Question & Answer
Question
About the Sterling File Transfer Service
Answer
About the Sterling File Transfer Service
Sterling File Transfer Service is a cloud service for file-based business interactions with trading partners. An alternative to on-premise software Sterling File Transfer Service allows you to manage a single secure reliable connection to the cloud to reach your partners without the capital expense associated with on premise software or the operational impact on your IT staff.
The company that contracts with IBM? to use Sterling File Transfer Service is referred to in this document as the Sponsor company. Each trading partner that you contract with IBM to set up to use Sterling File Transfer Service is considered a Partner company.
Sterling File Transfer Service provides one-to-many connectivity for file transfers with partners. You connect to the service with one connection that ties to your chosen community of partners we onboard for you.
With Sterling File Transfer Service you can consolidate redundant file transfer servers software and partner connections and leverage the expertise and experience of IBM to optimize the delivery of your B2B file transfers. Automation protocol conversion and file transfer capabilities combine to streamline your file transfer processes. Real time tracking reports and audit data help you meet corporate industry and regulatory requirements and remedy transfer issues.
Security Options
Sterling File Transfer Service supports the following security options for file transfers:
Private and Public Keys
If you have contracted for encryption services you will use a private key and a public key. A private key is used for both decryption and signing messages and should always be protected. A public key is used for encryption and verifying the sender's signature and is intended to be shared with your trading partners so they can encrypt messages for you.
Certificates
If you have contracted for encryption services you will use a certificate. A digital certificate is an electronic identification card that proves who you are when doing business or other transactions on the Internet. It can be either self-signed or issued by a certification authority (CA). The certificate contains a company name a serial number expiration dates a copy of your public key (used for encrypting messages and digital signatures) and the digital signature of the certificate-issuing authority so a recipient can verify that the certificate is real. You are sent the IBM digital certificate containing the IBM public key to use the Sterling File Transfer Service. A private key never needs to be sent across the Internet; only the public key is sent.
If the trading partner does not require a certificate signed by a Certificate Authority you can self-sign a certificate whereby IBM can sign the certificate on behalf of your company and it will appear as if it was generated by your company.
Was this topic helpful?
Document Information
Modified date:
08 December 2018
UID
ibm10758889