I have seen a number of customers do one or more of the following things in their SFG setup in an attempt to "simplify" or "clean up" things.   * delete the user accounts for partners that are listening consumers * delete some user accounts' virtual roots * change the name of the user account that is associated with an SFG partner * delete some partners' default mailboxes   At the time, all of these things seemed like a good idea to the person that did them, but they also come with hidden costs.   All... [More]

Tags:  partners sfg

Author: Manisha Khond   There are certain situations where you want to decode the certificate to verify that it contains the correct information. The easiest way to view the certificate content on Windows host, is to open the certificate and view it’s contents field by field. There are tools available to parse the certificate contents. OpenSSL is free tool and it can decode the contents of the certificate as well.   This is the certificate that we want to decode (Part of the certificate displayed below is erased due to security... [More]

Automatically updating expiring AS2 certificates            This blog is intended to provide steps to aid in replacing an AS2 certificate used in your profile Organization.  In it, I describe a method which can be used to replace the certificate automatically on a specified date.   AS2 requires users to replace expired system certificates configured in the profile Organizations, and defined as the Exchange and Signing certificates.  All certificates, used for any purpose, have an... [More]

Tags:  organization automatically certificate update as2

Manually updating an expiring AS2 Organization certificate This blog is intended to provide a few simple steps to aid in replacing an AS2 certificate used in your profile Organization, when it  is about to expire.  I will outline creating a new certificate, how to update it in the profile Organization, and provide some tips for managing the process of coordinating the replacement of the certificate with partners who need to use it.   AS2 requires users to replace expired system certificates configured in the profile... [More]

Tags:  system organization replace as2 profile certificate

If you are looking to implement Java based REST API Client to invoke B2B APIs, my previous articles would help you. These include working java (REST API Client) classes for 2 of the APIs. REST API Proof Of Concept - Automate Sterling FileGateway Community and Trading Partner creation  REST API Client - upload message to Sterling B2B Integrator Mailbox    These articles covered how to generate JSON input string for... [More]

Tags:  sfg b2bapi sterling kishore json

When you are using the B2B APIs, you can use the Read SSHUserIdentityKey option to see both private keys and public keys in your B2B Integrator currently.   These keys are in base64 encoded format.   To see the keys in the non-base64 encoded format similar to when you are using the B2B Integrator Dashboard to check out the User Identity Key, you would need to copy out the string.   For example:    public key string would show something like below:     "publicKeyData":... [More]

The Sterling File Gateway (SFG) product documentation explains the specifics of what to do in order migrate a SFG instance, but misses something in the planning stage. There is a tool named sfgdbcheck that can be used to tell you how well prepared you are to begin a migration. For the more recent versions of SFG, the tool appears in the /<install>/bin directory as sfgdbcheck.sh for installations with a Linux operating system or in the \<install>\bin directory as sfgdbcheck.cmd for installations with a Windows operating system. The... [More]

Changing the attachment name in a business process is not difficult, but until you know the tricks, it can be maddening. After a little experimentation, I created a sample business process that seems to do the job.  I will spare you the wailing and gnashing of teeth that accompanied my first efforts, sharing only what I found to work. As you will see, there are a few things that will make the journey more pleasant. 1. If your file name will be created from concatenated values, it is probably best to get this out of the way.  (Should... [More]

Tags:  mime smtp attachment info adapter document service pbarrie send get mail

The following is an example onFault that will send an email whenever a failure happens in a workflow. The email will be sent to (and from) the admin account located in the sandbox.cfg file. The email will contain a subject that reads "Business Process 9999999 failed" It will be sent to the smtp host, email server, that is located in the sandbox.cfg. The following bpml is set to fail so you can see how it works. The lines in red bold is the onFault code that can be added to an existing bpml. As always, please test the code out as... [More]

Sterling B2B Integrator allows configuration for external authentication so that users would get authenticated against servers such as LDAP, Active Directory. Here is supporting documentation.   It is not uncommon for some clients to misconfigure authentication policies in authentication_policy.properties . That would lead to authentication errors or Java Exceptions some are hard to troubleshoot. I would like to discuss some common mistakes clients might make and few troubleshooting tips.   I am not discussing some... [More]

Tags:  kishore password_attribute ldap b2b sterling search_filter

NOTE:  This API service is equivalent to Trading Partner > SSH > User Identity Key > Check In option in the dashboard user interface and not the Create option.   The Rest API covers each required field pretty straight forward except on the field of Private Key Data. When creating an  SSHUserIdentityKey using API, it is askin g us to supply privateKeyData (A Base 64-encoded string repr esentation of the private key.... [More]

It’s very easy to send a batch of files from a Windows server to Sterling B2B Integrator(SBI), by using popular sftp clients (such as Filezilla or WinSCP).  Linux/Unix inherently comes with an sftp utility, which can be used to create shell scripts to directly send files via sftp to any SFTP server. One caveat is that every time the sftp put command is executed in Linux/Unix, it will ask the sftp user's password interactively.  This is a guideline on how to set up SBI so that a shell script from Linux/Unix doesn't prompt... [More]

Author: Manisha Khond   Before you request certificate from the Certificate Authority, you have to generate Certificate Signing Request (CSR).   What is a CSR? A CSR or Certificate Signing request is a block of encoded text that is provided to a Certificate Authority when requesting an SSL Certificate. A CSR consists mainly of the public key of a key pair, and some additional information. Both of these components are inserted into the certificate when it is signed. What Information Is Included in a CSR? The CA will use the data from... [More]

We have had some customers ask about allowing the fg_sysadmin user account to have direct access to the /myfilegateway URI (MFG below) in order to upload and download files. This is my two cents worth on that subject.   Most people have seen or heard of Windows/Linux administrators who have two separate accounts on the machine that they administer. They use one account that has their full administrative privileges for doing things that only an administrator can and should do. However, a lot of what administrators do is more mundane work... [More]

Tags:  sfg fg_sysadmin myfilegateway