NetEx EFT213 Reference Manual Rel 5.4

OverviewThe Netex/eFT Encrypt Utility can be used to encrypt user passwords which will be used by NetEx/eFT toestablish connections to remote hosts.Sites often store remote system access information in files to be included on the CONNECT command duringNetEx/eFT execution. To prevent from storing cleartext passwords in files, you can encrypt a password andstore the encrypted form of the password in the file. The encrypted form of the password is useless to an individualfor gaining access to a remote system outside of NetEx/eFT. Within NetEx/eFT, the encrypted formof the password is valid only when decrypted internally by NetEx/eFT using the local host username as a secondaryencryption key.To execute this utility, STDOUT must allocated and STDERR may be allocated. i.e.:ALLOC F(STDOUT) DA(*)ALLOC F(STDERR) DA(*)FormatAppendix A. NetEx/eFT Encrypt UtilityThe ENCRYPT utility has the following format on an MVS TSO/E command line (you will need to specifythe appropriate data set name of member NUAENCR based on your installation):CALL ‘NUA.V2R10M12.LOAD(NUAENCR)’ ‘password –USERname username’ ASISWhere:password-USERname-DEBUGASIS(STRING) specifies the remote system password you want to encrypt. The encrypted form ofthis password is returned by ENCRYPT and should be stored in a file for use later on theCONNECT command. You may leave this parameter off the command line and be promptedfor it.(STRING) specifies the local host username which represents the username associated withthe local NetEx/eFT process that will issue the CONNECT command with the encryptedpassword. This local host username is used as a secondary encryption key for the specifiedpassword. When NetEx/eFT is later run on the local system, either interactively or in batch,it queries the operating system for the username of the process. NetEx/eFT then uses thisusername as one of its keys in decrypting the password. The value for “username” abovemust be entered in uppercase in order to match the username value later returned by MVS.(optional) outputs informational messages about the encryption process. This qualifier mustbe contained within the single quotes.This is required in order to ensure your parameters are taken as specified on the commandline.REF-eFT213-R5.4-08 Appendix A. NetEx/eFT Encrypt Utility Page 213