GLYPH<SM590000> Advanced facilities 

GLYPH<SM590000> Configure on and off 

## HMC and SE secure FTP support 

You can use a secure FTP connection from a HMC/SE FTP client to a customer FTP server location. This configuration is implemented by using the Secure Shell (SSH) File Transfer Protocol, which is an extension of SSH. You can use the Manage SSH Keys console action, which is available to the HMC and SE, to import public keys that are associated with a host address. 

The Secure FTP infrastructure allows HMC and SE applications to query whether a public key is associated with a host address and to use the Secure FTP interface with the appropriate public key for a host. Tasks that use FTP now provide a selection for the secure host connection. 

When selected, the task verifies that a public key is associated with the specified host name. If a public key is not provided, a message window opens that points to the Manage SSH Keys task to enter a public key. The following tasks provide this support: 

## 11.5.11 HMC 2.14.1 Enhancements 

GLYPH<SM590000> Import/Export IOCDS 

GLYPH<SM590000> Advanced Facilities FTP IBM Content Collector Load 

GLYPH<SM590000> Audit and Log Management (Scheduled Operations only) 

GLYPH<SM590000> FCP Configuration Import/Export 

GLYPH<SM590000> OSA view Port Parameter Export 

GLYPH<SM590000> OSA Integrated Console Configuration Import/Export 

HMC Version 2.14.1 introduces the following enhancements: 

GLYPH<SM590000> IPv6 Support for OSA-ICC 3270 

In addition to IPV4 protocol, HMC 2.14.1 was added IPv6 support for OSA-ICC 3270 for compliance with existing regulations that require all computer purchases to support IPv6. 

GLYPH<SM590000> TLS level negotiation limits for OSA-ICC 3270 

The supported TLS protocol levels for the OSA-ICC 3270 client connection can now be specified. Supported protocol levels are TLS 1.0, TLS 1.1, and TLS 1.2. Consider the following points: 

– TLS 1.0 →  OSA-ICC 3270 server permits TLS 1.0, TLS 1.1, and TLS 1.2 client connections. 

– TLS 1.1 →  OSA-ICC 3270 server permits TLS 1.1 and TLS 1.2 client connections. 

– TLS 1.2 →  OSA-ICC 3270 server permits only TLS 1.2 client connections. 

TLS 1.2 was introduced for z13 Driver level 27 (HMC 2.13.1) for OSA-Express4S and OSA-Express5S. 

GLYPH<SM590000> Separate Security Certificates for OSA-ICC 3270 

Separate and unique OSA-ICC 3270 certificates are now supported for clients who host workloads across multiple business units or data centers where cross-site coordination is required. Clients can avoid interruption of all the TLS connections at the same time when they must renew expired certificates. The certificate for the PCHID is independently managed with respect to expiry or renewal and other properties (such as self-signed or CA signed). 

