WIXLIB

Deployment: customizing your JRE Alternatively, if launching the product by invoking acslaunch XXXXX.exe, you can alsoplace a JRE alongside the .exe file– For instance, if your product image is expanded to C:\ACS,Launcher executable will be atC:\ACS\Start Binaries\Windows i386-32\acslaunch win-32.exeYou can put a JRE inC:\ACS\Start Binaries\Windows i386-32\jre\(e.g.: you can copy the directory “C:\Program Files (x86)\java\jre6”to “C:\ACS\Start Binaries\Windows i386-32\jre”) 2015 IBM Corporation- Stage multiple JVMs and Start Programs for differentplatforms 2015 IBM Corporation21

Deployment: customizing your JRE Why would you want to do this? JRE can be on a network share or thumb drive The default JVM on a workstation may or may not be Java 6or newer (or there might not be a JVM on a particularworkstation) Gives the administrator more control Need not worry about having Java installed on userworkstations Why would you NOT want to do this?– Client VM may get updates automatically– Your deployment is all based on local workstation, you don’twant to deploy a JRE, and JRE’s may vary– Usually not necessary (most workstations have Java) 2015 IBM CorporationVerifying JRE 2015 IBM Corporation22

Version 1.1.4 – install scripts Mac and Linux install scripts 2015 IBM Corporation 2014 International Business MachinesCorporationLocal Workstation Deployment Provided Javascript will copy the IBM i Access Client Solutions deployment toC:\Users\ WindowsUser \IBM\ClientSolutions and will create shortcuts on theDesktop for the Main User Interface and 5250 Session Manager. It will alsocreate file associations for the .hod, .bchx, .dttx & .dtfx if they haven’t alreadybeen created. 2015 IBM Corporation23

Agenda Background Custom deployment and configuration– Deployment– Using the “autoimport” feature– Excluding components Shell commandsMigrationFile AssociationsSSLWrap-up 2015 IBM Corporation“autoimport” feature IBM i Access Client Solutions has amechanism for saving (exporting) andrestoring (importing) a user’s settings andpreferences. When a configuration is exported, allinformation is stored in an export file. Stored data includes emulator sessionprofiles 2015 IBM Corporation24

“autoimport” feature An export file can therefore be used to– Back up settings– migrate settings from one PC to another.– Propagate settings to multiple PC’s 2015 IBM Corporation“autoimport” feature So what is “autoimport”?– Allows an export file to be automatically imported when the product starts up– Useful for an administrator to automatically roll out settings Deployed via AcsConfig.properties– Two properties must be import.version 2015 IBM Corporation25

“autoimport” feature com.ibm.iaccess.autoimport– Can contain special config keywords– Can be a classloader path (if placed inside acsbundle.jar), a URL (http://,file://), or the path to a file. com.ibm.iaccess.autoimport.version– Typically set to a numeric value– Dictates whether the file (specified by com.ibm.iaccess.autoimport) isimported. The import happens if this value differs from the last file importedvia the “autoimport” feature. 2015 IBM CorporationAgenda Background Custom deployment and configuration– Deployment– Using the “autoimport” feature– Excluding components Shell commandsMigrationFile AssociationsSSLWrap-up 2015 IBM Corporation26

Hiding/Restricting function You may not want all the features of ACS visible to your users. There are two ways exclude them from view (hide them)1. Hiding component for a deployment2. Restricting component with workstation-level restrictions 2015 IBM CorporationHiding component for a deployment Deployed via AcsConfig.properties– Property must be set: com.ibm.iaccess.ExcludeComps– Set this property to a comma-separated list of function keywords The function keywords which may be specified are:– DATAXFER - Data Transfer to/from IBM I– EMULATOR - 5250 Display/Print emulation and 5250 Session Manager– KEYMAN - SSL certificate management– OPCONSOLE - Operations console and Virtual Control Panel– RMTCMD - Remote Command (available from the command line)– SPLF- Printer Output– HWCONSOLE - Hardware management interface– L1CPLUGIN - Navigator for i 2015 IBM Corporation27

Without the property set (left) and withcom.ibm.iaccess.ExcludeComps OPCONSOLE,HWCONSOLE,L1CPLUGIN(right) 2015 IBM CorporationWorkstation restrictions Accessed via Edit- Preferences 2015 IBM Corporation28

Workstation restrictions Effective for all users on this workstation Can only be set/removed by administrators Non-administrators will not see the option Scriptable via shell commands/PLUGIN restrict / options Valid options are:/restrict func1,func2,func3 /unrestrict func1,func2,func3 /listworkstation./export file /import file .acsr/exportreg file Restricts the given functions on this workstation.Allows the given functions on this workstation.Lists whether functions are allowed or restricted on thisExport restrictions to the named file with a .acsr file extension.Import restrictions from a file with a .acsr file extension.Export a Windows registry file (.reg file). 2015 IBM CorporationAgenda Background Custom deployment and configuration– Deployment– Using the “autoimport” feature– Excluding components Shell commandsMigrationFile AssociationsSSLWrap-up 2015 IBM Corporation29

Shell Commands IBM i Access Client Solutions provides several shell or command lineutilities that can be used outside of the graphical user interfaces Basic syntax is (all on the same line)acslaunch win-32.exe /plugin name [/system system ] [/options] Orjava -jar acsbundle.jar /plugin name [/system system ] [/options] The “/system” parm is only valid for commands pointed at a specific system 2015 IBM CorporationShell Commands – Backup and restore/PLUGIN backup/PLUGIN restore[/file filename ][/file filename ] These plugins back up the user’s configuration to a file, including all user settingsand emulator sessions stored in the session manager default directory. Equivalent to the import and export functions available through the main GUI 2015 IBM Corporation30

Shell Commands – Create/delete/view system configurations/PLUGIN YSTEM system [/ipaddr frequency ] [/userid userid ][/ssl switch ][/5250path path ][/del] [/r]- name of the system- when a connection is requested, this value determines whether ornot a lookup of the IP address will occur. Valid frequenciesare:ALWAYS - lookup IP address for each connectionHOURLY, DAILY, WEEKLY - lookup IP address if the amount oftime has elapsed since the last lookupIP address - if an IP address is specified, the lookupfrequency is assumed to be NEVER- user id for a usermay also be set to the following values:*PROMPTALWAYS - prompts at least once for each connection*KERBEROS- use Kerberos principal name, no prompting- switch is 0 to turn SSL mode off, or 1 to turn it on- path to 5250 emulation profilesThe /5250path may be set from the main GUI using 5250 SessionManager and then File- Change Directory.- deletes existing configuration- replaces existing configuration- list configured systems with their connection options 2015 IBM CorporationShell Commands – Create/delete/view system configurations/PLUGIN cfg/LIST/LIST- list configured systems with their connection optionsSample output:------------------------------------System Configurations:lp11ut11Use SSL for connection: truePassword Prompting: Use default user name to prompt once for each system: Default user name: jgorzinsIP address lookup frequency: Alwayslp13ut28Use SSL for connection: truePassword Prompting: Use default user name to prompt once for each system: Default user name: jgorzinsIP address lookup frequency: Always----------------------Emulator path: C:\Users\IBM --------------- 2015 IBM Corporation31

Shell Commands – Maintenance tasks/PLUGIN maint [/ options ]Valid options ogs/cleardumps/clearsvcdir/clearsettings- ends daemon processes.Same as Tools- Reset for Maintenance from main GUI- clears all cached passwords- clears the product jar cache- clears the Logs Directory at Edit- PreferencesLocal Settings tab from the main GUI- clears the Dumps Directory at Edit- PreferencesLocal Settings tab from the main GUI- clears the Service Directory at Edit- PreferencesLocal Settings tab from the main GUI- clears all settings for current userIf no options are specified, no actions will be performed. 2015 IBM CorporationShell Commands – Service tasks/PLUGIN dump[/heapdump]/PLUGIN medic Creates files for IBM service Equivalent to “Generate Service Logs” and “Package Service Logs” functions availablethrough the main GUI 2015 IBM Corporation32

Shell commands Many more Virtually any major function you can launch from main GUI See GettingStarted documentation for ary/i-acs-commandline/index.html 2015 IBM CorporationCreating a shortcut to the Data Transfer UI 2015 IBM Corporation6633

Creating a shortcut to the Data Transfer UI 2015 IBM Corporation67Creating a shortcut to the Data Transfer UI 2015 IBM Corporation6834

Creating a shortcut to the Data Transfer UI 2015 IBM Corporation69Creating a shortcut to the Data Transfer UI 2015 IBM Corporation7035

Creating a shortcut to the Data Transfer UI 2015 IBM Corporation71Agenda Background Custom deployment and configuration– Deployment– Using the “autoimport” feature– Excluding components Shell commandsMigrationFile AssociationsSSLWrap-up 2015 IBM Corporation36

Migration The following information can be migrated from IBM i Access for Windows:– System configurations– Data Transfer saved requests– 5250 session profiles 2015 IBM CorporationMigration – System configurations The tool for migrating system configurations is called “Copy Connections” 2015 IBM Corporation37

Migration – System configurations The “Copy Connections” tool lets you copy system configurations to andfrom Windows platform-specific products 2015 IBM CorporationMigration – System configurations Also a scriptable command line plugin/PLUGIN migrate / option /SYSTEM system system can be set to one system name or set to *ALL to indicate allsystems.Valid options are:/IMPORT - Copy one (or all) system configurations from the legacy Windowsconfiguration to IBM i Access Client Solutions./EXPORT - Copy one (or all) system configurations to the legacy Windowsconfiguraiton from IBM i Access Client Solutions./DELETE - Delete one (or all) system configurations from the legacyWindowsconfiguration. 2015 IBM Corporation38

Migration – System configurations So, to copy all the configurations from the ACS core offering to Windows:/PLUGIN migrate /EXPORT /SYSTEM "*ALL" To copy all the configurations from Windows to the ACS core offering :/PLUGIN migrate /IMPORT /SYSTEM "*ALL" In next release of ACS, this will not be necessary!! 2015 IBM CorporationMigration – Data Transfer saved requests 2015 IBM Corporation39

Migration – Data Transfer saved requests Migrates saved .dtt and .dtf files to IBM i Access Client Solutions .dttx and.dtfx files 2015 IBM CorporationMigration – Data Transfer saved requests 2015 IBM Corporation40

Migration – 5250 Session Manager 2015 IBM CorporationMigration – 5250 Session Manager 2015 IBM Corporation41

Migration – 5250 Session Manager 2015 IBM CorporationMigration – 5250 Session Manager Key mappings are also converted. A converted .kmp file will be saved insession manager directory. Convert Macro supports Traditional and VB Script keystroke macros only. 2015 IBM Corporation42

Agenda Background Custom deployment and configuration– Deployment– Using the “autoimport” feature– Excluding components Shell commandsMigrationFile AssociationsSSLWrap-up 2015 IBM CorporationCreating File Associations Easy GUI option!– Only supported on Windows– Must launch via .exe ! 2015 IBM Corporation43

Creating File Associations Can also be done by the command lineacslaunch win-32.exe /plugin fileassoc 2015 IBM CorporationLocal Workstation Deployment 2015 IBM Corporation44

Local Workstation Deployment 2015 IBM CorporationAgenda Background Custom deployment and configuration– Deployment– Using the “autoimport” feature– Excluding components Shell commandsMigrationFile AssociationsSSLWrap-up 2015 IBM Corporation45

SSL – The basics 2015 IBM Corporation 2014 International Business MachinesCorporationSSL-related configuration properties com.ibm.iaccess.TLSProtos com.ibm.iaccess.TLSCiphersControl exactly which protocols and cipher suites are used!Use a comma-separated list of valuesFor TLSProtos, use Java naming (TLSv1, TLSv1.2, etc.) 2015 IBM Corporation9246

New "Push to Windows" ability 2015 IBM Corporation93New "Push to Windows" ability 2015 IBM Corporation9447

New "Push to Windows" ability 2015 IBM Corporation95Agenda Background Custom deployment and configuration– Deployment– Using the “autoimport” feature– Excluding components Shell commandsMigrationFile AssociationsSSLWrap-up 2015 IBM Corporation48

2015 IBM Corporation97“Takeaways” Flexible Customizable Provides migration paths 2015 IBM Corporation49

Questions ?99Special noticesThis document was developed for IBM offerings in the United States as of the date of publication. IBM may not make these offerings availablein other countries, and the information is subject to change without notice. Consult your local IBM business contact for information on the IBMofferings available in your area.Information in this document concerning non-IBM products was obtained from the suppliers of these products or other public sources.Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not giveyou any license to these patents. Send license inquires, in writing, to IBM Director of Licensing, IBM Corporation, New Castle Drive, Armonk,NY 10504-1785 USA.All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectivesonly.The information contained in this document has not been submitted to any formal IBM test and is provided "AS IS" with no warranties orguarantees either expressed or implied.All examples cited or described in this document are presented as illustrations of the manner in which some IBM products can be used and theresults that may be achieved. Actual environmental costs and performance characteristics will vary depending on individual client configurationsand conditions.IBM Global Financing offerings are provided through IBM Credit Corporation in the United States and other IBM subsidiaries and divisionsworldwide to qualified commercial and government clients. Rates are based on a client's credit rating, financing terms, offering type, equipmenttype and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension or withdrawalwithout notice.IBM is not responsible for printing errors in this document that result in pricing or information inaccuracies.All prices shown are IBM's United States suggested list prices and are subject to change without notice; reseller prices may vary.IBM hardware products are manufactured from new parts, or new and serviceable used parts. Regardless, our warranty terms apply.Any performance data contained in this document was determined in a controlled environment. Actual results may vary significantly and aredependent on many factors including system hardware configuration and software design and configuration. Some measurements quoted inthis document may have been made on development-level systems. There is no guarantee these measurements will be the same on generallyavailable systems. Some measurements quoted in this document may have been estimated through extrapolation. Users of this documentshould verify the applicable data for their specific environment. 2015 IBM Corporation 2015 International Business MachinesCorporation50

Supported connecting to IBM i OS r7.2, r7.1 and r6.1 IBM i OS supports IBM i Access Client Solutions exactly the same as IBM i Access for Windows - Checks out the same 57xxXW1 Licenses for 5250 and Data Transfer - Connects to the same IBM i Access Host Servers on the same ports in the same way