3.2.4 3.2.4 3.2.4 3.2.4 - New browser-based user interface 3.3.2 3.3.2 3.3.2 3.3.2 3.3.2 - Central Governance management 3.1.3 3.1.3 3.1.3 3.1.3 3.2.4 - Folder monitoring 3.1.2 3.1.2 3.1.34 3.1.34 3.2.4 3.1.3 Secure Relay 3.1.2 3.1.2 3.1.3 3.1.3 Not Supported - Multi-node architecture 3.0.1 3.0.11 3.0.1 - Not Supported 3.0.1 TrustedFile (PGP S-MIME CMS) 3.0.13 3.0.11 3.0.1 - Not Supported - PassPort AM 2.7.1 2.7.11 3.0.1 3.0.1 3.2.4 2.7.1 SFTP 3.4 3.4 5 3.5 6 - 3.66 - IPv6 2.7.1 2.7.11 2.7.1 2.7.1 Limitation 2.7.1 pTCP 2.7.1 2.7.11 - - Not Supported - UDT (excluding multi-node) 2.7.1 2.7.12 - - Not Supported - SOCKS 2.7.1 2.7.1 3.0.1 2.7.1 Limitation 2.7.1 Heartbeat functionality 2.7.1 2.7.1 2.7.1 2.7.1 3.2.4 2.7.1 Bandwidth control 3.0.1 3.0.1 3.0.1 3.0.1 Limitation 3.0.1 System users (USERCTRL) 2.7.0 2.6.2 3.2.2 3.1.3 Not Supported - 1Enabled for all UNIX except SCO, UnixWare, IRIX, Tru64. 2 Enabled only for Linux-x86-32, Linux-x86-64, Linux-ia64-64. 3Enabled for versions 3.0.1 to 3.3.2 on Windows 32-bit systems. As of Transfer CFT 3.4, Trusted File is supported on Windows 64-bit systems. 4Limited to USS (z/OS) and IFS (IBM i) systems. On IBM i, native files folder monitoring is available for Transfer CFT 3.3.2 SP2 and higher. 5Available on AIX, HPUX ia64, Linux, Solaris, Windows 6For UNIX type files only User interface comparison Functionality Central Governance (with Sentinel) New user interface (Browser) Former user interface(Copilot Java Web Start application) Administration X X X Configuration X* X X Monitor transfers - X X Manage transfers - X X Monitor the log X X X Manage certificates X X X End-to-end monitoring X - - Administration: Start, stop, and restart Transfer CFT. Configuration: Create configuration objects including partner definitions, transfer templates, protocols, and security profiles. Monitor transfers: View the catalog file, which contains control data that is associated with transfers. Manage transfers: Create, manage, and delete transfer requests. Monitor the log: View log file. Manage certificates: View and import certificates. End-to-end monitoring: View a transfer process, from start to finish, along with all participants (sender, receiver, and intermediate participants). * You can perform some, but not all, configuration tasks (you can manage partner definitions and transfer templates). Supported file systems for multi-node architecture The following non-exhaustive table lists shared file systems that have been tested with Transfer CFT. Operating system Tested and supported Not supported AIX GPFS (recommended), NFSv4 NFSv3, CXFS, VeritasSF HP-UX NFSv4 NFSv3, CXFS, VeritasSF Linux-x86 GPFS (recommended), NFSv4, GFS2, AWS EFS NFSv3, CXFS, ACFS, OCFSv1, OCFSv2, QFS, VeritasSF OpenVMS RMS Solaris NFSv4 NFSv3, CXFS, QFS, VeritasSF Windows-x86 SMB/CIFS, GPFS CXFS, NFS z/OS Sharing DASD across Sysplex Limitations The following are presently not supported in the new web browser UI:Running UCONF reconfig commands Installation limitations include: For a Windows cluster, all machines in the cluster must have the same service definition (same name, display name, etc.) You cannot use the installation template file (initialize.properties) in a directory where the directory name contains accents SFTP implementation does not support messages or the store-and-forward functionality SFTP implementation does not support the use of IPv6 in flows You cannot use the former Copilot Java application to manage SFTP protocol configurations When using folder monitoring on behalf of another user (USERID):Linux: You cannot use both userctrl and events modes.It is not supported in the obsolete folder configuration mode via uconf parameters. Prerequisites Windows When using a Windows x86 (64-bit) system, you must install the Visual C++ Redistributable Package for Visual Studio 2013 (and not a later version) to provide necessary library files (DLL) for the compiler. For a win-x86-64 target, use vcredist_x64.exe. Note If the redistribution package is already installed on your Windows system, there is no need to reinstall. However, if you are installing this package prior to installing Transfer CFT, you must restart the machine or Transfer CFT does not completely install. Java support You require Java version 7 or higher as a client to use the Copilot Java user interface. Secure Relay Transfer CFT 3.6 delivers an embedded Secure Relay MA 2.7.3. You must then additionally install the Secure Relay RA 2.7.3. Please refer to the Secure Relay Installation Guide for details. Deprecated functions The following section lists deprecated functions for Transfer CFT version 3.6 and higher: The Java Web Start Graphical User Interface (Copilot UI) is deprecated and will no longer be available as of v3.8. Deprecated the former Habilitation Access Management method (SECUTIL). Deprecated ASIT Exits. The following section lists deprecated functions for Transfer CFT version 3.5 and higher: Referencing a certificate with the PKIFNAME using the format (PKIFNAME=TXT://certificate) is no longer supported. Deprecated the PAD parameter. Discontinued support Changing technologies as well as evolution in our customers systems, drives the need for Axway to modify or discontinue support for some features. The following list summarizes discontinued functions that have been announced for Transfer CFT. Discontinued platforms The following platforms were previously supported in Transfer CFT 3.5; however, support is discontinued in Transfer CFT 3.6 and higher: IBM i v7.1 z/OS v2.1 The following platforms were previously supported in Transfer CFT 3.2.4; however, support is discontinued in Transfer CFT 3.3.2 and higher: SUSE Linux Enterprise Server 10 s390-32, s390-64 Red Hat Enterprise Linux 4 ia64‐64 The following platforms were previously supported in Transfer CFT 3.1.3; however, support is discontinued in Transfer CFT 3.2.4 and higher: SUSE Linux Enterprise Server 10 x86‐64 (64-operating system) Windows Server 2003 x86‐32, x86‐64, ia64‐64 Windows XP x86‐32, x86‐64 Windows Vista x86‐32, x86‐64 Red Hat Enterprise Linux 4 x86‐32, x86‐64, ia64‐64 The following platforms were previously supported in Transfer CFT 3.0.1; however, support is discontinued in Transfer CFT 3.1.3 and higher: RHEL 3 Windows 2000 For a comprehensive list of supported platforms for Transfer CFT, please refer to the Axway Supported Platforms Guide. Protocols Protocol: EBICS is deprecated in Transfer CFT 3.4, with an EOL scheduled for 2020. Discontinued in Transfer CFT 3.6 EBICS - Customers should move to Axway EBICS client. Please refer to the EBICS client documentation for product details. Discontinued support of CFTCOM TYPE=MBX on Windows, OpenVMS, and z/OS platforms. Discontinued in Transfer CFT 3.5 Removed the cipher suite 9 (SSL_RSA_WITH_DES_CBC_SHA). Discontinued in Transfer CFT 3.4 The following list summarizes discontinued functions for Transfer CFT version 3.4. OS specific z/OS Removed the CFTMI23A executable (COM and catalog migration utility) for migrating from version 2.3.2 IBM i - Removed the SI_TEMPLIB library and the CLEANER/BACKGRND program Platform support Axway no longer delivers 32-bit versions of Transfer CFT, but does offer an automatic migration from an existing 32-bit version to Transfer CFT 3.4 64-bit on 64-bit OS. Discontinued in Transfer CFT 3.1.3 and higher The following list summarizes discontinued functions for Transfer CFT version 3.1.3 and higher. Deprecated and discontinued features are non operational in the new version when you migrate, even though they display in the upgraded configuration. You should check for, and replace, these features as part of the migration procedure. Interoperability Composer for Transfer CFT Transfer CFT Navigator Networks and protocols Networks: LU62, SNA, DSA, X.25, and DNA Protocol: ETEBAC Documentation This section describes documentation enhancements and related documentation. Related documentation For more information about Transfer CFT, refer to: Transfer CFT 3.6 User Guide Transfer CFT 3.6 Security Guide Transfer CFT 3.6 Capacity Planning Guide Transfer CFT 3.6 UNIX Installation and Operations Guide Transfer CFT 3.6 Windows Installation and Operations Guide Transfer CFT 3.6 z/OS Installation and Operations Guide Transfer CFT 3.6 IBM i Installation and Operations Guide Transfer CFT 3.6 OpenVMS Installation and Operations Guide Transfer CFT 3.6 HP NonStop Installation and Operations Guide Support services The Axway Global Support team provides worldwide 24 x 7 support for customers with active support agreements. Email support@axway.com or visit Axway Sphere at https://support.axway.com. Copyright © 2020 Axway. All rights reserved Related Links
Axway AMPLIFY Transfer CFT 3.6 Release Notes New features and enhancements Platform features Limitations Prerequisites Deprecated features Discontinued support Documentation Support services New features and enhancements This section lists new features and product enhancements added since the last major Transfer CFT release. Major evolutions File transfer protocol SFTP is now available on Transfer CFT HP NonStop exclusively for OSS files. Added SFTP support when using Transfer CFT with Secure Relay. File storage Support for CEPH storage. Transfer CFT can read and write objects to the Ceph Storage Cluster using the Ceph Object Gateway and the S3 compatible API. Integration/standarization Support for SAML 2.0 as an Identity Provides (IdP) with Transfer CFT installations enables Single Sign-On (SSO) for z/OS, in addition to Unix, Windows, and HP NonStop. Added a folder monitoring option that allows you to access files on the behalf of a specific user (USERID). Available on Unix and Windows You can automatically move a file to a specified directory following a successful file transfer either with or without folder monitoring (FACTION=ARCHIVE). User Interface and REST API updates New REST API security requests (PKI) for managing certificates, entities, and keys. Manage hosts and nodes using REST APIs. Additional UI functionalities including a landing page dashboard, node administration, and security features (PKI) such as managing certificates, entities, and keys. Security Added Brute force protection for logging on the UI, REST API, and Web services (available on Unix, IBM i, HP NonStop, and Windows). Support passphrase of up to 32 characters for login connections with the Copilot server (UI, REST API) for Transfer CFT IBM i. Added support for 4096-bit key for certificates generated during registration with Central Governance. Miscellaneous Support the AMPLIFY Edge Agent for usage tracking. Improved overall SFTP implementations so that there are now SecureTransport metadata extensions for Sentinel Monitoring, and an increased PART ID field of up to 64 characters. Minor evolutions and enhancements The workingdir parameter is available for SEND and RECV commands. Added an alert mechanism for the Transfer CFT communication media file (CFTCOM) to indicate that the COM is nearing its threshold. Extended RCVALLER to include additional file-access type errors. Enhanced the CLEARCMD command so that INDEX is optional and you can use a wildcard in the JOBNAME. Added the SORTBY parameter for the DISPLAY and LISTCAT commands. Added filtering using the ROOTCID parameter for the LISTPKI and PKIEXT commands. Symbolic link support for an installation directory path. Windows Details and UNIX Password encryption for silent file installations. VSAM component suffix parameter on Transfer CFT z/OS. Removed the dependency to Xerces XML library. Added ability to enable/disable the PassPort AM persistent cache daemon (CFTSXPAM). Note Refer to the Transfer CFT Changelog for links to details on new features and evolutions. Platform features The table below lists the available Transfer CFT 3.6 features according to the version and operating system where they were introduced. Function OS Windows UNIX z/OS IBM i HP NS OpenVMS Flow Manager 3.3.2 3.3.2 3.3.2 3.3.2 3.3.2 - Flow Manager SaaS 3.6 3.6 3.6 3.6 3.6 - Using tracking with Edge Agent 3.5 3.5 3.5 3.5 3.5 3.5 SAML 3.5 3.5 3.6 3.6 SP1 3.5 - REST API 3.2.4 3.2.4 3.2.4 3.2.4 3.2.4 - New browser-based user interface 3.3.2 3.3.2 3.3.2 3.3.2 3.3.2 - Central Governance management 3.1.3 3.1.3 3.1.3 3.1.3 3.2.4 - Folder monitoring 3.1.2 3.1.2 3.1.34 3.1.34 3.2.4 3.1.3 Secure Relay 3.1.2 3.1.2 3.1.3 3.1.3 Not Supported - Multi-node architecture 3.0.1 3.0.11 3.0.1 - Not Supported 3.0.1 TrustedFile (PGP S-MIME CMS) 3.0.13 3.0.11 3.0.1 - Not Supported - PassPort AM 2.7.1 2.7.11 3.0.1 3.0.1 3.2.4 2.7.1 SFTP 3.4 3.4 5 3.5 6 - 3.66 - IPv6 2.7.1 2.7.11 2.7.1 2.7.1 Limitation 2.7.1 pTCP 2.7.1 2.7.11 - - Not Supported - UDT (excluding multi-node) 2.7.1 2.7.12 - - Not Supported - SOCKS 2.7.1 2.7.1 3.0.1 2.7.1 Limitation 2.7.1 Heartbeat functionality 2.7.1 2.7.1 2.7.1 2.7.1 3.2.4 2.7.1 Bandwidth control 3.0.1 3.0.1 3.0.1 3.0.1 Limitation 3.0.1 System users (USERCTRL) 2.7.0 2.6.2 3.2.2 3.1.3 Not Supported - 1Enabled for all UNIX except SCO, UnixWare, IRIX, Tru64. 2 Enabled only for Linux-x86-32, Linux-x86-64, Linux-ia64-64. 3Enabled for versions 3.0.1 to 3.3.2 on Windows 32-bit systems. As of Transfer CFT 3.4, Trusted File is supported on Windows 64-bit systems. 4Limited to USS (z/OS) and IFS (IBM i) systems. On IBM i, native files folder monitoring is available for Transfer CFT 3.3.2 SP2 and higher. 5Available on AIX, HPUX ia64, Linux, Solaris, Windows 6For UNIX type files only User interface comparison Functionality Central Governance (with Sentinel) New user interface (Browser) Former user interface(Copilot Java Web Start application) Administration X X X Configuration X* X X Monitor transfers - X X Manage transfers - X X Monitor the log X X X Manage certificates X X X End-to-end monitoring X - - Administration: Start, stop, and restart Transfer CFT. Configuration: Create configuration objects including partner definitions, transfer templates, protocols, and security profiles. Monitor transfers: View the catalog file, which contains control data that is associated with transfers. Manage transfers: Create, manage, and delete transfer requests. Monitor the log: View log file. Manage certificates: View and import certificates. End-to-end monitoring: View a transfer process, from start to finish, along with all participants (sender, receiver, and intermediate participants). * You can perform some, but not all, configuration tasks (you can manage partner definitions and transfer templates). Supported file systems for multi-node architecture The following non-exhaustive table lists shared file systems that have been tested with Transfer CFT. Operating system Tested and supported Not supported AIX GPFS (recommended), NFSv4 NFSv3, CXFS, VeritasSF HP-UX NFSv4 NFSv3, CXFS, VeritasSF Linux-x86 GPFS (recommended), NFSv4, GFS2, AWS EFS NFSv3, CXFS, ACFS, OCFSv1, OCFSv2, QFS, VeritasSF OpenVMS RMS Solaris NFSv4 NFSv3, CXFS, QFS, VeritasSF Windows-x86 SMB/CIFS, GPFS CXFS, NFS z/OS Sharing DASD across Sysplex Limitations The following are presently not supported in the new web browser UI:Running UCONF reconfig commands Installation limitations include: For a Windows cluster, all machines in the cluster must have the same service definition (same name, display name, etc.) You cannot use the installation template file (initialize.properties) in a directory where the directory name contains accents SFTP implementation does not support messages or the store-and-forward functionality SFTP implementation does not support the use of IPv6 in flows You cannot use the former Copilot Java application to manage SFTP protocol configurations When using folder monitoring on behalf of another user (USERID):Linux: You cannot use both userctrl and events modes.It is not supported in the obsolete folder configuration mode via uconf parameters. Prerequisites Windows When using a Windows x86 (64-bit) system, you must install the Visual C++ Redistributable Package for Visual Studio 2013 (and not a later version) to provide necessary library files (DLL) for the compiler. For a win-x86-64 target, use vcredist_x64.exe. Note If the redistribution package is already installed on your Windows system, there is no need to reinstall. However, if you are installing this package prior to installing Transfer CFT, you must restart the machine or Transfer CFT does not completely install. Java support You require Java version 7 or higher as a client to use the Copilot Java user interface. Secure Relay Transfer CFT 3.6 delivers an embedded Secure Relay MA 2.7.3. You must then additionally install the Secure Relay RA 2.7.3. Please refer to the Secure Relay Installation Guide for details. Deprecated functions The following section lists deprecated functions for Transfer CFT version 3.6 and higher: The Java Web Start Graphical User Interface (Copilot UI) is deprecated and will no longer be available as of v3.8. Deprecated the former Habilitation Access Management method (SECUTIL). Deprecated ASIT Exits. The following section lists deprecated functions for Transfer CFT version 3.5 and higher: Referencing a certificate with the PKIFNAME using the format (PKIFNAME=TXT://certificate) is no longer supported. Deprecated the PAD parameter. Discontinued support Changing technologies as well as evolution in our customers systems, drives the need for Axway to modify or discontinue support for some features. The following list summarizes discontinued functions that have been announced for Transfer CFT. Discontinued platforms The following platforms were previously supported in Transfer CFT 3.5; however, support is discontinued in Transfer CFT 3.6 and higher: IBM i v7.1 z/OS v2.1 The following platforms were previously supported in Transfer CFT 3.2.4; however, support is discontinued in Transfer CFT 3.3.2 and higher: SUSE Linux Enterprise Server 10 s390-32, s390-64 Red Hat Enterprise Linux 4 ia64‐64 The following platforms were previously supported in Transfer CFT 3.1.3; however, support is discontinued in Transfer CFT 3.2.4 and higher: SUSE Linux Enterprise Server 10 x86‐64 (64-operating system) Windows Server 2003 x86‐32, x86‐64, ia64‐64 Windows XP x86‐32, x86‐64 Windows Vista x86‐32, x86‐64 Red Hat Enterprise Linux 4 x86‐32, x86‐64, ia64‐64 The following platforms were previously supported in Transfer CFT 3.0.1; however, support is discontinued in Transfer CFT 3.1.3 and higher: RHEL 3 Windows 2000 For a comprehensive list of supported platforms for Transfer CFT, please refer to the Axway Supported Platforms Guide. Protocols Protocol: EBICS is deprecated in Transfer CFT 3.4, with an EOL scheduled for 2020. Discontinued in Transfer CFT 3.6 EBICS - Customers should move to Axway EBICS client. Please refer to the EBICS client documentation for product details. Discontinued support of CFTCOM TYPE=MBX on Windows, OpenVMS, and z/OS platforms. Discontinued in Transfer CFT 3.5 Removed the cipher suite 9 (SSL_RSA_WITH_DES_CBC_SHA). Discontinued in Transfer CFT 3.4 The following list summarizes discontinued functions for Transfer CFT version 3.4. OS specific z/OS Removed the CFTMI23A executable (COM and catalog migration utility) for migrating from version 2.3.2 IBM i - Removed the SI_TEMPLIB library and the CLEANER/BACKGRND program Platform support Axway no longer delivers 32-bit versions of Transfer CFT, but does offer an automatic migration from an existing 32-bit version to Transfer CFT 3.4 64-bit on 64-bit OS. Discontinued in Transfer CFT 3.1.3 and higher The following list summarizes discontinued functions for Transfer CFT version 3.1.3 and higher. Deprecated and discontinued features are non operational in the new version when you migrate, even though they display in the upgraded configuration. You should check for, and replace, these features as part of the migration procedure. Interoperability Composer for Transfer CFT Transfer CFT Navigator Networks and protocols Networks: LU62, SNA, DSA, X.25, and DNA Protocol: ETEBAC Documentation This section describes documentation enhancements and related documentation. Related documentation For more information about Transfer CFT, refer to: Transfer CFT 3.6 User Guide Transfer CFT 3.6 Security Guide Transfer CFT 3.6 Capacity Planning Guide Transfer CFT 3.6 UNIX Installation and Operations Guide Transfer CFT 3.6 Windows Installation and Operations Guide Transfer CFT 3.6 z/OS Installation and Operations Guide Transfer CFT 3.6 IBM i Installation and Operations Guide Transfer CFT 3.6 OpenVMS Installation and Operations Guide Transfer CFT 3.6 HP NonStop Installation and Operations Guide Support services The Axway Global Support team provides worldwide 24 x 7 support for customers with active support agreements. Email support@axway.com or visit Axway Sphere at https://support.axway.com. Copyright © 2020 Axway. All rights reserved
Axway AMPLIFY Transfer CFT 3.6 Release Notes New features and enhancements Platform features Limitations Prerequisites Deprecated features Discontinued support Documentation Support services New features and enhancements This section lists new features and product enhancements added since the last major Transfer CFT release. Major evolutions File transfer protocol SFTP is now available on Transfer CFT HP NonStop exclusively for OSS files. Added SFTP support when using Transfer CFT with Secure Relay. File storage Support for CEPH storage. Transfer CFT can read and write objects to the Ceph Storage Cluster using the Ceph Object Gateway and the S3 compatible API. Integration/standarization Support for SAML 2.0 as an Identity Provides (IdP) with Transfer CFT installations enables Single Sign-On (SSO) for z/OS, in addition to Unix, Windows, and HP NonStop. Added a folder monitoring option that allows you to access files on the behalf of a specific user (USERID). Available on Unix and Windows You can automatically move a file to a specified directory following a successful file transfer either with or without folder monitoring (FACTION=ARCHIVE). User Interface and REST API updates New REST API security requests (PKI) for managing certificates, entities, and keys. Manage hosts and nodes using REST APIs. Additional UI functionalities including a landing page dashboard, node administration, and security features (PKI) such as managing certificates, entities, and keys. Security Added Brute force protection for logging on the UI, REST API, and Web services (available on Unix, IBM i, HP NonStop, and Windows). Support passphrase of up to 32 characters for login connections with the Copilot server (UI, REST API) for Transfer CFT IBM i. Added support for 4096-bit key for certificates generated during registration with Central Governance. Miscellaneous Support the AMPLIFY Edge Agent for usage tracking. Improved overall SFTP implementations so that there are now SecureTransport metadata extensions for Sentinel Monitoring, and an increased PART ID field of up to 64 characters. Minor evolutions and enhancements The workingdir parameter is available for SEND and RECV commands. Added an alert mechanism for the Transfer CFT communication media file (CFTCOM) to indicate that the COM is nearing its threshold. Extended RCVALLER to include additional file-access type errors. Enhanced the CLEARCMD command so that INDEX is optional and you can use a wildcard in the JOBNAME. Added the SORTBY parameter for the DISPLAY and LISTCAT commands. Added filtering using the ROOTCID parameter for the LISTPKI and PKIEXT commands. Symbolic link support for an installation directory path. Windows Details and UNIX Password encryption for silent file installations. VSAM component suffix parameter on Transfer CFT z/OS. Removed the dependency to Xerces XML library. Added ability to enable/disable the PassPort AM persistent cache daemon (CFTSXPAM). Note Refer to the Transfer CFT Changelog for links to details on new features and evolutions. Platform features The table below lists the available Transfer CFT 3.6 features according to the version and operating system where they were introduced. Function OS Windows UNIX z/OS IBM i HP NS OpenVMS Flow Manager 3.3.2 3.3.2 3.3.2 3.3.2 3.3.2 - Flow Manager SaaS 3.6 3.6 3.6 3.6 3.6 - Using tracking with Edge Agent 3.5 3.5 3.5 3.5 3.5 3.5 SAML 3.5 3.5 3.6 3.6 SP1 3.5 - REST API 3.2.4 3.2.4 3.2.4 3.2.4 3.2.4 - New browser-based user interface 3.3.2 3.3.2 3.3.2 3.3.2 3.3.2 - Central Governance management 3.1.3 3.1.3 3.1.3 3.1.3 3.2.4 - Folder monitoring 3.1.2 3.1.2 3.1.34 3.1.34 3.2.4 3.1.3 Secure Relay 3.1.2 3.1.2 3.1.3 3.1.3 Not Supported - Multi-node architecture 3.0.1 3.0.11 3.0.1 - Not Supported 3.0.1 TrustedFile (PGP S-MIME CMS) 3.0.13 3.0.11 3.0.1 - Not Supported - PassPort AM 2.7.1 2.7.11 3.0.1 3.0.1 3.2.4 2.7.1 SFTP 3.4 3.4 5 3.5 6 - 3.66 - IPv6 2.7.1 2.7.11 2.7.1 2.7.1 Limitation 2.7.1 pTCP 2.7.1 2.7.11 - - Not Supported - UDT (excluding multi-node) 2.7.1 2.7.12 - - Not Supported - SOCKS 2.7.1 2.7.1 3.0.1 2.7.1 Limitation 2.7.1 Heartbeat functionality 2.7.1 2.7.1 2.7.1 2.7.1 3.2.4 2.7.1 Bandwidth control 3.0.1 3.0.1 3.0.1 3.0.1 Limitation 3.0.1 System users (USERCTRL) 2.7.0 2.6.2 3.2.2 3.1.3 Not Supported - 1Enabled for all UNIX except SCO, UnixWare, IRIX, Tru64. 2 Enabled only for Linux-x86-32, Linux-x86-64, Linux-ia64-64. 3Enabled for versions 3.0.1 to 3.3.2 on Windows 32-bit systems. As of Transfer CFT 3.4, Trusted File is supported on Windows 64-bit systems. 4Limited to USS (z/OS) and IFS (IBM i) systems. On IBM i, native files folder monitoring is available for Transfer CFT 3.3.2 SP2 and higher. 5Available on AIX, HPUX ia64, Linux, Solaris, Windows 6For UNIX type files only User interface comparison Functionality Central Governance (with Sentinel) New user interface (Browser) Former user interface(Copilot Java Web Start application) Administration X X X Configuration X* X X Monitor transfers - X X Manage transfers - X X Monitor the log X X X Manage certificates X X X End-to-end monitoring X - - Administration: Start, stop, and restart Transfer CFT. Configuration: Create configuration objects including partner definitions, transfer templates, protocols, and security profiles. Monitor transfers: View the catalog file, which contains control data that is associated with transfers. Manage transfers: Create, manage, and delete transfer requests. Monitor the log: View log file. Manage certificates: View and import certificates. End-to-end monitoring: View a transfer process, from start to finish, along with all participants (sender, receiver, and intermediate participants). * You can perform some, but not all, configuration tasks (you can manage partner definitions and transfer templates). Supported file systems for multi-node architecture The following non-exhaustive table lists shared file systems that have been tested with Transfer CFT. Operating system Tested and supported Not supported AIX GPFS (recommended), NFSv4 NFSv3, CXFS, VeritasSF HP-UX NFSv4 NFSv3, CXFS, VeritasSF Linux-x86 GPFS (recommended), NFSv4, GFS2, AWS EFS NFSv3, CXFS, ACFS, OCFSv1, OCFSv2, QFS, VeritasSF OpenVMS RMS Solaris NFSv4 NFSv3, CXFS, QFS, VeritasSF Windows-x86 SMB/CIFS, GPFS CXFS, NFS z/OS Sharing DASD across Sysplex Limitations The following are presently not supported in the new web browser UI:Running UCONF reconfig commands Installation limitations include: For a Windows cluster, all machines in the cluster must have the same service definition (same name, display name, etc.) You cannot use the installation template file (initialize.properties) in a directory where the directory name contains accents SFTP implementation does not support messages or the store-and-forward functionality SFTP implementation does not support the use of IPv6 in flows You cannot use the former Copilot Java application to manage SFTP protocol configurations When using folder monitoring on behalf of another user (USERID):Linux: You cannot use both userctrl and events modes.It is not supported in the obsolete folder configuration mode via uconf parameters. Prerequisites Windows When using a Windows x86 (64-bit) system, you must install the Visual C++ Redistributable Package for Visual Studio 2013 (and not a later version) to provide necessary library files (DLL) for the compiler. For a win-x86-64 target, use vcredist_x64.exe. Note If the redistribution package is already installed on your Windows system, there is no need to reinstall. However, if you are installing this package prior to installing Transfer CFT, you must restart the machine or Transfer CFT does not completely install. Java support You require Java version 7 or higher as a client to use the Copilot Java user interface. Secure Relay Transfer CFT 3.6 delivers an embedded Secure Relay MA 2.7.3. You must then additionally install the Secure Relay RA 2.7.3. Please refer to the Secure Relay Installation Guide for details. Deprecated functions The following section lists deprecated functions for Transfer CFT version 3.6 and higher: The Java Web Start Graphical User Interface (Copilot UI) is deprecated and will no longer be available as of v3.8. Deprecated the former Habilitation Access Management method (SECUTIL). Deprecated ASIT Exits. The following section lists deprecated functions for Transfer CFT version 3.5 and higher: Referencing a certificate with the PKIFNAME using the format (PKIFNAME=TXT://certificate) is no longer supported. Deprecated the PAD parameter. Discontinued support Changing technologies as well as evolution in our customers systems, drives the need for Axway to modify or discontinue support for some features. The following list summarizes discontinued functions that have been announced for Transfer CFT. Discontinued platforms The following platforms were previously supported in Transfer CFT 3.5; however, support is discontinued in Transfer CFT 3.6 and higher: IBM i v7.1 z/OS v2.1 The following platforms were previously supported in Transfer CFT 3.2.4; however, support is discontinued in Transfer CFT 3.3.2 and higher: SUSE Linux Enterprise Server 10 s390-32, s390-64 Red Hat Enterprise Linux 4 ia64‐64 The following platforms were previously supported in Transfer CFT 3.1.3; however, support is discontinued in Transfer CFT 3.2.4 and higher: SUSE Linux Enterprise Server 10 x86‐64 (64-operating system) Windows Server 2003 x86‐32, x86‐64, ia64‐64 Windows XP x86‐32, x86‐64 Windows Vista x86‐32, x86‐64 Red Hat Enterprise Linux 4 x86‐32, x86‐64, ia64‐64 The following platforms were previously supported in Transfer CFT 3.0.1; however, support is discontinued in Transfer CFT 3.1.3 and higher: RHEL 3 Windows 2000 For a comprehensive list of supported platforms for Transfer CFT, please refer to the Axway Supported Platforms Guide. Protocols Protocol: EBICS is deprecated in Transfer CFT 3.4, with an EOL scheduled for 2020. Discontinued in Transfer CFT 3.6 EBICS - Customers should move to Axway EBICS client. Please refer to the EBICS client documentation for product details. Discontinued support of CFTCOM TYPE=MBX on Windows, OpenVMS, and z/OS platforms. Discontinued in Transfer CFT 3.5 Removed the cipher suite 9 (SSL_RSA_WITH_DES_CBC_SHA). Discontinued in Transfer CFT 3.4 The following list summarizes discontinued functions for Transfer CFT version 3.4. OS specific z/OS Removed the CFTMI23A executable (COM and catalog migration utility) for migrating from version 2.3.2 IBM i - Removed the SI_TEMPLIB library and the CLEANER/BACKGRND program Platform support Axway no longer delivers 32-bit versions of Transfer CFT, but does offer an automatic migration from an existing 32-bit version to Transfer CFT 3.4 64-bit on 64-bit OS. Discontinued in Transfer CFT 3.1.3 and higher The following list summarizes discontinued functions for Transfer CFT version 3.1.3 and higher. Deprecated and discontinued features are non operational in the new version when you migrate, even though they display in the upgraded configuration. You should check for, and replace, these features as part of the migration procedure. Interoperability Composer for Transfer CFT Transfer CFT Navigator Networks and protocols Networks: LU62, SNA, DSA, X.25, and DNA Protocol: ETEBAC Documentation This section describes documentation enhancements and related documentation. Related documentation For more information about Transfer CFT, refer to: Transfer CFT 3.6 User Guide Transfer CFT 3.6 Security Guide Transfer CFT 3.6 Capacity Planning Guide Transfer CFT 3.6 UNIX Installation and Operations Guide Transfer CFT 3.6 Windows Installation and Operations Guide Transfer CFT 3.6 z/OS Installation and Operations Guide Transfer CFT 3.6 IBM i Installation and Operations Guide Transfer CFT 3.6 OpenVMS Installation and Operations Guide Transfer CFT 3.6 HP NonStop Installation and Operations Guide Support services The Axway Global Support team provides worldwide 24 x 7 support for customers with active support agreements. Email support@axway.com or visit Axway Sphere at https://support.axway.com. Copyright © 2020 Axway. All rights reserved