Planning, Installing, and Configuring Z and I Emulator for Web

A table of contents and an index help you locate task-oriented help panels ... Session information is configured in the HTML file or Z and I Emulator for ... HCLZandIEmulatorforWeb Planning,Installing,andConfiguringZandIEmulatorforWeb Contents Aboutthisbook AbouttheotherZandIEmulatorforWebdocumentation Conventionsusedinthisbook Terminology TermsrelatingtoJava PlanningforZandIEmulatorforWeb IntroducingHCLZandIEmulatorforWeb WhatisZandIEmulatorforWeb? HowdoesZandIEmulatorforWebwork? WhyuseZandIEmulatorforWeb? Acost-effectiveapproachtoconnectivity Centralizedmanagementofconfigurationdata ConnectdirectlytoanyTelnetserver Browser-baseduserinterface Supportsmanydifferentplatformsandnetworkenvironments SupportforJava SupportforInternetProtocolVersion6 Supportsmanynationallanguages Secureconnections CustomHTMLfiles Toolkitforcreatingnewe-businessapplications SupportforWebSpherePortal ConnectionstoDB2databasesonIBMSystemiservers Planningfordeployment UnderstandingtheHTML-basedmodel Understandingtheconfigurationserver-basedmodel Understandingthecombinedmodel Clientdeploymentconsiderations PlanningforJavaontheclient ImprovementstotheclientforJava Limitsofsupport DownloadingaclientwithJava Cannotdownloadacomponentnotinthepreloadlist HTMLfilesdonotcontainsomecomponents MacOSXwithJava MacOSXlimitations SlightlyslowerstartuptimeswithJavaclients LimitationsofspecificJavaplug-ins Limitationswithcustomer-suppliedappletsandJava LimitationswithrestrictedusersandJava BrowsersandJavaplug-ins Java-enabledbrowsers MicrosoftInternetExplorerwithaJavaplug-in FirefoxwithaJavaplug-in Planningforsecurity TransportLayerSecurity(TLS) HowTLSsecurityworks TLSforZandIEmulatorforWeb Webserversecurity Configurationsecurity TheRedirector WhyusetheRedirector? HowtheRedirectorworks Redirectorloadcapacity OperatingsystemssupportedbytheRedirector UsingZandIEmulatorforWebwithafirewall Configuringfirewallports Connectingtoahostsystemthroughaproxyserver UserIDsecurity WebExpressLogon NativeAuthentication WindowsDomainlogon FIPSenvironments Planningfornationallanguagesupport Supportedlanguages Supportedhostcodepages 3270and5250codepages VTcodepages CICSGatewaycodepages JapaneseJIS2004Unicodesupport User-definedcharactermapping UnicodeSupportfori/OSandOS/400 Installing,upgrading,anduninstallingZandIEmulatorforWeb InstallingtheZandIEmulatorforWebserverandrelatedsoftware InstallingZandIEmulatorforWebusingInstallationManager Importantlinks BeforetheZIEWebInstallation PreparingtoInstall InstallingZandIEmulatorforWeb UsingtheInstallationManagerGUItoinstall DeploymentWizard InstallingtheDeploymentWizard DownloadingtheDeploymentWizardinstallationimagefromaZandIEmulatorforWebserver ZIEHostAccessToolkit InstallingtheZIEHostAccessToolkit InstallingintheConsoleMode AboutinstallingintheConsoleMode BeforeinstallingZIEWebonIBMiSeries Installationprocedure InstallingDeploymentwizardinConsolemode InstallingZIEHostAccessToolkitinconsolemode InstallinginSilentMode Installationprocedure Installingtheconfigurationservlet DeployingtheservletonWebSphereApplicationServer UninstallingtheZandIEmulatorforWebserver UninstallingZandIEmulatorforWebusingInstallationManagerConsolemode ConfiguringZandIEmulatorforWeb ConfiguringZandIEmulatorforWebemulatorclients CreatingZandIEmulatorforWebHTMLfiles ConfiguringZandIEmulatorforWebsessions UsingtheDeploymentWizard DistributingtheDeploymentWizardoutputtoyourZandIEmulatorforWebserver UsingZandIEmulatorforWebadministrationandnewuserclients Loadingadministrationandnewuserclients Administrationclients DirectoryUtility Newuserclients UsingZandIEmulatorforWebemulatorclients Loadingemulatorclients Selectingtheappropriateclient WebStartclient InstallingtheWebStartclient ConfiguringyourWebserverforWebStart UpgradingtheWebStartclient AddingWebStartcomponentsaftertheinitialinstall BookmarkingsessionswithWebStart UsingWebStartwithHTTPS RemovingtheWebStartclient Deployingcustomer-suppliedJavaarchivesandclasses UsingtheAdditionalArchivesHTMLparameter DeployingfromthePublishdirectory Hintsandtipsforarchivefiles UsingDatabaseOn-Demandclients DatabasefunctionsinDisplayEmulationclientsandinmacros StartingaDatabaseOn-Demandclient DatabaseOn-Demandpredefinedclients ConfiguringDatabaseOn-Demandforusers ObtainingandinstallingaJDBCdriver Fileformatsfordatabaseaccess UsingmultiplecodepageswithDatabaseOn-Demand SupportedDatabaseOn-Demandcodepages Creatinganddeployingservermacrolibraries DeployingaservermacrolibrarytoaWebserver Deployingaservermacrolibrarytoashareddrive Modifyingsessionpropertiesdynamically SettinguptheinitialHTMLfile SettingtheCodebase AddtheConfigBaseParameter OverridingHTMLparameters Specificsessionpropertiesthatcanbeoverridden Example#1:OverridingtheLUnamebasedontheclient'sIPaddress Example#2:AllowingtheusertospecifythehosttoconnecttousinganHTMLform ConfiguringZandIEmulatorforWebonzSeries Settingupseparateread/writeprivateandpublishdirectories SetupaseparateFileSystemfortheZandIEmulatorforWebprivatedirectory Setupaseparateuserpublishdirectory InstallingtheDevelopmentWizardfromthez/OSserver ConfiguringZandIEmulatorforWebonIBMSystemi Configuring,starting,andstoppingtheZandIEmulatorforWebServiceManageronIBMSystemi Configure Start Stop WorkwithZIEServerstatus StartInformationBundler CreateZIEWebPrinterDefinitionTable UsingtheDeploymentWizardwithIBMSystemi ConfiguringIBMSystemiserversforsecureconnection InstallingandconfiguringZandIEmulatorforWebwithTLSoni/OSandOS/400 ConfiguringaTelnetserverforsecureconnection ConfiguringtheZandIEmulatorforWebCustomizedCAskeyring Clientauthentication ConfiguringtheZandIEmulatorforWebOS/400proxyforsecureconnections SecureWebserving UnicodeSupportfori/OSandOS/400 Generalinformation Hostprogramminginformation Eclipse-Pluginsupport CreatingZandIEmulatorforWebplug-ins SettingSessionPropertiesDynamically Usingaseparateuserpublishingdirectory ViewIDsusedinZandIEmulatorforWebplugin LimitationsonusingZandIEmulatorforWebinaEclipse-Pluginenvironment ConfiguringZandIEmulatorforWebServertouseLDAP SettingupLDAPsupport Installingtheschemaextensions ConfiguringtheZandIEmulatorforWebservertouseLDAPasadatastore Appendixes AppendixA.Notices AppendixB.Trademarks Aboutthisbook ThePlanning,Installing,andConfiguringZandIEmulatorforWebguide helpsyoutoplanfor,install,andconfiguretheZandIEmulatorforWebprogram. Thisbookiswrittenforadministrators.Itcontainsthreemajor parts. PlanningforZandIEmulatorforWebgivesyouinformationaboutZandIEmulatorforWebfor youtoconsiderbeforeinstallationanddeployment.Forexample, whichserverplatformwillyouuse?Whichdeploymentmodelwillyou use?Howwillyouhandlesecurity? Installing,upgrading,anduninstallingZandIEmulatorforWeboffersstep-by-stepproceduresbased oneachoperatingsystem. ConfiguringZandIEmulatorforWebdescribesdifferentconfigurationmodels tospecifyhowsessionconfigurationinformationisdefinedandmanaged, howtodynamicallymodifysessionconfigurationinformation,howto customizenewclients,andhowtodeployZandIEmulatorforWebtoyourusers. AfteryouinstallandconfigureZandIEmulatorforWeb,usetheonline helptolearnhowtodefinesessionsandperformotheradministrative tasks. Planning,Installing,andConfiguringZandIEmulatorforWebis alsoavailableathttps://zieweb.hcldoc.com/help/index.jsp. AbouttheotherZandIEmulatorforWebdocumentation Most ofthedocumentationisalsoincludedontheZandIEmulatorforWebproduct orToolkit. Onlinehelp.Theonlinehelpistheprimary sourceofinformationforadministratorsandusersafterZandIEmulatorforWebinstallation iscomplete.ItprovidesdetailedstepsonhowtoperformZandIEmulatorforWebtasks. Atableofcontentsandanindexhelpyoulocatetask-orientedhelp panelsandconceptualhelppanels.WhileyouusetheZandIEmulatorforWebgraphical userinterface(GUI),helpbuttonsbringuppanel-levelhelppanels fortheGUI. Readmefile.Thisfile,readme.html,contains productinformationthatwasdiscoveredtoolatetoincludeinthe productdocumentation. WebExpressLogonReference.Thisbook providesastep-by-stepapproachforunderstanding,implementing, andtroubleshootingWebExpressLogon.ItoffersanoverviewofWeb ExpressLogon,severalstep-by-stepexamplestohelpyouplanfor anddeployWebExpressLogoninyourownenvironment,aswellasseveral APIsforwritingcustomizedmacrosandplug-ins. MacroProgrammingGuide.Thisbookdescribes howtocreateZandIEmulatorforWebmacrosforautomatinguserinteractions withhostapplicationsorforpassingdatabetweenahostapplication andanativeapplication.Thisbookprovidesdetailedinformation onallaspectsofdevelopingmacrosandincludesrevisedinformation aboutthemacrolanguagepreviouslypublishedintheHostAccessBeans forJavaReference. HostPrintingReference.Afteryouconfigure hostsessions,usetheHostPrintingReferencetoenableyourusers toprinttheirhostsessioninformationtoalocalorLAN-attached printerorfile. ZIEHostAccessToolkit.This bookexplainshowtoinstallandconfiguretheZandIEmulatorforWebToolkit. TheZandIEmulatorforWebToolkitcomplementstheZandIEmulatorforWebbaseproduct byofferingJavabeansandothercomponentstohelpyoumaximizethe useofZandIEmulatorforWebinyourenvironment. HostAccessBeansforJava.Thisbook ispartoftheZandIEmulatorforWebToolkit.Itservesasareferencefor programmerswhowanttocustomizetheZandIEmulatorforWebenvironmentusing Javabeansandcreatemacrostoautomatestepsinemulatorsessions. HostAccessClassLibraryforJava. ThisbookispartoftheZandIEmulatorforWebToolkit.Itservesasareference forprogrammerswhowanttowriteJavaappletsandapplicationsthat canaccesshostinformationatthedatastreamlevel. ZandIEmulatorforWebJ2EEConnector. ThisbookispartoftheZandIEmulatorforWebToolkit.Itservesasareference forprogrammerswhowanttowriteappletsandservletsthataccess JavaEnterpriseEdition(J2EE)compatibleapplications. Conventionsusedinthisbook ThefollowingtypographicconventionsareusedinPlanning, InstallingandConfiguringZandIEmulatorforWeb: Table1.Conventionsusedinthisbook Convention Meaning Monospace Indicatestextyouneedtoenter atacommandpromptandvaluesyouneedtouseliterally,suchas commands,functions,andresourcedefinitionattributesandtheir values.Monospacealsoindicatesscreentextandcodeexamples. Italics Indicatesvariablevaluesyouneed toprovide(forexample,yousupplythenameofafileforfile_name).Italicsalsoindicatesemphasisand thetitlesofbooks. Return Referstothekeylabeledwiththe wordReturn,thewordEnter,ortheleftarrow. > Whenusedtodescribeamenu,shows aseriesofmenuselections.Forexample,"ClickFile>New" means"FromtheFilemenu,clicktheNewcommand." Whenusedtodescribeatreeview, showsaseriesoffolderorobjectexpansions.Forexample,"Expand ConfigServlet>Sysplexes>Plex1>J2EEServers>BBOARS2"means: ExpandtheConfigServletfolder ExpandtheSysplexesfolder ExpandthePlex1folder ExpandtheJ2EEServersfolder ExpandtheBBOARS2folder Thisgraphicisusedtohighlightnotesto thereader. Thisgraphicisusedtohighlighttipsfor thereader. Terminology Thissectiondescribestheterminologyusedthroughoutthisbook. applet AprogramwritteninJavathatisreferencedinanHTMLfile. AnappletislaunchedbyaJavaVirtualMachine(JVM)runningina Webbrowser. application Aprogramorsuiteofprogramsthatperformataskorspecific function. defaultpublishdirectory ThedefaultpublishdirectoryisthesubdirectoryZIEWebin yourZandIEmulatorforWebserver'sinstalldirectory,forexample,c:\Program Files\HCL\ZIEForWeb\ZIEWeb\onWindowsplatformsand/opt/HCL/ZIEForWeb/ZIEWebon AIX,Linux,Solaris,/QHCL/Programs/HCL/ZIEForWeb/ZIEWebon i(as/400),and/usr/lpp/ZIEWeb/zieforweb/ZIEWebon z/OSplatforms. emulatorclient AnemulatorclientisaZandIEmulatorforWebclientthatlaunches aterminalemulatorsession. separateuserpublishdirectory Providesaseparatewriteablelocationfordeployingcustom HTMLfiles,isolatingthemfromthefilesprovidedbyZandIEmulatorforWeb. ThiskeepstheZandIEmulatorforWebpublishdirectoryread-onlyandmakes iteasiertoapplyfutureZandIEmulatorforWebupgrades. Note: Other user-modifiedfiles(suchascustomappletsandHACLprograms)still needtorunfromtheZandIEmulatorforWebpublishdirectory. WebApplicationServer TheruntimefordynamicWebapplications.Webapplicationserver includessupportforJavaservlets,JavaServerPages(JSP),andother enterpriseJavaapplicationprogramminginterfaces(APIs).AWebapplication serverprovidescommunications,resourcemanagement,security,transaction management,andpersistencecapabilitiesforWebapplications.It alsotypicallyincludesanadministrationinterfaceformanagingthe serveranddeployedapplications. Webserver AserverontheWebthatservesrequestsforHTTPdocuments. AWebservercontrolstheflowoftransactionstoandfromthebrowser. Itprotectstheconfidentialityofcustomertransactionsandensures thattheuser'sidentityissecurelytransmittedtotheserver. WebStartclient TheWebStartclientallowsuserstorunZandIEmulatorforWebsessions withoutabrowser.UsersstartZandIEmulatorforWebsessionsfromtheJava WebStartApplicationManager. TermsrelatingtoJava Notethefollowingtermsandtheiruseinthisdocument. Java ReferstoJavaRuntimeEnvironment(JRE)oneither theZIEserverortheZIEWebclient. Java-enabledbrowser AWebbrowserthatrunsJavaappletsontheJavaJVMofaninstalled Javaplug-in,forexample,FirefoxandInternetExplorerwithaJava plug-in.Formoreinformation,refertoBrowsersandJavaplug-ins. Javaemulatorclient AversionoftheZandIEmulatorforWebclient.TheJavaversionconsists ofacompletesetofZandIEmulatorforWebclientcomponentscompiledwith aJavacompiler. PlanningforZandIEmulatorforWeb IntroducingHCLZandIEmulatorforWeb WhatisZandIEmulatorforWeb? HCLZandIEmulatorforWebprovidescosteffectiveandsecurebrowser-based andnon-browser-basedhostaccesstousersinintranet-basedandextranet-based environments.ZandIEmulatorforWebisinstalledonaWebserver,simplifying administrativemanagementanddeployment,andtheZandIEmulatorforWebapplet orapplicationisdownloadedtotheclientbrowserorworkstation, providinguserconnectivitytocriticalhostapplicationsanddata. ZandIEmulatorforWebsupportsemulationforcommonterminaltypes,communications protocols,communicationsgateways,andprinters,includingthefollowing: TN3270andTN3270Eterminals TN5250terminals VT52,VT100,VT220,VT320,andVT420terminals TheSecureShell(SSH) TransportLayerSecurity(TLS) FileTransferProtocol(FTP) CustomerInformationandControlSystem(CICS)TransactionGateway TN3270EandTN5250printers YoucanusetheJavacomponent-basedZIEHostAccessToolkitto createcustomizede-businessapplications.ThisToolkitcontainsa richsetofJavalibrariesandapplicationprogramminginterfaces: HostAccessClassLibrary(HACL),HostAccessBeansforJava,and JavaEnterpriseEdition(J2EE)connectors.ZandIEmulatorforWebalsoincludes DatabaseOn-Demand,whichprovidesaninterfaceforsendingStructured QueryLanguage(SQL)queriestoIBMDB2databaseshostedonIBMSystem i7systems. HowdoesZandIEmulatorforWebwork? ThefollowingfigureandexplanationshowhowaZandIEmulatorforWebsystem works.ZandIEmulatorforWebisaclient/serversystem.ZandIEmulatorforWebclients areJavaappletsthataredownloadedfromtheWebservertoaWeb browseronaremotecomputer. Figure1.HowZandIEmulatorforWebworks Step1.Theuseropensabrowserandclicks ahyperlink. Step2.HCLZandIEmulatorforWebappletdownloads totheclientworkstation. Step3.Whentheappletisdownloaded,HCLZandIEmulatorforWebconnects directlytoanyTelnetservertoaccesshostapplications. SessioninformationisconfiguredintheHTMLfileorZandIEmulatorforWebconfiguration server.Formoreinformationabouttheconfigurationserver,seePlanningfordeployment. ZandIEmulatorforWebclientappletscanberunasWebStart clients.WebStartclientsaredownloadedfromtheWebserverandstoredon theclientcomputer.Aftertheinitialdownload,theclient isloadedfromthelocalmachine. ZandIEmulatorforWebincludesthefollowingadministrativecomponents: TheDeploymentWizard,atoolforcreatingemulatorclientHTML files.TheDeploymentWizardenablesadministratorstoquicklyand easilybuildZandIEmulatorforWebHTMLfilesthatarecustomizedforan organization'sneeds. Administrationclientsthatcanbeusedbysystemadministrators todefinecommonsessions,createusersandgroups,andperformother administrativetasksontheZandIEmulatorforWebserver. Inaddition,anumberofpredefinedclientsarealsosuppliedwithZandIEmulatorforWebto demonstrateZandIEmulatorforWeb'sclientfunctionsforusersandadministrators (forexample,emulation,DatabaseOn-Demand,and problemdeterminationutilities). WhyuseZandIEmulatorforWeb? Acost-effectiveapproachtoconnectivity Youcanreducemaintenancecostsandincreaseyourreturnoninvestment byinstallingZandIEmulatorforWebonaWebserver,eliminatingtheneed tomanageindividualuserdesktops. SincetheappletsresideonaserverandaredownloadedtoWeb browserswhenneeded,younolongerhavetoschedulemaintenanceand upgrades.Upgradethesoftwareontheserveranduserscanreceive theupgradethenexttimetheyaccesstheclientapplet. Centralizedmanagementofconfigurationdata Administratorscancentrallydefineandcontrolallsessionconfiguration informationavailabletotheirusers,includingconnectionoptions, securityfeatures,macrodefinitions,keyboardspecifications,and colormappings.Furthermore,administratorshavefullcontrolover whichfieldstheusercanorcannotmodify,andcanchoosewhereuser updatesshouldbestored. OnWindowsplatforms,thedefaultZandIEmulatorforWebgraphical userinterfaceisbasedontheNimbusLookandFeelprovidedbyJava 1.8andlater. ConnectdirectlytoanyTelnetserver WithZandIEmulatorforWeb,theclientappletcontainstheemulation functionality.Withtheemulatorresidingontheclient,themiddle-tier server,suchasIBMCommunicationsServerorathird-partySNAserver, canbeeliminated.Anyperformanceandsecurityissuesintroduced withthisintermediarypiecewillalsoberemoved.Oncetheapplet isservedtotheclient,itiseasytoconnectdirectlytoanystandard Telnetserverthatprovidesthebestaccesstotherequireddata. Youcanaccessmanyhostsessionsconcurrently.Byeliminatingthe needforamiddle-tierserver,ZandIEmulatorforWebalsominimizescapacity restrictions.Toseehowthisworks,refertoFigure1. Browser-baseduserinterface Thebrowser-basedaccessofZandIEmulatorforWebgivesyou asimplewaytocentrallymanageanddeploycriticalhostapplications anddata.ZandIEmulatorforWebusesthepowerofJavatechnologytoopen thedoorstoyourhostsystemwheneveryouneedit,whereveryouneed it,directlyfromyourbrowser.Justclickonahyperlinktolaunch theZandIEmulatorforWebJavaapplet.ThisWeb-to-hostconnectivitysolution providessecureWeb-browseraccesstohostapplicationsandsystem datathroughJava-basedemulation,soyoucantakeexistinghostapplications totheWebwithoutprogramming.BecauseZandIEmulatorforWebisJava-based, itsinterfacehasthesamelook-and-feelacrossvarioustypesofoperating environments. OnWindowsplatforms,thedefaultZandIEmulatorforWebclient graphicaluserinterfaceisbasedontheNimbusLookandFeelprovided byJava1.8andlater. Note: ZandIEmulatorforWebportletsinheritthelookoftheirportal server. Supportsmanydifferentplatformsandnetworkenvironments ZandIEmulatorforWebserversandclientsaresupportedona widevarietyofplatformsandcanbeusedoveranyTCP/IPnetwork. Thisgivesyouagreatdealofflexibilityinsettingupyoursystem andenablesZandIEmulatorforWebtobedeployedinyourcomputingenvironment withouthavingtopurchasenewhardware. SupportforJava ZandIEmulatorforWebiscompatiblewithbrowsersthatsupport Javastandards.Inaddition,somenewfeaturesofZandIEmulatorforWebtake advantageofcapabilitiesofferedonlybyJava. SupportforInternetProtocolVersion6 SupportforInternetProtocolVersion6requiresJava 1.8orhigher.ZandIEmulatorforWebVersion2.0supportsJava1.8orhigher. AnInternetProtocolisaprotocolusedtoroutedatafromits sourcetoitsdestinationthroughanInternetenvironment.AnIPis anintermediarybetweenhigherprotocollayersandthephysicalnetwork. InternetProtocolVersion6isthereplacementforInternetProtocol Version4.InternetProtocolVersion6expandsthenumber ofavailableIPaddressesandmakesimprovementsinroutingandnetwork configuration.BothInternetProtocolVersion6andInternetProtocol Version4weredesignedbytheInternetEngineeringTaskForce(IETF). MostoftheInternetcurrentlyusesInternetProtocolVersion4. InternetProtocolVersion6isexpectedtoreplaceInternetProtocol Version4overaperiodofyears. TheZandIEmulatorforWebserveralsosupports InternetProtocolVersion6fortheRedirector.Formoreinformation, refertoRedirectorsupportforIPv6. Supportsmanynationallanguages ZandIEmulatorforWebisavailableinmultiplelanguages,including double-bytecharacterset(DBCS)languages.SupportfortheEuropean currencysymbol,aswellaskeyboardandcodepagesupportformany morelanguagessuchasArabic,HebrewandThai,isalsoprovided. Alllanguageversionsareavailableonthesamemedia,andmultiple languageversionscanbeaccessedconcurrently. Secureconnections UsingTransportLayerSecurity(TLS),ZandIEmulatorforWebextends securehostdataaccessacrossintranets,extranets,andtheInternet. MobileworkersaccessasecureWebsite,receiveauthenticationand establishcommunicationwithasecureenterprisehost.Withclient andservercertificatesupport,ZandIEmulatorforWebcanpresentadigital certificatetotheTelnetserver-suchasIBMCommunicationsServer forz/OS-forauthentication. ZandIEmulatorforWebcanalsobeconfiguredforuseinenvironmentsthat includefirewalls.Firewallportsneedtobeopenedforthefunctions definedinyourZandIEmulatorforWebsessiondefinitions.Formoreinformation, refertoUsingZandIEmulatorforWebwithafirewall. CustomHTMLfiles ZandIEmulatorforWebincludesaDeploymentWizardthatyou canusetocreatecustomHTMLfiles.Withthesefilesyoucantailor thecontentoftheclientandthefunctionnecessarytomeettheneeds ofspecificgroupsofusers.FormoreinformationabouttheDeployment Wizard,refertoConfiguringZandIEmulatorforWebemulatorclients. Toolkitforcreatingnewe-businessapplications ZandIEmulatorforWebincludestheJavacomponent-basedZIEHostAccess Toolkitforcreatingcustomizede-businessapplications.ThisToolkit containsarichsetofJavalibrariesandapplicationprogramming interfaces,includingtheHostAccessClassLibrary(HACL),HostAccess BeansforJava,andJavaEnterpriseEdition(J2EE)connectors. HACLprovidesanon-visualAPIforinteractingwithback-end hostmachinesrunningapplicationsoriginallydesignedforhumaninteraction. Hostapplicationsrelyonreadablecharacterpresentation,formatted fields,color-coding,andkeyboardresponses.HACLprovidesspecialized classesforfunctionalitiesneededtomimictraditionalinteraction withaseriesofhostscreenpresentations(greenscreens).HACLcontains noGUI(visiblecomponent)classes.Forexample,aJavaprogramcould berunningonamainframeasasecondaryapplication.Thesecondary applicationprograminteractsfirstwithanothermainframerunning aCICSdataapplication,andthenwithaclientbrowserthroughdynamically generatedHTMLpages.Thesecondaryapplicationinterpretsclient inputsintosimulatedterminalactionswhicharesenttotheCICS machineusingtheHACLAPI.TheresponsescreensfromtheCICSmachine arecapturedusingHACLAPIs,convertedintodynamicHTMLpages,and sentbacktotheclient. ZandIEmulatorforWebJ2EEConnectorprovidesasetofResource adaptersthatcommunicateto3270,5250,CICS,andVThosts.These resourceadaptersaredeployedtoaconformingapplicationserver, suchasIBMApplicationServer.TheuserscanwriteWebapplications usingtheAPIsprovidedinZandIEmulatorforWebJ2EEConnectorviaWebSphere StudioApplicationDeveloperIntegrationEdition. SupportforWebSpherePortal ZandIEmulatorforWebcanrunasaportletonPortalServer,acomponent ofWebSpherePortal.PortalServerhassophisticateddesktopmanagement andsecurityfeaturesthatofferadministratorsmorecontrolover useraccessrightsanduserscontrolovertheappearanceandarrangement oftheportaldesktop. AdministratorscancreatecustomizedZandIEmulatorforWebportletsquickly andeasilyusingtheDeploymentWizardandthenloadthemdirectly intoPortalServer. Note: PortalServerisaseparateproduct andrequiresindependentinstallation. ConnectionstoDB2databasesonIBMSystemiservers DatabaseOn-DemandisincludedwithZandIEmulatorforWebtoprovideaccess toDB2informationstoredonIBMSystemi5serversusingaJavaDatabase Connectivity(JDBC)driver.DatabaseOn-DemandisaJavaappletthat allowsyoutoperformStructuredQueryLanguage(SQL)requeststo IBMSystemi5databasesthroughaJDBCdriver.DatabaseOn-Demand isaseparateappletfromtheZandIEmulatorforWebappletandisstarted byaseparateHTMLfile.YoucanalsousetheDatatransfersupport fromwithinanemulatorsessiontoperformSQLrequestsifyouneed bothterminalemulationandsupportforSQLqueries. Planningfordeployment ZandIEmulatorforWebprovidesaccesstohostapplicationsfromaWeb browser.ThebrowserdownloadstheZandIEmulatorforWebJavaappletfrom theWebserverandthenconnectstoanyTelnetservertoaccesshost applications.TheZandIEmulatorforWebappletneedsconfigurationinformation todeterminewhichhosttoconnecttoandotherhostsessionproperties. ThisconfigurationinformationcanbeprovidedtotheZandIEmulatorforWebapplet fromanHTMLfilethatisusedtolaunchZandIEmulatorforWeborbytheZandIEmulatorforWebconfiguration server.Theconfigurationserverisapartofthatcentrallystores sessionconfigurationinformationanduserpreferencesbyuserand groupIDs.Usersthenaccesssessioninformationanduserpreferences bycontactingtheconfigurationserver.Theconfigurationserveris managedthroughtheadministrationclient.Forinformationonconfiguring theZandIEmulatorforWebconfigurationserver,seetheonline help. YoucancreatecustomclientHTMLfilesusingtheDeploymentWizard. WhencreatingtheseHTMLfiles,youcanchoosefromthreedifferent configurationmodelstospecifyhowsessionconfigurationinformation anduserpreferencesaredefinedandmanaged:theHTML-basedmodel, theconfigurationserver-basedmodel,andthecombinedmodel. Thesemodelsaredescribedbelow.Fordetailedinformationoneach modelandbenefitsandlimitationstousingeachmodel,seetheonlinehelp. UnderstandingtheHTML-basedmodel IfyouchoosetheHTML-basedmodel,allhostsessionconfiguration informationiscontainedintheHTMLfileitself,andnothingmore isneededtodefinehostsessions.Therefore,youarenotrequired tousetheconfigurationservertospecifysessions,whichmeansyou donothavetoopenupaportonyourfirewall.Ifyouallowusers tosavechangestothehostsessionconfigurationinformation,their changesarestoredonthelocalfilesystemwherethebrowserisrunning. Youaresuggestednotusingtheport8999becauseyou donotneedtostarttheZIEserverbyusingtheHTML-basedmodel. Inthiscasetheserverresourceissaved. ThisoptionofdefiningconfigurationinformationintheHTMLfiles isonlyavailableinclientsthatarecreatedusingtheDeployment Wizard. Figure2.HTML-basedmodel Understandingtheconfigurationserver-basedmodel Intheconfigurationserver-basedmodel,hostsessioninformation ismaintainedontheconfigurationserverusingtheAdministration client,andtheinformationisdefinedusingauserandgroupstructure. Bydefault,theconfigurationserverstoresitsdatadirectlyontheZandIEmulatorforWebserver machine,thoughitcanbeconfiguredtouseLDAPinstead.Usersaccess theirconfigurationsusingeithercustomHTMLfilescreatedinthe DeploymentWizardorbyusingoneofseveralHTMLfilesthatareprovided aspartofZandIEmulatorforWeb.UserIDsaredefinedintheconfiguration server,andinmostcasestheuserneedstologontotheZandIEmulatorforWebserver beforeviewinghissessions.Ifadministratorsallowuserstosave changes,userpreferencesarestoredintheconfigurationserverby userID.Becausetheircustomizationsaresavedontheconfiguration server,thismodelmaybethebestchoiceifusersneedtoaccess theirsessionsfrommultiplemachines. Bydefault,theWebbrowsercommunicatesdirectlytotheconfiguration server.Ifyoucommunicatethroughafirewall,youneedtoopenthe configurationserver'sportonthefirewall.Alternatively,youcan usetheconfigurationservlettoeliminatetheneedtoopentheconfiguration server'sportonthefirewall.TheWebbrowserconnectstotheconfiguration servletoveranHTTPorHTTPSconnectionandtheconfigurationservlet theninteractswiththeconfigurationserver.SeeConfiguring theconfigurationservletformoreinformationaboutusingthe configurationservlet. Figure3.Configurationserver-basedmodelandcombinedmodel Figure4.Configurationserver-basedmodelandcombinedmodelusingconfigurationservlet Understandingthecombinedmodel ZandIEmulatorforWebsupportsacombinedmodel,wherethehostsession informationisdefinedintheconfigurationserver(liketheconfiguration server-basedmodel)anduserupdatesaresavedontheuser'smachine (liketheHTML-basedmodel).Inaddition,liketheHTML-basedmodel, usersofthecombinedmodeldonotneedtologontotheZandIEmulatorforWebserver toviewtheirsessions. Clientdeploymentconsiderations Additionally,forclientdeploymentconsiderations,you needtodecidewhichversionofJavatouse(seePlanningforJavaontheclient). PlanningforJavaontheclient Thischapterprovidesdetailedinformationrelatedto runningtheZandIEmulatorforWebclientonaJava-enabledbrowser. ImprovementstotheclientforJavadescribesfunctions oftheZandIEmulatorforWebJavaclient. DownloadingaclientwithJavadescribesadvancedfeaturesof theZandIEmulatorforWebclientthatareavailableonlywithaJava-enabled browser. MacOSXwithJavadiscussesissuesinvolvedinusingtheApple MacOSXasaZandIEmulatorforWebclientwithJava. ImprovementstotheclientforJava WiththeJavaclient,youcandothefollowing: InstalltheJavaclientfromaLANdriveorDVD drive. SharetheJavaclientbetweenmorethanoneuser onWindows. RemovetheJavaclientinoneoperation,without clearingthecacheofJavaplug-in. UpgradetheJavaclientinthebackground. Note: Thefollowingrestrictionapply: A fewJavaclienttypescannotbeupgradedinthebackground. SeeLimitsofsupportformoreinformation. Almost allZandIEmulatorforWebJavaclientssupporttheseimprovements. TheJavaWebStartclientalsosupportstheseimprovements. Limitsofsupport ThefollowingtypesofJavaclientsdonotsupport theimprovementstotheJavaclient: ProcessCollectionwindowforPrintScreenCollection SupportforthesecureShell(SSH)forVTdisplaysessionsand secureFileTransferProtocol(sftp)sesstions AutoIME/on-the-SpotConversion PrintScreenEnhancements InternetProtocolVersion6(IPv6) Accessbilityfeatures DuplicateKeySupport CustomizablePopupKeypad MousewheelSupport Forbidirectionallanguages,supportisnowprovidedforOS/400 CodeCharacterSetIdentifiers(CCSIDs)fordisplayingUnicodecharacters. DownloadingaclientwithJava Thefollowingsectionsdiscussthelimitationsindownloading aclientwithJava. Cannotdownloadacomponentnotinthepreloadlist WiththeJavaclient,ausercannotdownload aZandIEmulatorforWebclientcomponentthatisnotintheoriginalpreload list.Consequently,youneedtospecifyallthecomponentsthatyour usersmightrequireinthepreloadlist. Thislimitationiscausedbyaconflictbetweenthemethodused byaclienttodownloadcomponentsnotonthepreload listandsecurityrestrictionsimposedbytheJavaplug-in. HTMLfilesdonotcontainsomecomponents WithJava,thedefaultclientHTMLfiles(default_xx.html,wherexxisthe two-letterlanguagesuffix)donotcontainthefollowingclientcomponents: Datatransfer 5250filetransfer 5250hostprintsupport Import/export SLP Thaisessions FTPCodepageConverter Bidirectionalsessions 5250Hindisessions DBCSsessionsusinguser-definedcharactersettings ZipPrintinDBCSsessions Theselessfrequentlyusedcomponentswereremovedfrom thepreloadlistoftheJavadefaultdownloadHTMLfilestoshorten downloadtime.However,withtheJavaclient,anycomponent notinthepreloadlistcannotbedownloadedlater. Ifyouwantsomeorallofthesecomponentstobeinthepreload list,performoneofthefollowingactions: UsetheDeploymentWizardtocreateaclient JavaHTMLfilethatcontainsthecomponentsthatyouneed. Usethedebugversionofthedefaultclient(defaultdebug_xx.html, wherexxisthetwo-letterlanguagesuffix).Thedebugversioncontains allthecomponents.However,thedebugversionofthedefaultclient islargerthanthenon-debugversion. MacOSXwithJava ZandIEmulatorforWebMacOSXemulatoranddatabaseclients supportSafari,Firefox,andtheMacversionofInternetExplorer.ZandIEmulatorforWebdoes notsupporttheadministrationclientsonMacOSX.ZandIEmulatorforWebVersion2.0supports Java1.8orhigher. TheDuplicateKeySupportfeaturerequiresaJavaPlug-in of1.8orneweronMacintoshclients.However,ZandIEmulatorforWebVersion 2.0supportsJava1.8orhigher. MacOSXlimitations MacOSXdoesnotsupporttheJavaclient improvementsdescribedinImprovementstotheclientforJava. SlightlyslowerstartuptimeswithJavaclients WithaJava-enabledbrowser,theZandIEmulatorforWebclient startsalittlemoreslowly(5to15secondsslower,dependingon theworkstationtype).Thedelayiscausedbythesystemloadingthe Javaplug-in. Also,withaJava-enabledbrowser,ahostsession ontheZandIEmulatorforWebclientdesktopcantakealittlelongertostart. LimitationsofspecificJavaplug-ins IfyouareusingaOracleJavaplug-inandHindicharacters arenotdisplayedcorrectly,makesureyourOracleJRElevelisthe latest. Limitationswithcustomer-suppliedappletsandJava Ifauserrunsacustomer-suppliedapplet(thatis,an appletwrittenbyyourcompanyorathirdparty)withasession(such as3270Display)launchedfromaJavaZandIEmulatorforWebclient,andif thisappletrequiresanyJavapermissions,youaresuggestedtaking oneofthefollowingactionstomeetthesecurityrequirementsof Java: TheappletmustbearchivedinasignedJava.JARfile. Thepermissionsmustpreviouslyhavebeengrantedontheworkstation usingtheJavaPolicyToolthatisprovidedwiththeJavaplug-in. IfyoudonotmeetthesecurityrequirementsofJava, theappletsilentlyfails. LimitationswithrestrictedusersandJava RestrictedusersdonothavetheauthoritytoinstalltheJava plug-in.AuserwithadministrativeauthoritymustinstalltheJava plug-in. BrowsersandJavaplug-ins ThissectiondiscussesissuesinvolvedinusingJava-enabled browsersandJavaplug-ins. Java-enabledbrowsers AJava-enabledbrowserdoesnothaveaJVMincludedwith it.ItcandisplayHTMLfilesonitsown,butitneedsaseparate Javaplug-ininstalledtolaunchaJavaappletsuchastheZandIEmulatorforWebclient. ExamplesofJava-enabledbrowsersareFirefoxandMicrosoft InternetExplorerwiththeJavaplug-ininstalled. MicrosoftInternetExplorerwithaJavaplug-in WhenaJavaplug-inisproperlyinstalledandconfigured onaWindowsclientworkstation,MicrosoftInternetExplorerwill functionasaJava-enabledbrowser,dependingonhowZandIEmulatorforWebchooses tolaunchtheclient. FirefoxwithaJavaplug-in TorunaJavaappletonFirefox,youneedtoinstall aJavaplug-in. Consequently,ZandIEmulatorforWebexpectsyoutoconfigure theJavaplug-insothatitisthedefault JavaRuntimeforFirefox. Note: Restrictedusers,suchasrestrictedusers sharingaclientonWindows,orrestrictedusersona LinuxorAixworkstation,cannotinstalltheJavapug-in Planningforsecurity WhetheryouareimplementingZandIEmulatorforWebpurelywithinyour corporatenetwork,oryouareusingittoprovideaccesstoyourhost systemsovertheInternet,securityisaconcern.Thischapterprovides anoverviewofZandIEmulatorforWebsecurity. TransportLayerSecurity(TLS).Provides encryption,certificate-basedauthentication,andsecuritynegotiations overanestablishedTelnetorFTPconnection.SeeTLSforZandIEmulatorforWebfor details. TheRedirector.SupportsTLSbetweenZandIEmulatorforWebclients andtheZandIEmulatorforWebserver.SeeTheRedirectorfor details. Firewalls.YoucanconfigureZandIEmulatorforWebtogothroughafirewall. SeeUsingZandIEmulatorforWebwithafirewallfordetails. UserIDsecurity.IncludesWebExpressLogon,NativeAuthentication, andWindowsDomainlogon.SeeUserIDsecurityfordetails. FederalInformationProcessingStandards(FIPS)environments. SeeFIPSenvironmentsifyourenvironmentrequiresthatyoursecurity componentsuseFIPS-certifiedcomponents/modules. TransportLayerSecurity(TLS) HowTLSsecurityworks TLSisbasedontheSSLprotocol.TLSusestheinitial handshakeprotocolforestablishingclient/serverauthenticationand encryption.FordetailedinformationonTLS,seethedescriptionofTheTLSProtocolVersion1.0. TheTLSprotocolusespublic-keyandsymmetric-keycryptographic technology.Public-keycryptographyusesapairofkeys:apublic keyandaprivatekey.Informationencryptedwithonekeycanbedecrypted onlywiththeotherkey.Forexample,informationencryptedwiththe publickeycanbedecryptedonlywiththeprivatekey.Eachserver's publickeyispublished,andtheprivatekeyiskeptsecret.Tosend asecuremessagetotheserver,theclientencryptsthemessageby usingtheserver'spublickey.Whentheserverreceivesthemessage, itdecryptsthemessagewithitsprivatekey. Symmetric-keycryptographyusesthesamekeytoencryptanddecrypt messages.Theclientrandomlygeneratesasymmetrickeytobeused forencryptingallsessiondata.Thekeyisthenencryptedwiththe server'spublickeyandsenttotheserver. TLSprovidesthreebasicsecurityservices: Messageprivacy Achievedthroughacombinationofpublic-keyandsymmetric-key encryption.Alltrafficbetweenaclientandaserverisencrypted usingakeyandanencryptionalgorithmnegotiatedduringsession setup. Messageintegrity Ensuresthatsessiontrafficdoesnotchangeenroutetoits finaldestination.TLSusesacombinationofpublic/privatekeysand hashfunctionstoensuremessageintegrity. Mutualauthentication Exchangeofidentificationthroughpublic-keycertificates. Theclientandserveridentitiesareencodedinpublic-keycertificates, whichcontainthefollowingcomponents: Subject'sdistinguishedname Issuer'sdistinguishedname Subject'spublickey Issuer'ssignature Validityperiod Serialnumber Table2.Tip YoucanalsousesecureHTTP(HTTPS)toensure thataclient'ssecurityinformationisnotcompromisedasitis downloadedfromaserver. Certificates Securityiscontrolledbydigitalcertificatesthatactaselectronic IDcards.Thepurposeofacertificateistoassureaprogramora userthatitissafetoallowtheproposedconnectionand,ifencryption isinvolved,toprovidethenecessaryencryption/decryptionkeys. TheyareusuallyissuedbyCertificateAuthorities(CAs),whichare organizationsthataretrustedbytheindustryasawholeandwhose businessistheissuingofInternetcertificates.ACA'scertificate, whichisalsoknownasarootcertificate,includes(amongotherthings) theCAsignatureandavalidityperiod. Encryptionandauthenticationareperformedbymeansofapair ofkeys,onepublic,oneprivate.Thepublickeyisembeddedinto acertificate,knownasasiteorservercertificate.Thecertificate containsseveralitemsofinformation,includingthenameoftheCertificate Authority(CA)thatissuedthecertificate,thenameandpublickey oftheserverorclient,theCA'ssignature,andthedateandserial numberofthecertificate.Theprivatekeyiscreatedwhenyoucreate aself-signedcertificateoraCAcertificaterequestandisused todecryptmessagesfromclients. ATLSsessionisestablishedinthefollowingsequence: Theclientandtheserverexchangehellomessagestonegotiate theencryptionalgorithmandhashingfunction(formessageintegrity) tobeusedforthesession. TheclientrequestsanX.509certificatefromtheservertoprove itsidentity.Optionally,theservercanrequestacertificatefrom theclient.Certificatesareverifiedbycheckingthecertificate formatandthevaliditydatesandbyverifyingthatthecertificate includesthesignatureofatrustedcertificateauthority(orisself-signed). Theclientrandomlygeneratesasetofkeysthatisusedforencryption. Thekeysareencryptedwiththeserver'spublickeyandsecurelycommunicated totheserver. TLSforZandIEmulatorforWeb TherearethreeareaswhereyoucanconfiguresecurityforZandIEmulatorforWeb: sessionsecurity,Webserversecurity,andconfigurationsecurity. Sessionsecurity ZandIEmulatorforWebVersion2.0usestheTLSprotocolto providesecurityforemulatorandFTPsessions. TheTLSprotocolprovidescommunicationsprivacyacross aTCP/IPnetwork.TLSisdesignedtopreventeavesdropping,message tampering,ormessageforgery.TLSalsoprovidesaframeworkthat allowsnewcryptographicalgorithmstobeincorporatedeasily.ZandIEmulatorforWebsupports encryptionofemulationandFTPsessionsandserver/clientauthentication accordingtoTLSProtocolVersion 1.0. Supportisprovidedforthefollowing: RSAtype-4dataencryptiononconnectionsbetweentheZandIEmulatorforWebclients andTelnetorFTPserversthatsupportTLSversion1.0,1.1,1.2. X.509certificates. Bulkencryptionalgorithmsusingkeysupto168bitsinlength. Authenticationalgorithmsusingkeysupto2048bits inlength. Serverandclientauthentication. Supportforstorageanduseofclientcertificatesontheclient system. Optionalpromptingofuserforclientcertificatewhenrequested byserver. Securesessionindicators.Alockiconisdisplayedonthesession statusbartoindicatetotheuserthatthesessionissecure.The encryptionstrength,forexample,64,128,or256,isalsodisplayed nexttothelockiconandwhenthemousehoversoverthelockicon. TosupportTLSservices,ZandIEmulatorforWebusessixdatabases: ServerKeyStore.jks RedirectorcanbeconfiguredtouseJavaSecureSocketExtension (JSSE).Whenconfiguredwith JSSE,redirectorreadstheprivatekeyandcertificatesfromServerKeyStore.jks. Referto"TheRedirector"formoreinformation. CustomizedCAs.class TheCustomizedCAs.classisaJavaclassfilethatcontains thecertificatesofunknownCAsandself-signedcertificatesthat arenotintheWellKnownTrustedlist.Ifyouuseaself-signedcertificate oracertificatefromanunknownauthority(CA),youneedtoupdate theCustomizedCAs.classfile.However,notethatyoucannolonger createorupdatetheCustomizedCAs.classfileusingtheCertificate ManagementutilityonWindowsorAIXplatforms. WellKnownTrustedCAs.class, andWellKnownTrustedCAs.jks TheWellKnownTrustedCAs.class andWellKnownTrustedCAs.jksarethefilessuppliedbyZandIEmulatorforWebthat containthepubliccertificatesofalltheCAsthatZandIEmulatorforWebtrusts. Youshouldnotmodifythesefiles. WellKnownTrustedCAs.class andWellKnownTrustedCAs.jksand/or CustomizedCAs.classandCustomizedCAs.jksmustbepresentintheZandIEmulatorforWebpublish directory.TheZandIEmulatorforWebclientusesthesefilestotrustthe server'scertificateduringtheTLShandshake. CustomizedCAs.jks You cancreateaCustomizedCAs.jksfilebyusinganyopensourceKeyand CertificateManagementutilityorkeytool.execommand-linetool,which isaJavaKeyandCertificateManagementToolavailableintheJRE forthispurpose. BasicTLSenablementforZandIEmulatorforWebclients WhenyouselecttheTLSprotocolfortheZandIEmulatorforWebclient, abasicTLSsessionisestablished.DuringtheTLSnegotiationprocess, theserverpresentsitscertificatetotheclient.WithbasicTLS enablement,thecertificatemustbesignedbyanauthoritythatthe clienttrusts.TheclientchecksWellKnownTrustedCAs.classfirst, followedbytheCustomizedCAs.class. IfZandIEmulatorforWebisconfiguredtouseJSSEforTLSenablement,WellKnownTrustedCAs.jks andCusomizedCAs.jksfileswillbeused.Theclientrejectsthesession ifitdoesnotfindthesignerinthesefiles.Iftheclientfinds thesignerinthesefiles,thesessionisestablished.Thisisbasic ServerAuthentication.ZandIEmulatorforWeballowsyoutoconfigureamore enhancedformofServerAuthenticationinitsclientconfiguration. Refertothefollowingsectionformoreinformation. Serverauthentication Encryptingthedataexchangebetweentheclientand theserverdoesnotguaranteetheclientiscommunicatingwiththe correctserver.Tohelpavoidthisdanger,youcanenableserverauthentication, sothattheclient,aftermakingsurethattheserver'scertificate canbetrusted,checkswhethertheInternetnameinthecertificate matchestheInternetnameoftheserver.Iftheymatch,theTLSnegotiation willcontinue.Ifnot,theconnectionendsimmediately.Seeserverauthenticationintheonlinehelpformore information. Clientauthentication Clientauthenticationissimilartoserverauthenticationexcept thattheTelnetserverrequestsacertificatefromtheclienttoverify thattheclientiswhoitclaimstobe.Notallserverssupportclient authentication,includingtheZandIEmulatorforWebRedirector.Toconfigure clientauthentication,youneedtodothefollowing: obtaincertificatesforclients sendthecertificatestotheclients configuretheclientstouseclientauthenticationRefertoconfiguringclientstouseclient authenticationintheonlinehelpformoreinformation. ExpressLogon TherearetwotypesofExpressLogon: WebExpressLogon:WebExpressLogonallowsuserstologonto hostsystemsandhostapplicationswithouthavingtoprovideauser IDandpassword.Thisfeatureworksinconjunctionwithyournetwork securityapplicationbyacquiringtheuser'snetworkcredentialsand mappingthemtotheirhostcredentials,eliminatingtheneedtolog onmultipletimes.Dependingonyourhost,thelogonautomationprocess canbemacro-basedorconnection-based.Formoreinformation,refer totheWebExpressLogonReference. CertificateExpressLogon:CertificateExpressLogon ismacro-basedandalsoallowsuserstologonwithouthavingtoenter auserIDandpassword.ItisfunctionallysimilartoWebExpress Logon,althoughitrequiresyoutoconfigureyoursessionforTLS andclientauthentication,andtheCommunicationsServermustsupport andbeconfiguredforExpressLogon.Formoreinformation,refertoExpresslogonintheonlinehelp. Table3.Tip WebExpressLogonoffersatypeoflogonautomation thatusesclient-sidecertificates.Thismodeliscalledcertificate-based WebExpressLogonandissignificantlydifferentthanCertificate ExpressLogon.WithCertificateExpressLogon,clientcertificates areusedtoauthenticateuserstoanExpressLogon-enabledTN3270 serverthatisconfiguredtoautomatetheloginprocess.Withcertificate-based WebExpressLogon,however,clientcertificatesareusedtoauthenticate userstoaWebserveroranetworksecurityapplication,andthelogin processisautomatedbyaplug-inandamacro.Formoreinformation, refertotheWebExpressLogonReference. TLS-basedTelnetsecurity Telnet-negotiatedsecurityallowsthesecuritynegotiations betweentheclientandtheTelnetservertobedoneontheestablished Telnetconnection.YoucanconfigureTelnet-negotiatedsecurityforZandIEmulatorforWeb3270 displayandprintersessions. TheTelnetservermustsupport TLS-basedTelnetsecurity(asdescribedintheIETFInternet-DraftTLS-basedTelnetSecurity) fortheZandIEmulatorforWebclientstouseTelnet-negotiatedsecurity. TheCommunicationsServerforz/OSsupportsTLS-basedTelnetsecurity. Formoreinformation regardingTelnet-negotiatedsecurity,seetheTelnet-negotiated securityoverviewintheonlinehelp.RefertoyourTelnetserver's documentationformoreinformationaboutconfiguringTLSontheTelnet server,andrefertotheSecuritytopicin theonlinehelpformoreinformationaboutconfiguringaclientto connecttoasecureTelnetserver. TLS-basedFTPSecurity ZandIEmulatorforWebprovidesTLS-basedsecurefiletransfer forFTPsessions.TheFTPsessiondoesnotsupportimplicit/unconditional TLSnegotiationstoport990/989.So,port990shouldnotbeused forsecureFTPsessions.Itonlysupportsexplicit/conditional(AUTH command)TLSnegotiationstoanyotherport. Thesecurityproperties oftheFTPsessionareindependentoftheemulatorsession'ssecurity properties.ForanintegratedFTPsession,youneedtoconfigureFTP securityinformationusingthenewSecuritytabinFTPsessionproperties. IfyouconfigureanemulatorsessiontobesecureandtheFileTransfer TypeissettoFTP,theFTPsessionwillnotbesecuredautomatically. Inthissituation,thefollowingmessageappearswhenyouclickthe OKbutton:Ifasecurefiletransfersessionisdesired,configure thesecurityinformationinFileTransferDefaults. TheTLS basedsecureFTPfunctionissupportedbyz/OSV1R2orlater. Examplesofwhentousesessionsecurity Refertothefollowingexamplesassituationswhereyoumightwant tousesessionsecurity: AllowingcustomerstoorderyourproductsovertheInternet.In thissituation,youwanttomakesuretheinformationcustomersgive you,suchasacredit-cardnumber,isencryptedsothatitcannot bestolen.Youalsowanttomakesureinformationyougivetocustomers isprotected. Givingyoursuppliersorbusinesspartnersaccesstoinformation onyourhostcomputers.Youdonotwantanyoneelsetobeableto accessthisdata. Allowingyourstafftohaveaccesstoyourhost-computerinformation fromremotesitesorwhentheyaretraveling. Givingdoctorsaccesstopatientrecordsfromwherevertheyare andmakingsurethatunauthorizedpeoplecannotaccesstheserecords. Webserversecurity YoucanconfigureyourWebservertouseTLS,sothat thedatastreamfromyourWebservertoyourbrowserisencrypted. SeeyourWebserverdocumentationformoreinformationaboutconfiguring yourWebserverforTLS.Oncetheclientisloadedinabrowser,however, itcommunicatesdirectlywiththehost.YoucanconfigureZandIEmulatorforWebto provideTLSsecuritytoyourhostsessions.Formoreinformation, seeConfiguringTLSintheonlinehelp. Configurationsecurity IfyouusetheHTMLmodel,yoursessionconfigurationinformation willbeencryptedifyouuseHTTPS.Forallothermodels,youneed toconfigureZandIEmulatorforWebtousetheconfigurationservletover HTTPS(afterconfiguringyourWebapplicationserver)toencryptthe sessionconfigurationinsteadofcommunicatingdirectlywiththeconfiguration server.SeeInstallingtheconfigurationservletinthisguidefor moreinformationaboutinstallingtheconfigurationservlet,andseeconfiguringtheconfigurationservletintheonline helpformoreinformationaboutconfiguringclientstousetheconfiguration servlet. TheRedirector TheRedirectorisaservicethatrunsontheZandIEmulatorforWebserver andthatallowsaZandIEmulatorforWebclienttocommunicatewithaTelnet serverbyconnectingtoaRedirectorportontheZandIEmulatorforWebserver. Normally,aZandIEmulatorforWebclient: ConnectsdirectlytotheZandIEmulatorforWebservertodownloadthe clientcodeandtoaccesspublicHTMLfiles. AlsoconnectsdirectlytoaTelnetserverthatrunsonorisconnected toa3270,5250,VT,orCICShost. However,whentheRedirectorisused,theRedirectoractsasan intermediarybetweentheclientandtheTelnetserver.Theclient, insteadofconnectingdirectlytotheTelnetserver,connectstoa RedirectorportontheZandIEmulatorforWebserver.TheRedirectorthen sendstotheTelnetserverthedatareceivedfromtheclient.When theTelnetserverreplies,theRedirectorsendstotheclientthe datareceivedfromtheTelnetserver.Thisprocesscontinuesuntil thesessionends. WhyusetheRedirector? IfyourTelnetserverdoesnotsupportTLS,andifyou arerunningtheZandIEmulatorforWebserverononeoftheoperatingsystems onwhichtheRedirectorsupportssecuresessions(seeOperatingsystemssupportedbytheRedirector),youcanconfiguretheZandIEmulatorforWebRedirector toprovidetheTLSsupport. Table4.Tip ManyTelnetserverssupportTLS (forexample,IBMCommunicationsServersonzSeries,IBMSystemi, AIX,orNT).IfyourTelnetserversupportsTLS,westronglyrecommend usingyourTelnetserver.IfyourTelnetserverdoesnotsupportTLS, theCommunicationsServerforAIXRedirectoroffersamorescalable alternativetotheZandIEmulatorforWebRedirector. TheRedirectoractsasatransparentTelnetproxythatusesport remappingtoconnecttheZandIEmulatorforWebservertootherTelnetservers. Eachdefinedservercanconfigureasetoflocal-portnumbers.Instead ofconnectingdirectlytothetargetTelnetserver,aclientconnects totheserverandportnumber.TheRedirectormapsthelocal-port numbertothehost-portnumberofthetargetandmakesaconnection. Table5.Recommendation TherecommendedsolutionforaTelnetproxy istouseLoadBalancer,afeatureofWebSphereApplicationServer's EdgeComponents,orasimilarproductthatprovidesaddresstranslation aspartoftheoverallfirewallsolution,insteadoftheZandIEmulatorforWebRedirector. HowtheRedirectorworks Figure5illustrateshowtheRedirectorsends theclientdatatotheTelnetserverandsendstotheclienttheresponding datafromtheTelnetserver. Figure5.HowtheRedirectorworks TheRedirectorcanbeconfiguredinanyoneofthefollowingfour modes: Passthrough TheRedirectorcommunicateswiththeTelnetserverandtheclient withoutchangingthecontentofthedata. Client-side TheclientandtheRedirectorcommunicateinasecure sessionusingTLS(thecontentisencrypted/decrypted). TheRedirectorandtheTelnetservercommunicateinanon-secure session. Host-side TheclientandtheRedirectorcommunicateinanon-securesession. TheRedirectorandtheTelnetservercommunicatein asecuresessionusingTLS(thecontentisencrypted/decrypted) Both TheclientandtheRedirectorcommunicateinasecure sessionusingTLS(thecontentisencrypted/decrypted). TheRedirectorandtheTelnetservercommunicatein asecuresessionusingTLS(thecontentisencrypted/decrypted). BeforeyouusetheClient-side,Server-side,orBoth modes,youneedtocreatetheServerKeyStore.jks(ifconfiguredtouseJSSE) fortheRedirector. YoucanusethePass-throughmodewhenencryptionbytheRedirector isnotnecessary,eitherbecausethedatastreamdoesnotneedto beencrypted,orbecausethedatastreamisalreadyencryptedbetween theclientandtheTelnetserver.youneedtousethePass-through modeiftheZandIEmulatorforWebclientisconnectingthroughtheRedirector toahostthatrequiresclientauthenticationorExpressLogon. RefertoAddingahosttotheRedirectorin theonlinehelpformoreinformation. Redirectorloadcapacity ForRedirectorloadcapacityrecommendations,refertotheReadme. OperatingsystemssupportedbytheRedirector TheRedirectornowsupports: AlloperatingsystemsthataresupportedbytheZandIEmulatorforWebserver andthatalsosupportInternetProtocolVersion4(IPv4). SomeoperatingsystemsthataresupportedbytheZandIEmulatorforWebserver andthatalsosupportInternetProtocolVersion6(IPv6).NoteveryRedirectormodeissupportedoneveryoperatingsystem. ThenexttwosubsectionsdescribeRedirectorsupportinmoredetail. FormoreinformationonIPv4andIPv6seeSupportforInternetProtocolVersion6. OperatingsystemsthatsupportIPv4 ForoperatingsystemsthatsupportIPv4theRedirectorsupports thefollowing: Pass-throughmodeonalloperatingsystemssupportedbytheZandIEmulatorforWebserver Othermodes(Client-side,Host-side,andboth)ononlysomeof theoperatingsystemssupportedbytheZandIEmulatorforWebserver Note: z/OSandiSeriesdonotsupportthese modes.Table6showthisinformation: Table6.64-bitOperatingsystemsandRedirectormodesforwhichtheRedirectorsupportsIPv4usingJSEE OperatingSystems Pass-through: Client-side: Host-side: Both: Windows Yes Yes Yes Yes AIX Yes Yes Yes Yes Linux Yes Yes Yes Yes Allotheroperatingsystems Yes No No No RedirectorsupportforIPv6 Table7showtheoperatingsystemsandtheRedirector modesforwhichtheRedirectorsupportsInternetProtocolVersion 6(IPv6): Table7.64-bitOperatingsystemsandRedirectormodesforwhichtheRedirectorsupportsIPv6usingJSEE Operatingsystem: Pass-through: Client-side: Host-side: Both: Windows Yes Yes Yes Yes Linux Yes Yes Yes Yes AIX Yes Yes Yes Yes UsingZandIEmulatorforWebwithafirewall IfyouareconfiguringZandIEmulatorforWebtogothrougha firewall,werecommendthatthefirewalladministratoropenonlythose portsrequiredfortheclientstofunction.TelnetportsallowTLS-encrypted sessiontraffic. Figure6.Sessionsecuritythroughafirewallorproxyserver Ifyouareusingtheconfigurationserver-basedorcombinedmodels, theZandIEmulatorforWebconfigurationservletallowsZandIEmulatorforWebclients tocommunicatewiththeconfigurationserveracrosseitherHTTPor HTTPS. Figure7.Configurationsecuritywithandwithouttheconfigurationservletthroughafirewallorproxyserver ForZandIEmulatorforWebclientsconnectingtoahostsystemthrough openportsinthefirewall,seeConfiguringfirewallportsfordetails. ForZandIEmulatorforWebclientsconnectingtoahostsystemthroughaSocks orHTTPproxyserver,seeConnectingtoahostsystemthroughaproxyserverfordetails. Configuringfirewallports Ifyouareusingtheconfigurationserver-basedmodelorthecombined model,yourZandIEmulatorforWebclientswillneedtocommunicatewiththe configurationserver.Toallowthisthroughafirewall,youwillneed toeitheropentheZandIEmulatorforWebServiceManagerportorusetheZandIEmulatorforWebconfiguration servlet.TheServiceManagerlistensonport8999bydefault.You canchangethisdefaulttoanyotheravailableportnumber.Fordetails, refertoChangingtheServiceManagerportin theonlinehelp.TheZandIEmulatorforWebconfigurationservletallowsZandIEmulatorforWebclients tocommunicatewiththeconfigurationserveracrosseitherHTTPor HTTPS.Therefore,theServiceManagerportdoesnotneedtobeopen onthefirewall.(SeeFigure4.)RefertoInstallingtheconfigurationservletandConfiguringthe configurationservletintheonlinehelpfordetailsonusing theconfigurationservlet. IfyouareusingtheHTML-basedmodel,thereisnorequirement forZandIEmulatorforWebclientstoaccesstheconfigurationserver,and theServiceManagerportdoesnotneedtobeopenonthefirewall. Theclientswillstillattempttocontacttheconfigurationserver forlicensecountingbutwillfailsilentlyiftheServiceManager portisnotopen. InadditiontotheServiceManagerport,makesurethe firewalladministratoropensanyportsthatarebeingusedforfunctions yourclientsuse.Forexample,ifyouhaveaTLSsessionwiththe Redirectoronport5000,port5000mustbeopenforTelnettraffic. ThefollowingtablesummarizestheportsthatZandIEmulatorforWebcanuse. Table8.ZandIEmulatorforWebfunctionsandtheportstheyuse ZandIEmulatorforWebFunction PortsUsed Displayemulation(3270andVT)and3270Printer emulation 23(Telnet),80(HTTP),or443(TLS) and8999(configserver)3 5250DisplayandPrinteremulation 23(Telnet)or9921(TLS)or80(HTTP)or443(TLS)and8999 (configserver)3 3270filetransfer 23(Telnet),80(HTTP),or443(TLS) and8999(configserver)3 5250filetransfer-savfile 80(HTTP),8999(configserver)3,21(FTP)4, >1024(FTP)4,446(drda)4,449(as-svrmap)4, 8470(as-central)124,8473(as-file)14,8475(as-rmtcmd)1 4,and8476(as-signon)14 5250filetransfer-database 80(HTTP),8999(configserver)3,446(drda)4, 449(as-svrmap)4,8470(as-central)124,8473(as-file)1 4,8475(as-rmtcmd)14,and8476 (as-signon)14 5250filetransfer-streamfile 80(HTTP),8999(configserver)124,449(as-svrmap)4, 8470(as-central)124,8473(as-file)14,and8476(as-signon)1 4 FTP 21(FTP),80(HTTP),8999(configserver)124,and>1024(FTP)5 CICS 2006 DatabaseOn-Demand 80(HTTP),8999(configserver)3,449(as-svrmap)4, 8470(as-central)124,8471(as-database)14,and8476(as-signon)1 4 ZandIEmulatorforWebclients 23(Telnet),80(HTTP),and8999(configserver)3 Administrationclients 80(HTTP)and8999(configserver)3 SSH(theSecureShell) 22 Table9.Notes Notes: 1 Youcanchangetheportnumberswiththecommand WRKSRVTBLE.Theportnumberslistedarethedefaultvalues. 2 Theportforas-centralisusedonlyifacodepage conversiontableneedstobecreateddynamically(EBCDICto/fromUnicode). ThisisdependantontheJVMandthelocaleoftheclient. 3 Youcanchangetheconfigserverport.Port 8999isthedefault. 4 Theseportsdonotneedtobeopenedonthe firewallifyouareusingIBMSystemiproxyserversupport.You willneedtoopenthedefaultproxyserverport3470.Youcanchange thisport. 5 Inpassive(PASV)mode,theFTPclientinitiates bothconnectionstotheserver,solvingtheproblemoffirewallsfiltering theincomingdataportconnectiontotheclientfromtheserver.When openingaFTPconnection,theclientopenstworandomunprivileged portslocally(N>1024andN+1).Thefirstportcontactstheserver onport21,butinsteadofthenissuingaPORTcommandandallowing theservertoconnectbacktoitsdataport,theclientissuesthe PASVcommand.Asaresult,theserverthenopensarandomunprivileged port(P>1024)andsendsthePORTPcommandbacktotheclient.The clienttheninitiatestheconnectionfromportN+1toportPonthe servertotransferdata. Fromtheserver-sidefirewall'sstandpoint, tosupportpassivemodeFTP,youneedtoopenthefollowingcommunications ports: Port21oftheFTPserverfromanywhere(clientinitiatesconnection) Port21oftheFTPtoremoteports>1024(serverrespondstoclient's controlport) PortsoftheFTPserver>1024fromanywhere(clientinitiates dataconnectiontorandomportspecifiedbyserver) PortoftheFTPserver>1024toremoteports>1024(serversends ACKs(anddata)toclient'sdataport) Ifyoudonotwanttoopenport8999onthefirewall,youcanstill allowuserstoaccessZandIEmulatorforWeb.Therearetwooptions: UsetheDeploymentWizardtocreateHTMLfilesthatcontainall configurationinformation.Thiseliminatestheneedtoaccessthe configurationserver.WhencreatingtheHTMLfiles,chooseHTML-basedmodelfromtheConfigurationModelpage oftheDeploymentWizard. Ifyouwanttousetheconfigurationserver,youcanconfigure clientstousetheconfigurationservlet.RefertoConfiguring theconfigurationservletintheZandIEmulatorforWebonlinehelp.This optionisonlyavailableifyourWebapplicationserversupportsservlets. If youusetheconfigurationserveranditisseparatedfromyourWeb browserbyafirewall,youwilleitherneedtoopentheconfiguration serverportonthefirewallorruntheZandIEmulatorforWebconfiguration servlet.Theconfigurationservletallowsthebrowsertocommunicate withtheconfigurationserveracrossstandardWebprotocols,such asHTTPorHTTPS.(SeeFigure4.) Connectingtoahostsystemthroughaproxyserver ZandIEmulatorforWebclientscanuseaproxyservertotransparently accesshostsystemsfrombehindafirewall.Twotypesofproxyservers aresupported: Socksproxyservers,describedinConnectingthroughaSocksproxyserver.Both version4andversion5ofSocksaresupported. HTTPproxyservers,describedinConnectingthroughanHTTPproxyserver. Beforeyoucanconnecttoahostsystemthroughaproxyserver, youneedtofindoutwhichprotocoltheproxyserversupports.Decide whetheryouwanttospecifytheproxyserversettingsthroughthe Webbrowserorexplicitlyidentifyaproxyserverforthesession. Ifyoudecidetoexplicitlyidentifyaproxyserver,youneedtospecify theprotocolthattheproxyserveruses,theproxyservernameand portnumber,andotherinformation. Ingeneral,ifaSocksproxyserverisavailable,configureZandIEmulatorforWebsessions touseit.ConfiguresessionstouseanHTTPproxyserverifthat istheonlytypeofproxyserversupportedatyoursite. ConnectingthroughaSocksproxyserver ManyorganizationsuseSocksproxyserverstoprotectcomputing resourcesbehindafirewall.SocksisaprotocolforTCP/IP-based networkproxies.ItallowsapplicationsononesideofaSocksproxy servertogainfullaccesstohostsontheothersideoftheSocks proxyserverwithoutdirectlyconnectingtothem.Proxyserversare generallyusedinconjunctionwithfirewalls.UndertheSocksprotocol, aclientthatrequestsaconnectiontoahostsystemthroughafirewall actuallyconnectstoaSocksproxyserver.TheSocksproxyserver actsasanintermediarybetweentheclientandthehostsystem.It authorizescommunicationrequests,connectstothehostonbehalf oftheclient,andrelaysdatabetweenthetwosystems. ZandIEmulatorforWebsupportsbothversion4andversion5oftheSocks protocol. Socksversion4specifiesthemessageformatandconventionsto allowTCP-basedapplicationusersaccessacrossafirewall.Itprovides accesscontrolbasedonTCPheaderinformation,includingIPaddresses andsourceanddestinationportnumbers. Socksversion5(alsoknownasauthenticatedfirewalltraversal (AFT))isanopenInternetstandardfornetworkproxies.Itaddsauthentication, bettersupportforresolvingdomainnames,supportforIPv6addresses, andotherfeaturestoversion4.Thesefeaturesareveryusefulfor clientslocatedoutsideafirewall.ASocksuserIDandpasswordfor theproxyservercanoptionallybesentovertheconnectionbetween theZandIEmulatorforWebclientandtheproxyserver.TheuserIDandpassword arenotencrypted.Formoreinformationonversion5,seeSocksProtocolVersion5. TheJavaVirtualMachine(JVM)usedinmostWebbrowserssupports Socksversion4.AsessioncanaccesseitheraSocksversion4or version5proxyserver,bypassingtheproxyserversettingsinthe Webbrowser.YoucanalsohavethesessionnegotiateaSocksversion 4connectioniftheproxyserverdoesnotsupportversion5.Formore informationonSocksproxyserversettings,refertoProxy Serverintheonlinehelp. ConnectingthroughanHTTPproxyserver HTTPproxyservershandleHTTPrequeststhroughfirewalls.They actasintermediariesbetweenprivatelocalnetworksandtheInternet. TheHTTPproxyserverisconnectedtoboththelocalnetworkandthe Internet.LocalusersconfiguretheirbrowserstopassHTTPrequests throughtheHTTPproxyserverbyspecifyingtheproxyserver'sIP addressandTCPportnumber.TheHTTPproxyserveracceptstheseHTTP requestsandforwardsthemtotheactualWebserversspecifiedby theURLsenteredinthebrowser. ForZandIEmulatorforWebclients,HTTPproxyserversactasforwarding agentsforconnectionstoahostsystem.TheHTTPproxyserveropens aconnectiontothehostsystemandsendsdatabackandforthbetween thehostsystemandtheclient.AlthoughanHTTPproxyserverusually closesaconnectionafterservicinganHTTPrequest,ZandIEmulatorforWebkeeps theconnectionopenforhosttrafficbyusingtheHTTPConnectmethod (ifitisenabledfortheproxyserver). TohaveasessionuseaHTTPproxyserver,youneedtoselectHTTP proxyastheproxytypeandspecifytheproxyservernameandport number.FormoreinformationonHTTPproxyserversettings,refer toProxyServerintheonlinehelp. UserIDsecurity WebExpressLogon Ifyouhaveanetworksecurityapplicationinplaceandyouare usingtheconfigurationserver-basedmodel,youcanselectWebExpress LogonintheDeploymentWizardtoallowuserstoaccesshostsand host-basedapplicationswithoutprovidinganadditionaluserIDand password.EnteringthefullURLoftheCredentialMapperServertellsZandIEmulatorforWebwhere tolocatetheCredentialMapperServlet,whichprocessestheHTTPS requestfromtheuser,performsalookup,andreturnstheuser'scredentials. Thecredentialsarethenusedtoperformasecure,automatedZandIEmulatorforWeblogin. NativeAuthentication Ifyouusetheconfigurationserver-basedmodel,you canconfigureyourZandIEmulatorforWebuserstobenativelyauthenticated. ThisoptionallowsuserstologontoZandIEmulatorforWebusingthesame passwordastheywouldtologontotheoperatingsystem(AIXorz/OS) whereZandIEmulatorforWebisactive.WhenauserlogsontoZandIEmulatorforWeb, theirpasswordisvalidatedagainsttheoperatingsystempassword, ratherthanaseparateZandIEmulatorforWebpassword.Thisgivestheadministrator asinglepointofcontrolforpasswordadministrationandtheuser asinglepasswordtoremember. RefertoNativeAuthenticationintheonline helpformoreinformationonenablingthisoption. WindowsDomainlogon IfyourusersareloggedontoaWindowsdomain,thisoption(available withtheconfigurationserver-basedmodelintheDeploymentWizard) automaticallylogsusersontoZandIEmulatorforWebusingtheirWindows username.TheZandIEmulatorforWeblogonwindowdoesnotappearandthe WindowsusernameisusedastheZandIEmulatorforWebuserID.IfaZandIEmulatorforWebuser IDdoesnotalreadyexist(matchingtheWindowsusername),youcan alsochoosetohaveauserIDautomaticallycreatedinthespecifiedZandIEmulatorforWebgroup. RefertoLogonTypeintheonlinehelpfor moreinformationaboutchoosinghowusersaccesstheZandIEmulatorforWebconfiguration server. FIPSenvironments Ifyouareinanenvironmentthatmandatesorrequires thatyoursecuritycomponentsuseFederalInformationProcessingStandards (FIPS)-certifiedcomponents/modules,considerthefollowing.Forsecure TelnetandFTPconnections,ZandIEmulatorforWebusesFIPS-compliantciphers bydefault.IfyourenvironmentrequirestheconnectiontoanIBM Systemihostforfiletransferordatatransfer,ensurethatyour systemmeetsthefollowingrequirements: YouareusingaJavaJREthatisFIPScertified. YouneedtoconfiguretheHTMLparameterUseJSSEforiSerieson theAdvancedOptionswindowoftheDeploymentWizardandsetitsvalue totrue. YouneedtoaddthecertificatefromtheIBMSystemihostto theJavaSecureSocketExtension(JSSE)clienttruststoreforthe JavaJRE.RefertoyourJavaJREproviderforconfigurationdetails.WhenyouhaveasecureconnectiontoanIBMSystemihostand areaccessingthefiletransfercapabilities,youwillbeaskedto enterthepathandthepasswordfortheJSSETrustStore.Ifyouare performingdatatransfertoanIBMSystemihost,youwillalsosee additionalfieldsforenteringthepathandpasswordfortheJSSE TrustStore. AnotherwaytoenterthepathandpasswordistouseaRunApplet thatisprovidedwithZandIEmulatorforWeb.Todothis,takethefollowing steps: Fromthemenuofadisplaysession,selectActions>RunApplet. Entercom.ibm.eNetwork.HOD.util.jsse.JSSESetupinthe fieldfortheclassname. ClickOK.YouonlyneedtoconfiguretheJSSETrustStoreoncec.Itis aglobalsettingthatappliestoallsessions.Afteryouhaveentered thevalues,theypersistuntilthebrowserisrestarted. The currentversionofZandIEmulatorforWebprovidesamenuoptiontoenable ordisabletheFIPSmodeforeachsession.Bydefault,FIPSmodeis enabledforallthesessions. Planningfornationallanguagesupport ZandIEmulatorforWebisprovidedinmultiplelanguages.The sessionwindows,configurationpanels,helpfiles,andthedocumentation havebeentranslated.Inaddition,display,keyboard,andprocessing supportareprovidedinArabic,Hebrew,Thai,andHindi.Thissupport isfullyexplainedintheonlinehelp. In WebClient,theUIglobalizationisreflectedontheclientsidebased onthepreferredlanguageandthedefaultlocalesetbytheadministrator ortheuserlocalesetatthebrowserlevel;however,theproperties setbytheadministratortakesprecedence.Ifanunsupportedlocale issetasthebrowserdefaultlanguageattheclientside,thenthe UIisdisplayedinEnglishbydefault. Allthetranslatedversionsareprovidedinthedownload. WhenyouinstallZandIEmulatorforWeboni/OS,OS/400,Windows,AIX,Linux, andSolarisusingthegraphicalinstallationprogram,youcanchoose whichlanguagestoinstall.Onz/OS,youcanchoosethelanguagevia consolemode. Nationallanguagesupportisoperating-system dependent,sotheappropriatefontandkeyboardsupportforthelanguage youwanttousemustbeinstalledintheoperatingsystem.Forexample, ifyouwanttouseKoreanasthehost-sessionlanguagebutdonot havetheKoreanfontandkeyboardsupportinstalled,youmaynotbe abletodisplaythecorrectcharacters. DBCScannotbeusedastheHTMLfilename. Supportedlanguages ThelanguagesintowhichZandIEmulatorforWebhasbeentranslatedare listedbelow,alongwiththelanguagesuffixesyoucanusetoload translatedversionsoftheZandIEmulatorforWebclients.Forexample,HTML pageshavelanguageextensionstoidentifydifferentlanguageinstallations anddifferentlanguagepredefinedHTMLfiles,suchasZIEWeb_en.html forEnglish. Language Languagesuffix SimplifiedChinese zh TraditionalChinese zh_TW Czech cs Danish da Dutch nl English en Finnish fi French fr German de Greek el Hungarian hu Italian it Japanese ja Korean ko Norwegian no Polish pl BrazilianPortuguese pt Portuguese pt_PT Russian ru Slovenian sl Spanish es Swedish sv Turkish tr Catalan Ca Supportedhostcodepages ZandIEmulatorforWebsupportsmultiplecodepages.Youcanspecifythese codepagesonasession-by-sessionbasis. 3270and5250codepages Thecodepagesspecifiedbelowaresupportedbythe3270and5250 emulators.YoucanselectthemintheSessionConfigurationwindow. Countryorregion Codepage Note ArabicSpeaking 420 Austria 273 Austria(Euro) 1141 Belarus 1025 Belarus(Euro) 1154 Belgium 037 Belgium(Euro) 1140 Belgium(OldCode) 274 Bosnia/Herzegovina 870 Bosnia/Herzegovina(Euro) 1153 Brazil 037 Brazil(Euro) 1140 Brazil(Old) 275 Bulgaria 1025 Bulgaria(Euro) 1154 Canada 037 Canada(Euro) 1140 China(SimplifiedChineseExtended) 1388 Croatia 870 Croatia(Euro) 1153 CzechRepublic 870 CzechRepublic(Euro) 1153 Denmark 277 Denmark(Euro) 1142 Estonia 1122 Estonia(Euro) 1157 Finland 278 Finland(Euro) 1143 France 297 France(Euro) 1147 FYRMacedonia 1025 FYRMacedonia(Euro) 1154 Germany 273 Germany(Euro) 1141 Greece 875 Hebrew(NewCode) 424 Hebrew(OldCode) 803 Hindi 1137 5250displayonly Hungary 870 Hungary(Euro) 1153 Iceland 871 Iceland(Euro) 1149 Italy 280 Italy(Euro) 1144 Japan(Katakana) 930 Japan(KatakanaExtended) 930 Japanese(KatakanaUnicodeExtended;JIS2004) 1390 3270only Japan(LatinExtended) 939 1399Japanese(LatinUnicodeExtended;JIS2004) 1399 Kazakhstan(Euro) 1166 Korea(Euro) 1364 3270only Korea(Extended) 933 LatinAmerica 284 LatinAmerica(Euro) 1145 Latvia 1112 Latvia(Euro) 1156 Lithuania 1112 Lithuania(Euro) 1156 Multilingual 500 MultilingualISO(Euro) 924 Multilingual(Euro) 1148 Netherlands 037 Netherlands(Euro) 1140 Norway 277 Norway(Euro) 1142 OpenEdition 1047 Poland 870 Poland(Euro) 1153 Portugal 037 Portugal(Euro) 1140 Romania 870 Romania(Euro) 1153 Russia 1025 Russia(Euro) 1154 Serbia/Montenegro(Cyrillic) 1025 Serbia/Montenegro(Cyrillic;Euro) 1154 Slovakia 870 Slovakia(Euro) 1153 Slovenia 870 Slovenia(Euro) 1153 Spain 284 Spain(Euro) 1145 Sweden 278 Sweden(Euro) 1143 Taiwan(TraditionalChineseExtended) 937 Taiwan(TraditionalChineseExtended;Euro) 1371 Thai 838 Thai(Euro) 1160 Turkey 1026 Turkey(Euro) 1155 Ukraine 1123 Ukraine(Euro) 1158 UnitedKingdom 285 UnitedKingdom(Euro) 1146 UnitedStates 037 UnitedStates(Euro) 1140 Notes: 3270hostprintwithaPrinterDefinitionTable(PDT)supports onlyLatin-1,DBCS,bidirectional,andThaicodepages.Othercode pagesaresupportedeitherinAdobePDFprintingoronWindowsplatforms withoutaPDT. Inordertoincludemorecharacters(whicharedefinedinthe GB18030standardbytheGovernmentofthePeople'sRepublicofChina), 6582UnicodeExtension-Aand1,948additionalnon-Hancharacters(Mongolian, Uygur,Tibetan,andYi)wereaddedtotheSimplifiedChinesecode page1388forZandIEmulatorforWeb. VTcodepages Language Codepage Arabic ASMO708andASMO449 British 1101 DECGreek DECHebrew DECMultinationalReplacementCharacterSet 1100 DECTechnical Dutch 1102 Finnish 1103 French 1104 FrenchCanadian 1020 German 1011 HebrewNRCS ISOGreekSupplemental(ISOLatin-7) 813 ISOHebrewSupplemental ISOLatin-1 819 Italian 1012 Norwegian/Danish 1105 PCDanish/Norwegian 865 PCInternational 437 PCMultilingual 850 PCPortugese 860 PRCGBK 936 PCSpanish 220 Spanish 1023 Swedish 1106 Swiss 1021 UnitedStates 1100 CICSGatewaycodepages Codepage Characterset 000 AutoDetect(default) 437 Latin-1 813 ISOGreek(8859_7) 819 ISOLatin1(8859_1) 850 Latin1 852 Latin2 855 Cyrillic 856 Hebrew 857 Latin5 864 Arabic 866 Cyrillic 869 Greek 874 Thai 912 ISOLatin2(8859_2) 915 ISOCyrillic(8859_5) 920 ISOLatin5(8859_9) JapaneseJIS2004Unicodesupport TheJIS2004supportcannowbeenabledbyselectingtheexisting hostcodepages1390Japanese(KatakanaUnicodeExtended)and1399 Japanese(LatinUnicodeExtended).Thefollowingfeaturesaresupported: Presentationspaceediting Keyassignment Filetransfer Printscreen Printersession GDI AdobePDF HostAccessClassLibrary(HACL) FunctionsnotincludedduetoUnicodeformatsnotcurrentlysupported inZIEWeb: Macro Useprinterdefinitiontable(PDT)inprintersession User-definedcharactermapping Fordouble-bytecharacterset(DBCS)languages,youcan usecustomizeduser-definedcharacter(UDC)mappinginyoursession (3270,5250,3270hostprint)insteadofthedefaultmapping.You cancreateaUDCtranslationtableusingtheUDCmappingeditorto storecustomizedmappingforyoursession.Forinstructionsforhow tousetheUDCmappingeditortochangeyourcharactermapping,seeUsingtheuser-definedcharacter(UDC)mappingeditorin theonlinehelp. UnicodeSupportfori/OSandOS/400 SeeUnicodeSupportfori/OSandOS/400. Installing,upgrading,anduninstallingZandIEmulatorforWeb InstallingtheZandIEmulatorforWebserverandrelatedsoftware ThischapterdiscussesinstallingthefollowingthreeZandIEmulatorforWebcomponents: TheZandIEmulatorforWebserver,whichisnecessaryforusingZandIEmulatorforWeb. RefertoInstallingZandIEmulatorforWebusingInstallationManagerforinstructions. TheZandIEmulatorforWebconfigurationservlet,whichisneeded onlyinspecificinstanceswhenyouarerunningZandIEmulatorforWebin conjunctionwithafirewall.RefertoInstallingtheconfigurationservletfor furtherexplanationandinstructions. TheDeploymentWizard,anextremelyusefultoolthatrunsonWindows togeneratecustomizedZandIEmulatorforWebclients.InstallingtheDeployment Wizardisnotrequired,butitishighlyrecommended.RefertoDeploymentWizardforinstructions. InstallingZandIEmulatorforWebusingInstallationManager YouneedtheIBMInstallationManagertoinstallZandIEmulatorforWeb. IBMInstallationManagerneedstobeinstalledfirstinAdministrator ModeonthesystemwhereZandIEmulatorforWebisplannedtoinstall.Then youcanusetheInstallationManagertoinstalltheZandIEmulatorforWeb. IBMInstallationManagerVersion1.8.3orhigherisrequired toinstallZandIEmulatorforWeb. Importantlinks RefertotheinstructionsfromtheInstalling orUpdatingInstallationManagerforinstallingtheInstallation Manager.FormoreinformationaboutIBMInstallationManager,refer totheIBMInstallationManagerKnowledgeCenter. BeforetheZIEWebInstallation PreparingtoInstall Ensurethemachineonwhichtheinstallationtakesplacemeets allprerequisites. ToknowmoreabouttheDetailedSystemRequirementsforZandIEmulatorforWeb, refertotheProductDocumentationfor ZIEWeb. Checkthelistbelowforthepreparation: EnsurethatIBMInstallationManagerv1.8.3orhigherisinstalled. Yourmachineneedsminimum1.2GBdiskspaceforinstallation(installed andtemporaryspace)for32-bitarchitectureandonelanguage.To installmorethanonelanguage,thisvalueincreases4to8MBfor eachlanguage. Youneedminimum4.5GBforthemulti-platformproductrepository (downloadingandextracting). UsersarerequiredtologonwithprivilegesfromAdministrator. AsupportedversionofHTTPserver(forexample,IBMHTTPServer orApacheserver)isinstalledonthesystem. InstallingZandIEmulatorforWeb YoucaninstallZandIEmulatorforWebusingtheIBMInstallation Manageronallthesupportedplatforms.UsingtheInstallationManager (IM),youcaninstallinusingtheIMGUI,commandmodeorConsole Mode.MostplatformssupporttheInstallationManagerGUIexceptz/OS. Toinstallonz/OS,youcanuseConsoleModeorrunningBPXBATCHjobs. UsingtheInstallationManagerGUItoinstall InstallationManagerGUI: StartInstallationManageraccordingtoinstructionsfortheplatform. SelectFile>Preferences. SelectRepositoriesontheleft. Thisoptionshowstheavailablerepositoriesthathavebeenadded toInstallationManager. SelectAddRepositoryifZandIEmulatorforWebis notlisted. ClickBrowseandnavigateto thelocationoftheextractedZandIEmulatorforWebpath.SelectthediskTag.inf filepresentinthedisk1folderfortheinitialinstall. ClickOKandthenewrepository locationshouldbelisted. ClickTestConnectionstoensure thattheRepositoryURLisavailable. FromthestartpageoftheInstallationManager,clickInstall.TheInstallationManagersearches thedefinedrepositoriesforavailablepackages. SelecttheZandIEmulatorforWebpackage. ClickNext. Readthelicenseagreements.Ifyouagreetothetermsofthe licenseagreement,clickIaccepttheterms ofthelicenseagreement,andclickNextto continue. SelectCreateanewpackagegroupand choosetheArchitecture. Ifoperatingsystemis64-bit,youneedtoselect64-bitor32-bitto installtheproductinthecorrespondingbitmode. ClickNext. Selectthelanguagesyouwanttoinstall.ThedefaultisEnglish.ClickNext. SelecttheZandIEmulatorforWeb2.0 feature.ClickNext. Reviewandspecifyallinformationunder theZandIEmulatorforWeb2.0tab. OnthePublishInformationpanelunderZandIEmulatorforWeb2.0,setthePublishdirectory,specifytheweb-server aliasandtheServiceManagerPortnumber. ClickNext. Thepublish directorymustbeavailabletoclients.Youcandesignatethepath ofthepublishdirectory.Performthefollowingsteps: Specifyanaliasforthedirectory,defaultiszieweb. SpecifytheServiceManagerport,throughwhichZandIEmulatorforWebclients communicatewiththeServiceManager.Thiscommunicationisnecessary forthefollowingdeploymentoptions: Usingtheconfigurationservertomaintainsessionconfiguration informationasintheconfigurationserver-basedandcombineddeployment models,describedinPlanningfordeployment. HCLrecommendsdesignatingport8999for thesepurposes.Checkyourserverdocumentationtoseeifthisport isbeingused.Ifitisinuse,youcanchangetheportduringthe installationorlater.FormoreinformationaboutchangingtheService Managerport,seeChangingthe ServiceManager'sconfigurationportintheonlinehelp. OnWebserverpanelunderZandIEmulatorforWeb2.0, selecttheweb-serveroptionthatisappropriateforyourrequirement: SelectNoWebServerwhenwebserver isconfiguredmanuallybytheuser. Theuserisadvisedtocontacttheirwebserveradministratororrefer tothewebserverdocumentationfordetails. SelectEmbeddedWebServerwhen thewebserverprovidedwiththeapplicationisused.Thenon-secure andsecureportnumbersfortheembeddedwebserverareauto-populated, andtheadministratorshavetheoptiontoconfiguretheportnumbers aspertheirrequirements. Selecttheoption'Selectfromlistofdetectedwebserver'and thenselecttheweb-serverfromthelistifmorethanonedetected. SelecttheoptionManuallyselectspecific webserver,incaseaIBMHTTPServerorApacheweb-serveris installedbutnotdetected. Selectthetypeofwebserverthatisinstalledonyoursystem. ClickontheBrowsebuttonand navigatetotheconfigurationfile(httpd.conf)forthewebserver installedinyoursystem.Youcanalternativelytypeintothefield thecompletepathofthehttpd.conffileinthewebserverinstallation directory. OntheApplicationserverpanelunderZandIEmulatorforWeb,iftheinstallation programdetectsIBMWebSphereApplicationServeronyoursystem,you canconfiguretheConfigurationServlet.ThenextpanelfromApplication ServertabasksifyouwanttoconfiguretheZIEWebConfiguration ServletinWebSphereApplicationServer.SeeInstallingtheconfigurationservletformoreinformation. Uncheck thecheckboxifyoudonotplantouseConfigurationServlet. If youplantouseConfigurationServlet,selecttheapplicationserver fromthelistdetected.Theinstallationprogramautomaticallydeploys theconfigurationservletontheWebapplicationserveryoudesignate, anditconfiguresyourclientstoaccesstheServiceManagerthrough theservlet. Note: TheWebsphereapplicationserverisdetectedifitisinstalled bythesameIBMInstallationManagerprogramonthesystem.Theversions thatcanbedetectedareWebsphereApplicationServerV8.0andV8.5.2. AnApplicationServerwithadministrativesecurityenabledis notsupportedforservletconfigurationduringtheinstallation. Oncethepanelsareappropriatelyupdated,clickNext. Reviewthesummaryinformation,andclickInstall. Oncetheinstallationcompletes,asummarypageisdisplayed. Reviewthemessages. Iftheinstallationissuccessful,theprogramdisplaysamessage indicatingthattheinstallationissuccessful.Theprogrammight alsodisplayimportantpost-installationinstructions.ClickFinish. Iftheinstallationisnotsuccessful,clickViewLogFiletotroubleshoottheproblem. Toensuretheinstalliscompletedsuccessfully,youcantake thefollowingadditionalactions: Restartthewebserver. EnsurethatZIEWebpagesareaccessibleoverthebrowser. Ifnot,checkthewebserverconfigurationandensurethatfilesin theZandIEmulatorforWebpublishdirectoryareaccessible.Refertoyour webserverdocumentationfortheconfiguringdetails. DeploymentWizard TheDeploymentWizardisautomaticallyinstalledas partoftheWindowsZandIEmulatorforWebserverinstallation.Itisalso availableseparatelyforthosecustomerswhodonotwishtoinstall theentireWindowsZandIEmulatorforWebserver. Forz/OSandiSeries,theDeploymentWizardinstall packagecanbefoundontheZIEserverinthe/ZIEWeb/depwizdirectorycalledDW.zip.This filecanbedownloadedtoaWindowsworkstationandinstalledasa separatepackage. InstallingtheDeploymentWizard OnWindowsplatforms,theDeploymentWizardisinstalledautomatically whenZandIEmulatorforWebisinstalled. ToinstallandruntheDeploymentWizard,performthefollowing tasks: OpenInstallationManager. AddtheZandIEmulatorforWebrepositorylocationtotheInstallation Manager: OntheStartpageofInstallationManager,clickFile>Preferences, andthenclickRepositories.TheRepositories pageopens,showinganyavailablerepositories,locationsandconnection statusofthem. OntheRepositoriespage,clickAdd Repository. IntheAddRepositorydialogbox,clickBrowse. NavigatetothelocationofZandIEmulatorforWebdisk1andselect thediskTag.inffile,andthenclickOK. Thenewrepositorylocationislisted. ClickTestConnectionstoensure thattheRepositoryURLisavailable. FromtheStartpage,clickInstall. TheInstallationManagersearchesthedefinedrepositoriesforavailable packages. Repeattheabovestepsforthe2nddisk.Ifyouproceedwithout configuringtheseconddisk,InstallationManagerconfirmswithuser foritduringtheinstallationprocess. SelecttheZandIEmulatorforWebDeploymentWizardpackage. EnsurethatVersion2.0isalsoselected underit.ClickNext. OntheInstallPackagespanel,selectCreate anewpackageandHCLZandIEmulatorforWebDeployment WizardasthePackagegroupname. IncasetheArchitectureselectionissetto64-bit,changethe selectionto32-bitifnecessary.ClickNext. OntheInstallPackagespanel,selectthe featureZandIEmulatorforWebDeploymentWizard14.0.Thediskinformation inthelowerareaofthepanelgivesinformationabouttheavailable diskspaceandrequireddiskspace.ClickNext. SelectthetabforDeploymentWizardZandIEmulatorforWebWizard LocationpanelundertheheadingZandIEmulatorforWebWizard2.0inthe lefttab.TheZandIEmulatorforWebserverlocationindicatesthelinkto theZandIEmulatorforWebserver.Ensurethatavalidandworkinglinkto theZIEserverisenteredinthefield.ClickNext. Inthesummarypanel,reviewtheselectedpackagesandinstallation selections.ClickInstalltoproceed withinstallation. DownloadingtheDeploymentWizardinstallationimagefromaZandIEmulatorforWebserver TheDeploymentWizardimageisshippedonallZandIEmulatorforWebserver platforms,anditcanbedownloadedfromtheserverandinstalled onanyWindowsmachine. TherearetwowaystodownloadtheDeploymentWizard fromaZandIEmulatorforWebserver,accessviadashboard_xx.htmlpage,where xxisyourtwo-letterlanguagesuffixorftpdirectlyfromtheserver. Downloadingviadashboard_xx.htmldownloadsthroughthewebserver. Herearethesteps: FromyourWindowsmachine,startyourbrowserandpointtothe dashboard_xx.htmlfileonyourZandIEmulatorforWebserver,wherexxisyourtwoletterlanguagesuffix. ClicktheAdministratorstab3. ClicktheDeploymentWizardlinktodownloadtheDeploymentWizard installationimagetoyourWindowsmachine. RuntheInstallationManagertoinstalltheDeployment Wizard. Oncetheinstallationiscomplete,youcanstarttheDeployment WizardfromtheStart>Programsdesktopmenu. Todownloadviaftp,followthesesteps: FromyourWindowsmachine,ftptoyourZIEservermachine. Whenprompted,logintotheserver. Enterbintosetthemodetobinary. EntercdtothedirectorytheDeployment Wizardfileexist.Thelocationwillbe/ZIEWeb/depwiz. EntergetDW.ziptogetthefile. ExtractthezipfileontheWindowsmachine. RuntheInstallationManagertoinstalltheDeploymentWizard. StarttheDeploymentWizardfromtheStart>Programsdesktopmenu. ZIEHostAccessToolkit TheZIEHostAccessToolkitisinstalledseparately forthosecustomerswhowanttowritetheirownZandIEmulatorforWebapplication. InstallingtheZIEHostAccessToolkit PerformthefollowingbasicstepstoinstalltheZIEHostAccess ToolkitonaWindowssystem: OpenInstallationManager. AddtheZandIEmulatorforWebrepositorylocationtotheInstallation Manager. OntheStartpageofInstallationManager,clickFile>Preferences, andthenclickRepositories.TheRepositories pageopens,showinganyavailablerepositories,thelocationsand connectionstatusofthem. OntheRepositoriespage,clickAdd Repository. IntheAddRepositorydialogbox,clickBrowse. NavigatetothelocationofyourZandIEmulatorforWebdisk1andselectthe diskTag.inffile.ThenclickOK.The newrepositorylocationislisted. ClickTestConnectionstoensure thattheRepositoryURLisavailable. FromtheStartpage,clickInstall. TheInstallationManagersearchesitsdefinedrepositoriesforavailable packages. Repeattheabovestepsforthe2nddisk.Ifyouproceedwithout configuringtheseconddisk,InstallationManagerconfirmswithyou foritduringtheinstallationprocess. SelecttheZIEHostAccessToolkitpackage. EnsurethatVersion2.0isalsoselected underit.ClickNext. OntheInstallPackagespanel,selectCreate anewpackageandselectHCLZIEHost AccessToolkitasthepackagegroupname. IncasetheArchitectureselectionissetto64-bit,changethe selectionto32-bitbecauseitistherecommended.ClickNext. Selectthelanguagesyouwanttoinstall.ThedefaultisEnglish.ClickNext. OntheInstallPackagespanel,selectthe featureZIEHostAccessToolkit2.0.Thediskinformationinthe lowerareaofthepanelgivesinformationabouttheavailabledisk spaceandrequireddiskspace.ClickNext. SelectthetabforZIEHostAccessToolkit 2.0panelundertheheadingZIEHostAccessToolkit2.0intheleft tab. Inthesummarypanel,reviewtheselectedpackagesandinstallation selections.ClickInstalltoproceed withtheinstallation. InstallingintheConsoleMode ThischaptercontainsinstructionsofusingInstallationManager consolemodetoinstallZandIEmulatorforWebonplatformsthatdonotsupport aGraphicalUserInterface. Note: ifyouareinstallingforIBMiSeries,youaresuggested readingBeforeinstallingZIEWebonIBMiSeries. AboutinstallingintheConsoleMode Linux,UNIX,andz/OSsystemsthatdonotsupportagraphicaluser interface(GUI),administratorscanusetheconsole-basedinterface ofInstallationManagertoinstallZandIEmulatorforWeb. UsingconsolemodeofIBMInstallationManager,youcanworkon theinstallationpackagestocompletethefollowingtasks: Installation Upgrade Modify Rollback Uninstallation TostartInstallationManagerconsolemode,usetheimclutility availableintheInstallationManagertoolsdirectory. Theseinstallationstepscoveratypicalinstallationscenario byusingconsolemode.Duringtheinstallationsession,consolemode promptsaredisplayedspecifictothepackagebeinginstalled.You canfollowtheoptionsastheyappearontheconsolescreentoproceed withtheinstallation. TheInstallationManagerconsolemodeinterfaceusestheseconventions: [X]indicatesaselectedoption. []indicatesanoptionthatisnotselected. Defaultcommandsareenclosedinbrackets[]. [N]IndicatesthatthedefaultcommandisN:Next. Note: More informationaboutInstallationManagerandconsolemodeisavailable intheInstallationManagerKnowledgeCenterfortheInstallation Managerversionyouhaveinstalled.SeeIBMInstallationManagerKnowledge Center. TheInstallationManagercanbeinstalledusingtheinformation givenintheInstallationManagerdocumentationInstallingorupdating InstallationManager. InordertoinstallZandIEmulatorforWeb,theInstallationManagermust beinstalledinAdministratormode.Formoreinformationaboutdownloading InstallationManagerseeSystemRequirementsforIBMInstallation ManagerandPackagingUtility,minimumlevelis1.8.3inorderto installZandIEmulatorforWeb. FormoreinformationaboutusingInstallationManager,referto theIBMInstallationManagerKnowledgeCenter. BeforeinstallingZIEWebonIBMiSeries InstallationofZandIEmulatorforWebonIBMiSeriesplatformsissupported throughtheconsolemodeofInstallationManager.TheGUImodeof installationisnotavailableonIBMiSeries. AdditionalnotesbeforeZandIEmulatorforWebinstallationonIBMiSeries arelistedbelow: EnsurethatIBMInstallationManagerV1.8.3orhigherisinstalled anditmustbeinstalledintheAdministratormode.Youarerecommended tofollowthedocumentationofIBMInstallationManagerforfurther details.InformationoninstallingInstallationManagerV1.8.3is availableat:InstallingInstallationManageronIBMi. Installationisperformedbyauserwiththeadministratoror therootprivileges. Tobegintheinstallation,youneedtoperformthefollowingtasks: CopytheZandIEmulatorforWebESDzipfilestotheIBMifromFTP(File TransferProtocol)orbyanyregularmeansandExtractthezipfile. OpentheInstallationManagerandconfigurearepositorybyproviding thecompletepathtothediskTag.inffilethatisintheZandIEmulatorforWebdisk. Proceedwiththeremainingsteps,asprovidedintheconsolemode installation. Installationprocedure ToinstallZIEWebintheConsoleMode,performthefollowing tasks: StartIBMInstallationManagerinconsolemode.Openacommand promptwithadministrator'sprivilegesandchangetothetoolsfolderwithintheIBMInstallationManager Installationdirectory. Runthefollowingcommandinthetoolsdirectory imcl-c. On differentoperatingsystems,forexample: AIX®orLinux: /opt/HCL/InstallationManager/eclipse/tools/imcl-c IBMi: /QHCL/ProdData/InstallationManager/eclipse/tools/imcl-c Windows: \ProgramFiles\HCL\InstallationManager\eclipse\tools\imcl.exe-c z/OS: /InstallationManager/bin/eclipse/tools/imcl-c For moredetailsonstartingInstallationManagerinconsolemode,refer toStartingconsolemode. Intheconsolewindow,specifytheHCLZandIEmulatorforWebrepository: TypeP,andthenpressEnterto editpreferences. Type1,andthenpressEnterto specifyrepositories. TypeD,andthenpressEnterto addarepository. TypetherepositorypathforHCLZandIEmulatorforWeb2.0. Forexample,\ZIEWeb\disk1\diskTag.inf. TypeA,thenpressEnterto savetherepositoryinformation. TypeR,andthen typepressEntertoreturntothemainmenu. Select1toinstallfromthemainmenu. Ifyouhaverepositoriesthatrequirecredentials,youareinformed toenteryourIDandthenpassword.Youcanalsosavethecredentials whenyouareasked.SeeSavingcredentials inconsolemodeintheInstallationManagerKnowledgeCenter. Onthepaneltoselectpackagestoinstall, typetheappropriatenumbertoselecttheZandIEmulatorforWeb2.0package. Onthesubsequentpaneltypetheappropriate numbertochooseVersion2.0forinstallationandtypepressEnter. EnterNtoproceed. Reviewthelicenseagreementbytypingtheappropriatenumber toviewlicenseinformation.Toacceptthelicenseagreement,typeA,andthenclickEnter. TypeNandpressEntertoproceed. SelecttheInstallationManagerShared ResourcesDirectory.RefertoOverviewof packagegroupsandthesharedresourcesdirectoryforfurther information.Tochangethedirectory,enterM, andthenEnter.Enterthecorrect path,thentypeNtoproceed. TheLocationpanelallowsyoutospecify thelocationoftheHCLZandIEmulatorforWeb2.0installationdirectory.TypeMtochangelocationoftheinstallationdirectory. Enterthecorrectpath,andenterNtoproceed. Thearchitectureofthepackageshowswheninstallingona64-bit operatingsystem.Fornewpackagegroups,youcanchangethebitmode byenteringT:Changetobit-architecture. Forexample,iftheSelectedArchitectureisdisplayedas64-bitand optionTisdisplayedtoChangeto32-bit architecture,typeTtochangeto32-bitarchitecture. Toacceptthedefaultvaluesortocontinueafterenteringadifferent value,typeNtoproceed. Onthelanguagepanel,enterthenumbertotheleftofthelanguage toaddorremovethelanguagefromthelistoflanguagesforinstallation. YoucanselectonlyonelanguageatatimeorSto selectalllanguages.Englishisselectedbydefaultanditismandatory. Yourlanguagechoicesapplytoallpackagesinstalledinthepackage group.TypeNtoproceed. ThenextpaneldisplaystheConfigurations menu,fortheconfigurationdetailsrequiredbyZandIEmulatorforWebinstallation: Typically,theZandIEmulatorforWebconfigurationmenuhasthefollowing entries: PublishInformation Webserver EntertheappropriatenumbertotheleftofPublishInformation entrytoreviewthesettings.ThePublishInformationpaneldisplays thefollowinginformation: PublishDestinationDirectoryisthelocation wheretheZandIEmulatorforWebfilesthatusersaccessfromthewebare installed.Adefaultvalueisshowninthepanel.Type1to changethelocationifneeded. ZandIEmulatorforWebPublishAliasistheweb-server aliassettingfortheZandIEmulatorforWebpublishdirectory.TypeAtochangethelocationifneeded. Servicemanagerportistheportnumber onwhichtheZandIEmulatorforWebservicemanagerlistens.SpecifyServiceManagerport,throughwhichZandIEmulatorforWebclients communicatewiththeServiceManager.Thiscommunicationisnecessary forthefollowingdeploymentoptions: Usingtheconfigurationservertomaintainsessionconfiguration information(asintheconfigurationserver-basedandcombineddeployment models,describedinPlanningfordeployment). Port8999isthedefaultportforZandIEmulatorforWeb. Checkwithyoursystemadministratortoseeifthisportisoccupied. Ifitisinuse,youcanchangetheportduringtheinstallationor later.FormoreinformationaboutchangingtheServiceManagerport, seeChangingtheServiceManager'sconfiguration portintheonlinehelp. Enterthenumberassociatedwith anyoftheseoptionstochangetherespectivesettings.Refertothe remainingoptionsonthescreentonavigate. EntertheappropriatenumbertotheleftofWebservertoreview itssettings. Thewebserverpaneldisplaysthefollowingoptions.Youneed toselecttheweb-serveroptionthatisappropriateforyourrequirement: NoWebServer:Selectitwhenyouconfigure thewebservermanuallyorwhenthereisnowebserver. Contactyourwebserveradministratororrefertheweb-serverdocumentation fordetails. Note: SelectNoWebServerfor z/OSinstallationsbecausethewebservercannotbedetectedandmust beconfiguredmanually. Selectfromlistofdetectedwebservers: Toselectadetectedwebserver,selectthisoptionandthenselect thewebserverthathasbeendetected. Manuallyselectspecificwebserver:Select thisoptionwhenanIBMHTTPServer8.5orApachewebserver2.2is installedbutnotdetected.Youneedtoenterthecompletepathto thehttpd.conffileinthewebserverinstallationdirectory. Enterthenumberassociatedwiththerequiredoptiontochange therespectivesettings.Refertotheoptionsonthescreentonavigate. EnterNtoproceed. IftheinstallationprogramdetectsIBMWebSphereApplication Serveronyoursystem,thenextpanelaccessedusingApplicationServer tabasksifyouwanttoconfiguretheZandIEmulatorforWebconfiguration servletinWebSphereApplicationServer.IfusersrunZandIEmulatorforWebthrough afirewall,thiseliminatestheneedtoopenanextraportforclient communicationswiththeZandIEmulatorforWebServiceManager.SeeInstallingtheconfigurationservletformoreinformation. Ifyoutypenumberoralphabetthatappearstotheleftofthe question,IBMInstallationManagerdisplaysalistoftheversions oftheapplicationservers,theirprofilesandserversdetected,prompting userstochoosefromthem.Theinstallationprogramautomatically deploystheconfigurationservletontheWebapplicationserveryou designate,anditconfiguresyourclientstoaccesstheServiceManager throughthatservlet. Ifyouproceedwithoutchoosingtoconfiguretheservlet,the installdoesnotconfiguretheconfigurationservlet.Clientscan accesstheServiceManagerdirectlyonport8999(or analternativeportyouhadspecified). Note: TheWebsphereapplicationserverisdetectedifithasbeeninstalled bythesameIBMInstallationManagerprogramonthesystem.Theversions thatcanbedetectedareWebsphereApplicationServerV8.0andWebsphere ApplicationServerV8.5. Aserverwithadministrativesecurityenabledisnotsupported forservletconfigurationduringtheinstallation. Thenextpanelisthesummarypanel.Reviewyourselectionsbefore continuingwiththeinstallation. Togeneratearesponsefile,enterG:to generateaninstallationresponsefile. Enterthenameoftheresponsefileanduse.xmlas thefileextension.ResponsefilesareXMLfiles. Includeadirectorylocationwhenyouentertheresponsefile nametosavethefiletoadifferentlocation. EnterItostarttheinstallation. Whentheinstallationcompletes,enterF:to finish. EnterXtoexitInstallationManager. InstallingDeploymentwizardinConsolemode TheDeploymentWizardisautomaticallyinstalledaspartofthe WindowsZandIEmulatorforWebserverinstallation.Itisalsoavailableseparately forthosecustomerswhodonotwishtoinstalltheentireWindowsZandIEmulatorforWebserver. UserscanselectonlyDeploymentWizardOptionduringInstallation. RefertoInstallingintheConsoleModeformoredetails. InstallingZIEHostAccessToolkitinconsolemode TheZIEHostAccessToolkitisautomaticallyinstalledaspart oftheWindowsZandIEmulatorforWebserverinstallation.Itisalsoavailable separatelyforthosecustomerswhodonotwishtoinstalltheentire WindowsZandIEmulatorforWebserver.UserscanselectonlyZIEHostAccess ToolkitoptionduringInstallation. RefertoInstallingintheConsoleModeformoredetails. InstallinginSilentMode InstallingZandIEmulatorforWebinsilentmodeenablesyoutouseascript fortheinstallation.Youneedtocreatearesponsefilefirstbefore startingtheInstallationManagerusingtheresponsefile. ForinformationaboutinstallingpackagessilentlyusingInstallation ManagerversionV1.8.3,refertothefollowingtopicsintheInstallation ManagerInformationCenter: Silentinstallationroadmaps InstallationManagercommand-linearguments forsilentmode Installationprocedure ThissectioncontainsinstructionsofinstallingZIEWebin SilentMode. PerformthefollowingtaskstoinstallZIEWebinSilent Mode: Tocreatearesponsefile,recordaresponsefileusingtheIBM InstallationManagerinwizardmodeonamachinewhereGUIisavailable withthe-recordoption.Formoredetails, seeRecordaresponsefilewithInstallationManager. Forexample,onWindowstherecordofaresponsefiledisplayslike this: C:\ProgramFiles(x86)\HCL\InstallationManager\eclipse>IBMIM.exe-recorde:\recordResponse.xml Ifneeded,openthegeneratedXMLfileintoviewandeditpreferences. Fordetailsonthefile,refertoInstallation Managersilentresponsefilecommands. Toperformsilentinstallationusingthegeneratedresponsefile, usetheimclcommand-lineutilityprovided byIBMInstallationManager.Examplesondifferentoperatingsystems arelistedbelow: Windows: imcl.exeinputresponse_file-loglog_file Linux,UNIX,IBMi,IBMz/OS®, andOSX ./imclinputresponse_file-loglog_fileFormore details,seeInstallingapackagesilently byusingaresponsefile. Note: Itisrecommendedtoavoidusingthe-skipInstallparameter whenrecordingaresponsefileforZandIEmulatorforWebinstallation. Ifawebserver,anapplicationserver,orbothareconfigured byZandIEmulatorforWebduringthesilentinstallation,youneedtorecord theresponsefileinasimilarsoftwaresetupsothattheuserpreferences andsoftwareparametersarerecordedintheresponsefileaccordingly. Forexample,ifHTTPServerV8.5isgoingtobeconfigured,itis recommendedthatthefollowingparametersmatchforbetterresults: TheHTTPserverversion TheHTTPserverinstallationlocationpath Thehttpd.conffilelocationpathintheHTTPserver Similarly,forsilentinstallationinanenvironmentwhere WebsphereApplicationServerislocated,recordtheresponsefile onasystemwhereasimilarWebsphereApplicationServersetupis available. Ifaresponsefilerecordedinanenvironmentwhere WebsphereApplicationServerisnotinstalled,itisrecommendedto beusedinenvironmentswhereWebsphereApplicationServerisnot installed. Itisrecommendedandhelpfultomaintainseparateresponsefiles fordifferentdeploymentscenarios. Youneedtorecordtheresponsefileonthesameoperatingsystem platformthatZandIEmulatorforWebistobeinstalledon.Forexample,for silentinstallationonlinux,recordtheresponsefileonLinux.It isusefultomaintainseparateresponsefilesfordifferentoperating systems. Thepre-requisitesfortheconsoleortheGUImodeoftheinstallation (asapplicable)arerelevantinsilentinstallmodeaswell.These include(butnotlimitedto)thefollowing: Theloggedinusermusthavetheadministratorprivileges. TheInstallationManagermusthavebeeninstalledinAdministrator mode. InstallationManagerV1.8.3orhigherisinstalledtoinstallZandIEmulatorforWeb. In casewhereadministrativesecurityisenabledonWebsphereApplication Server,configurationoftheZandIEmulatorforWebConfigurationServlet isnotsupportedduringinstallation.Youneedtoconfigureitmanually. Installingtheconfigurationservlet DuringtheZandIEmulatorforWebinstallation,youcanchoose tohavetheconfigurationservletinstalledandconfiguredoni/OS, OS/400,Windows,AIX,Linux,andSolarisforIBMApplicationServer. AllWebserversandservletenginesareconfigured differently.CheckyourWebserverandservletenginedocumentation forservletconfigurationdetailsonyouroperatingsystem. Installingtheconfigurationservletisnecessaryonlyifboth ofthefollowingstatementsaretrueforyourZandIEmulatorforWebdeployment: YouplantoconfigureZandIEmulatorforWebsothatclientcommunication withtheServiceManagerisnecessary(asintheconfigurationserver-based andcombineddeploymentmodels,ifyouenableLicense-UseCounting, orifyouusetheRedirector). Afirewallprotectstheserver(s)onwhichyouplantomaintain sessionconfigurationinformation,andyoudonotwanttoopenaport inthatfirewalltogiveoutsideclientsaccesstotheServiceManager.Bydefault,theZandIEmulatorforWebclientsuseport8999toaccess configurationinformationfromtheServiceManager.Ifanyofyour clientsareoutsidethefirewall,thefirewalladministratorneeds toopenport8999bothinternallyandexternally.However,youcan avoidopeningthisportbycustomizingyourclientstousetheconfiguration servlettoaccessconfigurationinformation. DeployingtheservletonWebSphereApplicationServer DuringZandIEmulatorforWebinstallationonWindows,AIX,Linux, andSolaris,theinstallutilitysearchesyoursystemforaninstance ofWebSphereApplicationServer.Ifitdetectsaninstance,theinstall utilitycanautomaticallyinstallandconfiguretheconfiguration servletonWebSphereApplicationServerVersions5.1,6.0,6.1and 7.0. ForplatformsthatdoprovideaninstallationprogramsuchasSystem zandothers,youwillneedtomanuallyinstalltheconfiguration servlet.RefertoyourWebSphereApplicationServerdocumentation forstepsoninstallingenterpriseapplications.Youcanalsogotohttp://www.ibm.com/software/webservers/and navigatetotheWebSphereApplicationServersupportpage,whereyou canfindalinktothedocumentationofyourversion. TheZandIEmulatorforWebconfigurationservletEARfile,cfgservlet.ear, islocatedinthelibdirectoryofyourZandIEmulatorforWebinstallation. ForWebSphere ApplicationServer5:Afteryousaveyourdeploymentsettingsinthe administrativeconsole,youneedtostarttheZandIEmulatorforWebconfiguration servletintheEnterpriseApplicationswindowofWebSphereApplication Server.ThengototheEnvironmentwindowandselectUpdateWebServer Plug-in. Aftertheconfigurationservletisinstalled,youcanconfigure yourclientstousetheconfigurationservletinsteadofdirectly accessingtheServiceManager.YoucanusetheDeploymentWizardto buildcustomizedHTMLclientpages.Thewizardsetstheappletparameters intheHTMLbasedonyourinput,soyoudonothavetolearnthesyntax andvalidparametervalues.HCLrecommendsthatyouusetheDeployment WizardtosettheConfigServerURLparameterintheclientHTMLtoZIEConfig/ZIEConfig/zieweb. Formoreinformationregardingconfigurationservletparameters, configurationandexamples,seeConfiguringthe configurationservletintheonlinehelp. UninstallingtheZandIEmulatorforWebserver YoucanusetheInstallationManagerGUItouninstall theZandIEmulatorforWebVersion2.0.Followthestepsbelowfortheuninstallation: StopallZandIEmulatorforWebrelatedapplications(Forexample,Deployment WizardandHCLZandIEmulatorforWebServiceManager). StartInstallationManager.ClickUninstall. SelectHCLZandIEmulatorforWebandtheappropriateversionandclickNext. Reviewthesummaryinformation.ClickUninstall. Iftheuninstallissuccessful,theprogramdisplaysamessage thatindicatessuccess. Iftheuninstallisnotsuccessful,clickView logtotroubleshoottheproblem. ClickFinish. ClickFile>Exitto closeInstallationManager. UninstallingZandIEmulatorforWebusingInstallationManagerConsole mode Youcanuseconsolemodetouninstallpackages.Touninstall,the usermustbetheadministratororloginwiththeadministratorprivilege. PerformthefollowingtaskstouninstallZIEWebinthe InstallationManagerConsoleMode: CloseallprogramsthatareassociatedwithZandIEmulatorforWebinstallation. Forexample,DeploymentWizardandHCLZandIEmulatorforWebServiceManager. Enterthecommand :imcl-candpressEnter Enter5toproceedtheuninstallation. Typethenumberthatappearstotheleft oftheZandIEmulatorforWeb2.0packagegroup.PressEnter. ReviewthedetailsoftheZandIEmulatorforWeb2.0 packagegroupthatistobeuninstalled.TypeNforNextorpressEnter.Nisthedefaultselection. SelecttheZandIEmulatorforWebpackagebytyping thenumberthatappearstotheleftofZandIEmulatorforWeb14.0package. PressEnter.EnterNforNext. Confirmthepackagetobeuninstalled.TypeUforUninstall,andpressEnter. Thispanelalsoprovidesanoptiontocreatearesponsefile.PressGandEntertoproceedwith creatingaresponsefile.Thisstartsuninstallation. Atthenextprompt,pressFtoFinish. ConfiguringZandIEmulatorforWeb ConfiguringZandIEmulatorforWebemulatorclients AfterinstallingZandIEmulatorforWeb,youneedtocreateHTMLfiles andconfigureZandIEmulatorforWebsessionsforyourusers. ZandIEmulatorforWebprovidesasampleHTMLfile ofready-to-use3270,5250,VT,andFTPemulatorsessionspre-configured withJavaauto-detectioncomponents.These sessionsusetheHTML-basedconfigurationmodelandareprovidedto allowyoutogetZandIEmulatorforWebupandrunningandaccessyourhost systemsquickly.Tousetheseemulatorsessions,takethefollowing steps: Locatetheclients.zipfileintheyour_publish_directory\samples\htmldirectory, whereyour_publish_directoryis thenameofyourZandIEmulatorforWebpublishdirectory. Verifythattheclients.zipfilecreatedbytheDeploymentWizard islocatedinthedirectoryinwhichyouwanttounzipthefiles(either intheZandIEmulatorforWebpublishdirectoryorinaspecial-purposepublish directory).Ifnot,copythe.zipfiletothatdirectory. UsetheDWunziptooltounzipthecontentsofclients.ziptoyour publishdirectory.RefertoUsingDWunzipfor moreinformationabouthowtousethistool. Useyourbrowsertopointtoclients.htmlonyourWebserver, forexample,http://host/alias/clients.html. Right-clicktheappropriatesessioniconandthenselectProperties toopensessionproperties.Fillinthecorrectdestinationaddress, port,andanyotherconnectionpropertiesofyourhostsystem.Click OK. Doubleclickthesessionicontostartthesession.YoucanusetheDeploymentWizardtocustomizetheHTMLfile. Formoreinformation,refertoUsingtheDeploymentWizard. CreatingZandIEmulatorforWebHTMLfiles ThebestwaytocreateandsetupyourHTMLfilesforZandIEmulatorforWebis tousetheDeploymentWizard.TheDeploymentWizardallowsyouto easilycreatecustomHTMLfilesthatcontainalloftheZandIEmulatorforWebfeatures tailoredforyourenvironment.Thefollowingisalistofsomeof themanyfeaturesthatcanbeconfiguredusingtheDeploymentWizard: Configurationmodels.Configurationmodels definethehigh-levelapproachyouwishtofollowwithregardtowhere youdefineyoursessionsandwhereanyuserpreferencesarekept. Formoreinformationaboutconfigurationmodels,refertoPlanningfordeployment. Preloads.ZandIEmulatorforWebruns asanappletorapplicationandmustdownloadcodetotheusers'machines. Bydefault,theZandIEmulatorforWebclientdownloadsallofthecomponents, butyoumayreducethedownloadsizebyremovingthosecomponents thatarenotneeded. WebStartclient.TheWebStartclientcaches theclientcodeandadditionallyallowsyoutorunZandIEmulatorforWebwithout abrowser. Webpageappearance(customHTMLtemplates). YoucaneasilysetupatemplatethattheDeploymentWizardwilluse togenerateyourHTMLfiles.Thisfeaturemakesiteasytoaddyour ownbackground,banners,etc. WebStartoptions.WhenrunningtheWeb Startclient,thecodemustbeupgradedwhennewerversionsofthe clientareavailable.YoucanuseanumberofDeploymentWizardoptions tocontroltheupgrades. LocationoftheZandIEmulatorforWebinstall (codebase).Usually,DeploymentWizardfilesareplacedintheZandIEmulatorforWebserver's publishdirectory.However,sometimesitmaybeusefultoputthese filesinalocationthatisindependentoftheZandIEmulatorforWebserver sothattheycanbegranteddifferentsecuritycontrolsormakeZandIEmulatorforWebserver upgradeseasier,forexample. WebSpherePortal.WebSpherePortal providesaframeworkforpluggingcontentextensionsknownasportlets intoaWebsite.Portletsareapplicationsthatorganizecontentfrom varioussourcesanddisplayitonasingleHTMLfileinabrowser window.TheHTMLfilesthatareusedtolaunchZandIEmulatorforWebsessions canbedeployedasportlets,allowinguserstoaccessZandIEmulatorforWebthrough aportalinterface. WindowsDomainlogon.Ifyourusersare loggedontoaWindowsdomain,thisoptionautomaticallylogsusers ontoZandIEmulatorforWebusingtheirWindowsusername.Thisoptionis availableonlywhenusingtheconfigurationserver-basedmodelin theDeploymentWizard. TousetheWebStartclient,youneedtouse theDeploymentWizard.Predefinedfilesforthisclienttypearenot provided. ConfiguringZandIEmulatorforWebsessions InadditiontosettingupyourHTMLfiles,youneedtodefinesessions foryourusers.IfyouareusingtheHTML-basedmodel,thenyouconfigure yoursessionsintheDeploymentWizardatthesametimethatyoucreate theHTMLfiles.Otherwise,ifyouareusingtheconfigurationserver-based modelorthecombinedmodel,orusingoneofthepredefinedclients, youwillneedtocreategroups,users,andsessionsintheconfiguration serverusingoneoftheadministrationclients. Thereisafullrangeofoptionsavailabletoyouwhenyouare configuringyoursessions,regardlessofwhetheryouneedtousethe DeploymentWizardoroneoftheadministrationclients: Sessionproperties.Allofthesessionproperties canbeconfigured,includingconnectioninformation,security,etc. Eachofthefieldsmaybelockedtopreventusersfromupdatingthem. Runtimeoptions.Whenconfiguring asession,youcanlaunchthesessionandconfigurefeaturessuch assessionsizeandplacement,colors,toolbarcustomization,and macros.YoucanconfigureruntimeoptionsintheDeploymentWizard andtheFulladministrationclient. Disablinguserfunctions.Youcandisable almostanyofthefunctionsthatusersnormallyreceiveaspartof theirZandIEmulatorforWebsession,suchasbookmarking,creatingorrunning macros,etc. UsingtheDeploymentWizard TheDeploymentWizardrunsonWindowsandLinuxplatforms. TostarttheDeploymentWizard,selectoneofthefollowingways: IfyouautomaticallyinstalledtheDeploymentWizard aspartoftheWindowsZandIEmulatorforWebserver,gotoStart>Programs>HCLZandIEmulatorforWeb>Administration>DeploymentWizard.TheDeploymentWizardWelcomewindowappears. TheDeploymentWizardguidesyouthroughconfigurationchoices andprovidescomprehensivehelpforthefeatures.Whenyouhavefinished selectingfeatures,theDeploymentWizardcreatestheHTMLandsupporting filesforyou.ThesefilesneedtobeplacedontheZandIEmulatorforWebserver inadirectoryknowntoyourWebserver;usually,thisdirectoryis yourZandIEmulatorforWebserver'spublishdirectory. DistributingtheDeploymentWizardoutputtoyourZandIEmulatorforWebserver IfyourZandIEmulatorforWebserverisonaWindowsorIBMSystemiplatform, youmightbeabletowriteyourDeploymentWizardHTMLandconfiguration filesdirectlytoyourZandIEmulatorforWebserver'spublishdirectory. OnthefinalscreenoftheDeploymentWizard,youcanselectwhere towritethegeneratedfiles.Youmayselectanylocalornetwork driveaccessiblebythemachinewhereyourDeploymentWizardisrunning. Inthiscase,youwoulddirecttheDeploymentWizardoutputtoapublish directoryontheZandIEmulatorforWebserverandspecifyanoutputformat ofHTML.Assumingthatyouhavealreadydefined yoursessions,theHTMLpageisthenreadytobeaccessedbyyour users. Otherwise,ifyourDeploymentWizardcannotdirectlywritetoyourZandIEmulatorforWebserver, thenyoushouldselecttohavetheDeploymentWizardgenerateazip filefortheoutputformat.TheDeploymentWizardwillthenproduce asinglezipfilecontainingalloftheHTMLandsupportingfiles. YouwillneedtomovethezipfiletotheZandIEmulatorforWebserverand useDWunziptoexplodethezipfileintothe desiredpublishdirectory.Assumingthatyouhavealreadydefined yoursessions,theHTMLpageisthenreadytobeaccessedbyyour users. UsingZandIEmulatorforWebadministrationandnewuserclients ZandIEmulatorforWebsuppliesseveralpredefinedclientsforadministeringZandIEmulatorforWeband creatingnewuseraccounts.Beforeaccessinganemulatorclientor aDatabaseOn-Demandclientthatusestheconfigurationserver-based orcombineddeploymentmodels,youneedtoaddusersandconfigure sessionsforthemwithoneoftheadministrationorfulladministration clients. Loadingadministrationandnewuserclients Toloadanadministrationornewuserclient,dooneofthefollowing: SpecifythefullURLoftheHTMLfileinyourbrowser: http://server_name/zie_alias/client_name.htmlwhereserver_nameis thehostnameorIPaddressoftheZandIEmulatorforWebserver, zie_aliasisthealias(orpath)ofthepublish directory,andclient_name istheHTMLfile nameoftheadministrationornewuserclient. To logonastheadministratorthefirsttimeaftertheinitialinstallation: TypethedefaultuserID:admin. Typethedefaultpassword:password. ClickLogOn. Loadthedashboard_xx.htmlfile,wherexxisyourtwo-letterlanguagesuffix,intoyour browsertoviewlinkstoalltheavailableadministrationandnew userclients,plusotherpredefinedclients.dashboard_xx.htmlis locatedinthepublishdirectory. Administrationclients Administrationclientsenableyoutoperformthefollowingtasks fordatastoredontheconfigurationserver: Manageusers,groups,andsessions Configure,manageandtracetheRedirectorservice ConfigureDatabaseOn-Demand Enablesecurity Viewtraceandmessagelogs Disablefunctionstoendusers AdministrationclientsrunonallZandIEmulatorforWebclientplatforms excepttheMacinstoshoperatingsystem.IfyouarecreatingHTMLfiles intheDeploymentWizardusingeithertheconfigurationserver-based orcombinedmodels,youneedtoconfiguresessionsontheconfiguration serverusinganadministrationclient.RefertoBasic ConfigurationStepsintheonlinehelpformoredetailedinformation aboutconfiguringtheZandIEmulatorforWebconfigurationserver. ZandIEmulatorforWebsuppliesthefollowingpredefinedadministration andfulladministrationclients: Administrationclient(admin.html) Loadsthedownloadversionoftheadministrationclient. FullAdministrationclient(adminfull.html)2 LoadsthedownloadversionofthefullAdministrationclient. Thefulladministrationclientgivestheadministratortheadditional abilityofstartingsessionstoconfigureruntimeproperties.However, thedownloadsizeofthefulladministrationclientislargerthan thedownloadsizeofadministrationclient. Notes: Usetheproblemdeterminationclientsonlyifyouareworking withSupporttoresolveaproblemwithyourZandIEmulatorforWebinstallation. ThefullAdministrationclientistheAdministrationclientwith StartSessionenabled. IfyouuseaJava-enabledbrowser,youneedtousetheJava ControlPaneltoremovetheAdministrationclient.For instructions,refertoUsingtheJavaplug-inin theonlinehelp. DirectoryUtility TheDirectoryUtilityisaJavaapplicationtheadministratorcan usetomanageuser,grouporsessionconfigurationinformation.This informationisstoredeitherintheZandIEmulatorforWebdefaultdatastore, orinanLDAPdirectory.Thisutilityisonlyusefulintheenvironment wheretheConfigurationServer-basedmodelisinuse.TheDirectory Utilityenablesyoutoadd,delete,orupdatelargenumbersofusers, groups,orsessionsinabatchmodeenvironmentinsteadofusingthe Administrationclient.TheDirectoryUtilityreadsanXMLASCIIfile thatcontainsthefollowingactionstobeperformedonusers,groups, orsessionsdefinedtotheConfigurationServer: Add,update,anddeletegroups Add,update,anddeleteusersfromgroups Add,update,anddeletesessionsfromusersorgroups Listexistingusersandgroupsinoutputfiles,asproductsof uniquesearches Listexistingusersandgroupsinoutputfilesthatcanbereused asinput Searchesperformedwiththelistactionare eitheruser-based(returninguser-specificinformation)orgroup-based (returninggroup-specificinformation).LDAPenvironments,however, supportonlyuser-basedsearches. Formoreinformation,seeUsingtheDirectory Utilityintheonlinehelp. Newuserclients IftheadministratorhasenabledAllowuserstocreateaccounts intheUsers/Groupswindow,userscanusethepredefinednewuser clientstocreatenewaccounts.SeetheEnabling userstocreateaccountstopicintheonlinehelpformoreinformation aboutthisclient. ThefollowingnewuserclientsaresuppliedwithZandIEmulatorforWeb: Newuserclient(NewUser.html) LoadsthedownloadversionoftheNewuserclient. Newuserclientcached(NewUserCached.html) LoadstheNewUserclientinacachedenvironment. Newuserclientwithproblemdetermination(NewUserCachedDebug.html)1 LoadstheNewUserclientinacachedenvironmentwithproblem determination(sessionloggingandtracing). Note: Usetheproblemdeterminationclientsonlyifyou areworkingwithHCLtoresolveaproblemwithyourZandIEmulatorforWebinstallation. UsingZandIEmulatorforWebemulatorclients Thischapterdiscussesissuesthatyouneedtobeawareofwhen configuringandusingZandIEmulatorforWebterminalemulatorclients. LoadingemulatorclientsdescribeshowtoaccessZandIEmulatorforWebemulator clients. Selectingtheappropriateclientdiscusseshowtodecidewhichclient isbestforyourneeds. WebStartclientdiscusseshowtousetheWebStartclient, includinginstallingandremovingit,configuringyourWebbrowser, usingWebStartwithWindowsrestrictedusers,andupgrading. Deployingcustomer-suppliedJavaarchivesandclassesdescribeshowtodeployJavaarchives andclassfilestoyourclients. Loadingemulatorclients ZandIEmulatorforWebprovidesasampleHTMLfile ofready-to-use3270,5250,VT,andFTPemulatorsessionspre-configured withJavaauto-detectioncomponents.These sessionsusetheHTML-basedconfigurationmodelandareprovidedto allowyoutogetZandIEmulatorforWebupandrunningandaccessyourhost systemsquickly.Formoreinformation,refertoConfiguringZandIEmulatorforWebemulatorclients. ToloadaZandIEmulatorforWebemulatorclient,auserstartsaWebbrowser andentersintheAddressfieldtheURLofaZandIEmulatorforWebHTMLfile. TheZandIEmulatorforWebHTMLfilemustbeoneofthefollowing: AnHTMLfilethatyoucreatewiththeDeploymentWizard. OneofseveralgenericpredefinedHTMLfilesincludedwithZandIEmulatorforWeb.HCLrecommendsthefirstoption.Formoreinformationonthe DeploymentWizard,seetheDeploymentWizardtopic intheonlinehelp. Ifyouremulatorclientisdeployedwiththe configurationserver-basedorcombineddeploymentmodel,youneed toaddusersandconfiguresessionswiththeadministrationclient beforeyoucanusetheemulatorclient. TolaunchHTMLfilesgeneratedbytheDeployment Wizard,specifythefullURLoftheHTMLfileinyourbrowser: http://server_name/zie_alias/client_name.htmlwhereserver_nameis thehostnameorIPaddressoftheZandIEmulatorforWebserver,zie_aliasisthealias(orpath)ofthepublish directory,andclient_nameistheHTMLfile nameoftheclient.Forexample,ifyoucreatedanHTMLfileinthe DeploymentWizardcalled3270sessions.html,youcanloaditbyspecifying aURLsuchasthefollowing: http://host.yourcompany.com/zieweb/3270sessions.html TolaunchapredefinedHTMLfileincludedwithZandIEmulatorforWeb, pointyourbrowsertodashboard_xx.htmlfile, wherexxisyourtwo-letterlanguagesuffix, toviewlinkstoalltheavailablepredefinedclients.dashboard_xx.html islocatedinthepublishdirectory. Whenyouaccessaclient,asecuritywarningappearstonotify youthatZandIEmulatorforWebwascreatedbyHCLTechnologies Ltd.UsersmustgrantJavasecurityprivilegesforthissession oranyfuturesessionsbyclickingtheappropriatebuttonsinorder forZandIEmulatorforWebtoworkproperly. Note: Pop-upblockersmightpreventtheJavasecuritywindows andotherresponsewindowsfromappearing. Selectingtheappropriateclient ThetypesofZandIEmulatorforWebclientsthatyouusedependonyour computingenvironmentandyourpersonalpreferences. WebStartclientsarestoredlocallyandloadfaster(unless anupdatedversionoftheclientisbeingdownloadedfromtheWeb server).Youcanusethemequallywellovernetworkanddial-upconnections. WebStartclientstakeupmorelocaldiskspace, butonmostmachinesthisisnotaproblem. TheWebStartclientallowsuserstorunZandIEmulatorforWebsessions withoutabrowser.UsersstartZandIEmulatorforWebsessionsfromtheJava WebStartApplicationManager.IfauserclosestheZandIEmulatorforWebdesktop andthereareactivesessionsrunning,theuserispromptedtomake surehewantstocloseallsessions. YoucanuseWebStartinthesameZandIEmulatorforWebenvironment. TousetheWebStartclient,youneedtouse theDeploymentWizardtogenerateyourHTMLfile. WebStartclient TheJavaWebStartclientallowsuserstostartZandIEmulatorforWebwithout abrowser.YouneedtousetheDeploymentWizardtogenerateaHTML filefortheWebStartclient.TheHTMLfilegeneratedbytheDeployment WizardpointstoaJavaNetworkLaunchProtocol(JNLP)file.TheJNLP filedefinesaJavaApplication,includingparameterspassedtothe applicationandthearchivesthatcontainsclassfilesusedbythe application.TheJNLPfileandtheassociatedarchivesarestored onaWebserver. WhenauserpointstotheJNLPfile,thebrowserlaunches theWebStartapplicationontheclientcomputer.Itdownloadsthe associatedarchives,checkstoinsurethattheminimumrequiredJRE ispresent(ifspecified),storesthearchivesontheuser'smachine, setsupiconstorepresenttheapplication,andlaunchestheapplication. UserscanstartZandIEmulatorforWebsessionsfromtheJava WebStartApplicationManager.ByusingtheJavaWebStartApplication Manager,ZandIEmulatorforWebsessionsdonotdependonabrowser.Therefore, closingabrowserdoesnotendaZandIEmulatorforWebsession.Iftheuser attemptstoclosetheZandIEmulatorforWebdesktopandthereareactive sessionsrunning,theuserispromptedtomakesurehewantstoclose allsessions.Ifso,thesessionsareterminatedcleanlytoprevent problemsthatoccurwhentherearesessionsrunninginthebrowser andthebrowserisabruptlyclosed. Aftertheinitiallaunchoftheapplication,youcan eitherpointtheWebbrowserattheJNLPfileagain,orclickthe mouseontheiconscreatedontheclientmachine.AfterWebStart isrestarted,itcheckstheWebserverforupdatestothearchives anddownloadsanyupdatedfiles. JavaWebStartisbundledwithJRE1.8orhigherversions oftheJavaRuntimeEnvironment. FormoreinformationaboutJavaWebStart,refertohttp://www.javasoft.com.ZandIEmulatorforWebVersion2.0recommends Java1.8orhigher. TheZIEWebWebStartclienthasthefollowingrequirements: JRE1.8orlaterisrequiredtouseHTTPStoaccessfilesfrom theWebserver. JRE1.8orlaterisrequiredtouseanHTTPproxywithWebStart. SessionpropertiesthatsayuseBrowsersettings(like proxyserverorTLS)cannotbeusedwithWebStart. InstallingtheWebStartclient TherearetwowaystoinstalltheWebStartclient.Typically, usersinstallitfromaZandIEmulatorforWebserveroverthenetwork,either withorwithoutusingaWebbrowser.Alternatively,userscaninstall itfromaLANorDVDdrive,althoughthisrequiresasmalladditional downloadoverthenetwork.RegardlessofhowusersinstalltheWeb Startclient,onceitisinstalledandintheJavaWebStartApplication Manager,theycanstartitbyclickingtheappropriateiconinthe ApplicationManager. InstallingtheWebStartclientfromtheZandIEmulatorforWebserver UserscaninstalltheWebStartclientfromtheZandIEmulatorforWebserver eitherwithorwithoutusingabrowser. UsingaWebbrowser ToinstalltheWebStartclientusingaWebbrowser,userscan performthefollowingsteps: SpecifythefullURLoftheHTMLfileinyourbrowser,asdescribed inLoadingemulatorclients. TheWebStartclientbeginsinstalling immediately.Awindowshowstheprogressoftheinstallation.The upperprogressbarofthiswindowshowsthestatusofindividualfiles astheydownload,whilethelowerprogressbarshowsthestatusof theoverallinstallation. Whentheinstallationcompletes,theinstallationcodeimmediately launchestheWebStartclient.Youdonothavetorestartthebrowser. WithoutusingaWebbrowser ForWindowsusers,distributetheJNLPfilethatwasgenerated fromtheDeploymentWizard(forexample,myzieweb.jnlp)toyourend users.Oncethefileisdistributed,userscantypestartmyzieweb.jnlpto starttheWebStartapplicationandbegininstallingtheZandIEmulatorforWebclient. Sincethefileextension'.jnlp'willberegisteredtotheWebStart application,theWebStartapplicationwillstart,readthefile, anddownloadalltheappropriatearchivefilesfromtheZandIEmulatorforWebserver thatwasspecifiedintheDeploymentWizard-generatedJNLPfile.TheZandIEmulatorforWebWeb Startclientwillstartwhenthedownloadcompletes. IfyouhavenotdistributedtheJNLPfiletoWindowsusersoryour clientsarerunningplatformsotherthanWindows,userscanstill downloadtheWebStartclientwithoutaWebbrowserbystartingthe JavaWebStartApplicationManagerdirectlyandpointingtotheJNLP fileontheWebserver. ForWindowsclients,userscanperformthefollowingsteps: OpentheJavaWebStartApplicationManagerbydouble-clicking thejavaws.exefile,typicallylocatedintheC:\Program Files\JavaWebStartdirectory. PointtotheJNLPfileontheWebserverathttp://ZIEServer/ZIEAlias/myzieweb.jnlp. ForLinuxclients,ausercantype/javawshttp://ZIEServer/ZIEAlias/myzieweb.jnlpto installandruntheZandIEmulatorforWebsession.AZandIEmulatorforWebicon appearsintheJavaWebStartApplicationManager.Userscandouble-click thisicontolaunchZandIEmulatorforWeb. InstallingtheWebStartclientfromaLANorDVD Inordertoreducenetworktrafficandminimizedownloadtimes, somecompanieswishforuserstoinstalltheWebStartclientfrom aLANorDVD.TheWebStartclientrequiresanadditionalcomponentthatmustbe installeddirectlyfromtheZandIEmulatorforWebserveroveranetwork. InstallingtheWebStartclientinvolvestwostepsfortheadministrator followedbytwostepsfortheenduser. First,theadministratorshouldperformthefollowingtwosteps: UsetheDeployment WizardtogenerateanewHTMLfile. UsetheDeploymentWizardasecondtimetoedittheHTMLfile thatyoucreatedinthepreviousstep.(Be surenottomakeanyotherchangessothatthedefinedsessionsand thepreloadcomponentliststaythesame.)ThissecondHTMLpage istheonethatyoushouldpublishforuserstoaccess.Second,onceyouhavepublishedyourHTMLfile,usersshould performthefollowingtwosteps: Install theclientthattheadministratorsetupontheLANor DVD. InstalltheadditionalcomponentfortheWebStartclientbyfollowing thestepsforInstallingtheWebStartclientfromtheZandIEmulatorforWebServer:UsingaWebbrowser.TheWebStartclientcodewilldeterminethat theZandIEmulatorforWebarchivefileshavealreadybeendownloadedand willnotdownloadthemagain.Theremainingcomponentshoulddownload quickly,andtheZandIEmulatorforWebWebStartclientwillstart. ConfiguringyourWebserverforWebStart TheadministratormustregistertheJNLPextensionasamimetype withtheWebserversothebrowserknowstolaunchtheWebStartapplication. Forexample,thefollowingsectionsdescribehowtoconfigureApache HTTPServer,IBMHTTPServer,andMicrosoftIIS. ApacheHTTPServerorIBMHTTPServer ToconfiguretheApacheHTTPServerorIBMHTTPServerforWeb Start,addthefollowinglinetomime.types: AddTypeApplication/x-java-jnlp-file.jnlp MicrosoftIIS7.0 ToconfigureMicrosoftIISforWebStart,completethefollowing steps: FromControlPanel>AdministrativeTools>InternetInformation Services,clickDefaultWebSite. ClicktheHTTPHeaderstabontheProperties. UnderMIMEMap,clicktheFileTypestabandselectNewType. IntheExtensionfield,type.jnlp. IntheContentTypefield,typeapplication/x-java-jnlp-file. ClickOK. UpgradingtheWebStartclient AftertheinitialinstalloftheWebStartclient,ifuserspoint theirbrowserstotheHTMLfilegeneratedbytheDeploymentWizard andupdatesareavailableontheZandIEmulatorforWebserver,ZandIEmulatorforWebprompts userstoupdate.Ifuserswanttoupdate,JavaWebStartdownloads theupdatedarchivefilesandlaunchesZandIEmulatorforWeb.Ifusersdecline toupgrade,ZandIEmulatorforWebpromptsthemagainthenexttimetheylaunch theHTMLfile. AddingWebStartcomponentsaftertheinitialinstall IfusersrequestafunctionthatisnotinstalledontheJavaWeb Startclient,ZandIEmulatorforWebpromptsthemtoinstalltheadditional componentsrequiredforthatfunction.Iftheychoosetoinstallthe additionalcomponents,theymustrestarttheZandIEmulatorforWebclient tousethem. BookmarkingsessionswithWebStart SincetheWebStartclientrunsoutsideofabrowser,bookmarking isdisabledsincebookmarkingisabrowserfeature.Administrators cancreateWebStartclientsthatgiveusersthesamelookasrunning anembeddedbookmarkedsessionbydoingthefollowing: OntheAdvancedOptionswindowoftheDeploymentWizard,addthe HideDesktopparameterwithavalueoftrue. Configureasinglesessiontoautostart. Configurethesessiontonotstartinaseparatewindow. UsingWebStartwithHTTPS IfyouwanttouseHTTPSwiththeWebStartclient,thecertificate authorityusedforyoursecureHTTPconnectionshouldcomefroma wellknownrootauthority.WhenyouuseZandIEmulatorforWebasanapplet anduseanHTTPSconnection,youaregiventheopportunitytotrust thecertificateusedfortheHTTPSconnectioniftherootauthority isnotknownbythebrowser.SinceJavaWebStartrunsasanapplication, thisbrowserfacilityisnotavailable.TheJavaVirtualMachineused byJavaWebStartcontainsseveralrootauthoritiesthatittrusts. IfthecertificatethatcomesfromtheHTTPSconnectionhasaroot authorityofoneoftheseauthoritiesknownbytheJVM,thesecure connectioncanbeestablished.Ifyouwanttouseacertificateauthority otherthanonesknownbytheJVMbydefault,forexample,aself-signed certificate,youneedtoimportthecertificateintothekeystore oftheJVMforeachoftheclientsaccessingthisJavaWebStartclient. ThisisrequiredtoestablishthesecureHTTPconnection. RemovingtheWebStartclient ToremovetheWebStartclient,completebothofthe followingsteps: IntheJavaWebStartApplicationManager,highlightyourapplication andclickRemove. Launchlcremove.htmlinyourbrowser. Deployingcustomer-suppliedJavaarchivesandclasses Customer-suppliedJavaclassesandarchivesareJava classfilesandarchivefilesthatarenotincludedeitheraspart oftheZandIEmulatorforWebclientoraspartoftheJavaRuntimeEnvironment. ExamplesofsuchfilesareJavaclassesorarchivesthatyouyourself haveimplementedorthatyouhaveobtainedfromthirdparties. Youwouldwanttodeploysuchclassesorarchivesforusewith theemulatorclientinthefollowingsituations: Youwantyouruserstorunmacrosthatcallcustomer-supplied Javamethods. Youwantyouruserstorunacustomer-suppliedappletwiththe session(eitherstartedautomaticallywiththesessionorlaunched usingtheActions>RunApplet...selectiononthemenuofthesession window). ForJavalimitationsonrunningcustomer-supplied applets,seeLimitationswithcustomer-suppliedappletsandJava. Althoughseveralmethodsareavailablefordeployingthesefiles, eachmethodworksonlyundercertaincircumstances.Thepossiblemethods are: UsingtheAdditionalArchivesHTMLparameterintheDeployment Wizard.SeeUsingtheAdditionalArchivesHTMLparameter. CopyingthefilestotheZandIEmulatorforWebserver'spublishdirectory. SeeDeployingfromthePublishdirectory. Thedeploymentmethodyouchoosedependson: Thetypeoffiledeployed(JavaclassesandJavaarchives) Wherethefileswillbedeployed(ZandIEmulatorforWebserverorclient workstation) Thetypeofclientplatformandthetypeofbrowser. Thethreemethodsavailablefordeployingcustomer-supplied Javaarchivesandclassesaredescribedinthefollowingsections. Inaddition,Hintsandtipsforarchivefilesprovidesmoreinformationaboutusing archivefiles. UsingtheAdditionalArchivesHTMLparameter YoucanusethismethodwhenyouwanttodeployJava archivestoaZandIEmulatorforWebserver.ThismethodworksfortheWeb Startclient. JavaarchivesmustbeJava.JARfiles. TheadvantageofusingtheAdditionalArchivesHTMLparameteris thatitcausesyourJavaarchivestobedownloadedtotheuser'sworkstation automaticallywhenoneofyourusersconnectswiththeclient HTMLfileonyourZandIEmulatorforWebserver. ThedisadvantageofthismethodisthattheseJavaarchivesor classfileswillbedownloadedagaineverytimeauserconnectsto thatHTMLfile. Thereasonfordownloadingthearchiveseverytimeyouruserconnects istoensurethattheZandIEmulatorforWebclienthasthelatestversions ofyourarchivesorclassfiles.Asaresult,thismethodworksbest whentheJavaarchivesorclassfilesarerelativelyfewandrelatively small,sothatyourusersdonothavetowaitalongtimeforthese filestobedownloaded,andsothatdownloadingthesefilestoyour usersdoesnotplaceaheavyloadonyourWebserver. Tousethismethod,performthefollowingsteps: PlacethearchivesinyourZandIEmulatorforWebpublishdirectory.The defaultpublishdirectoryisthesubdirectoryZIEWebinyourZandIEmulatorforWebserver's installdirectory,suchasc:\ProgramFiles\HCL\ZIEForWeb\ZIEWeb\. EdittheHTMLfilewiththeDeploymentWizard.Then: OntheAdvancedOptionspanel,clickHTMLParameters. IntheNamefield,enterAdditionalArchives. IntheValuesfield,enterthenamesofyourJavaarchives, separatedbycommas,withoutfileextensions(.jar).Forexample: myCustomA,myCustomB,MyCustomCFormoreinformation,seeAdditionalArchivesin theonlinehelp. DeployingfromthePublishdirectory Thismethodworksinthefollowingsituation: WhenyouwanttodeployJavaclassfilestoaZandIEmulatorforWebserver. TheJavaclassfilesmustnotbelongtoanyZandIEmulatorforWebpackage. Tousethismethod,placethearchivesinyourZandIEmulatorforWebpublish directory.ThedefaultpublishdirectoryisthesubdirectoryZIEWebin yourZandIEmulatorforWebserver'sinstalldirectory,suchasc:\Program Files\HCL\ZIEForWeb\ZIEWeb\. Hintsandtipsforarchivefiles Thefollowinghintsandtipsmightprovidehelpfulinformation aboutusingarchivefiles: Whenyoucreateyourarchive(.jar),verifythatthe pathofeachclassfileiscorrect.Forexample,thepathforcom.mycompany.MyClass shouldbecom\mycompany\.ItshouldnotbeC:\MyTestDirectory\com\mycompany\, anditshouldnotbeblank(sincetheclassfileispartofapackage). Verifythattheproperpermissionsaresetforyourarchivefiles. Thatis,inoperatingsystemsthatusefilepermissions,suchasLinux, AIX,Unix,andz/OS,thefilepermissionsforthearchivefilesshould besetto755(thatis,rwxr-xr-x). Ifyouhavetwodifferentclientpagesthatspecify differentAdditionalArchivesparameters,youneedtocloseandrestart thebrowserwhenswitchingfromonepagetoanother.Otherwise,when youswitchfromonepagetoanother,theclientisnot reloadedand,asaresult,theAdditionalArchivesparameterisnot checked. UsingDatabaseOn-Demandclients TheDatabaseOn-DemandclientisaJavaappletthatallowsanend usertobuildSQLstatementsandFileUploadstatements,tosendthese SQLstatementsandFileUploadstatementstoaremotedatabaseserver, andtoretrievetheresultsofSQLqueries(SQLSelectstatements) fromtheremotedatabaseserver. TheusercancommunicatewithadatabaseserverrunningonanIBM Systemiserverorotherplatform,solongastheproperJavaDatabase Connectivity(JDBC)driverisinstalledontheDatabaseOn-Demand clientworkstation.FormoreinformationrefertoObtainingandinstallingaJDBCdriverinthismanual. FeaturesofDatabaseOn-Demandinclude: TextandgraphicalinterfacesforconstructingSQLstatements andFileUploadstatements. TheabilitytosaveandreuseSQLstatementsandFileUploadstatements. ForSQLstatements: TheabilitytorunanSQLstatementanddisplaytheresults. TheabilitytosavetheresultsofanSQLstatementintoafile invariousfileformats,includingXML(seeFileformatsfordatabaseaccessin thismanual). ForFileUploadstatements: TheabilitytousethefollowingFileUploadtypes:create,replace, append,andupdate. Theabilitytoreaddatafilesinvariousfileformats,including XML(seeFileformatsfordatabaseaccessinthismanual). TheDatabaseOn-Demandclientisavailableonlythroughoneof threepredefinedclientHTMLfiles(seeDatabaseOn-Demandpredefinedclients). YoucannotusetheDeploymentWizardtocreateaDatabaseOn-Demand client. However,asanalternativetotheDatabaseOn-Demandclient,you cannowusedatabasefunctionsinZandIEmulatorforWebemulationclients andinmacros(seeDatabasefunctionsinDisplayEmulationclientsandinmacros). FormoreinformationseeOverviewofdatabase accessintheZandIEmulatorforWebonlinehelp. TheDatabaseOn-DemandclientexistsinaJavaversion. Therefore: AnenduserrunningaJava-enabledbrowserautomaticallyruns theJavaversionoftheDatabaseOn-Demandclient.ThisDatabaseOn-Demandclientcantakeadvantageoftheadvanced capabilitiesoftheJavaplug-in. DatabasefunctionsinDisplayEmulationclientsandinmacros AsanalternativetotheDatabaseOn-Demandclient,almostall ofthefunctionsthatareavailableintheDatabaseOn-Demandclient arenowalsoavailableinthedisplayemulationclient,including thefollowingsessiontypes: 3270Displaysession 5250Displaysession VTDisplaysession YoucanalsouseSQLstatementsandFileUploadstatementsinmacros indisplayemulationclientsessions(seetheSQLQuery actionandtheFileUploadactionintheMacroProgrammingGuide). Forexample,whileyouareconnectedtoaremotehostina3270 Displaysession,youcanlaunchamacrothatautomaticallyreadsdata fromthe3270Displaysessionwindowandwritesthedataintoatable inadatabasethatislocatedonanotherremotehost.Similarly,you canlaunchamacrothatautomaticallyreadsdatafromatableina remotedatabaseandwritesthedataintothe3270Displaysession window. FormoreinformationseeOverviewofdatabase accessintheZandIEmulatorforWebonlinehelp. StartingaDatabaseOn-Demandclient TostartaDatabaseOn-Demandclientontheclientworkstation, useoneofthefollowingtwomethods: ConnectyourbrowsertoapredefinedDatabaseOn-DemandHTMLfile, bytypingtheURLoftheHTMLfileintotheaddressfieldofyour browser(orbyclickingalinkthatdirectsthebrowsertothatURL). TheformatfortheURLis: http://server_name/zie_alias/client_name.htmlwhereserver_nameisthehostnameorIPaddressof theZandIEmulatorforWebserver,zie_aliasis thealiasofthepublishdirectory,andclient_name isthenameoftheHTMLfile.Forexample,assumingthatwww.myZIEServer.com isyourZandIEmulatorforWebserverandthatziewebisthe aliasofthepublishdirectory,thentheURLforthedownloadversion oftheDatabaseOn-Demandclientis: http://www.myZIEServer.com/zieweb/database.html ConnectyourbrowsertotheHCLZandIEmulatorforWebClientsHTMLfile, andthenclickthelinkfortheDatabaseOn-Demandclientthatyou wanttorun.TheURLoftheClientsHTMLfileis: http://server_name/zie_alias/dashboard_xx.htmlwhereserver_nameandzie_aliashavethesamemeaningsasabove.In thenameofthefiledashboard_xx,thexxisatwo-lettermnemonicforthelanguagethat youwanttouse.Forexample,forEnglish,thefileisnameddashboard_en.html, andthefullURLis(assumingthesameserverandaliasasabove): http://www.myZIEServer.com/zieweb/dashboard_en.html DatabaseOn-Demandpredefinedclients TheDatabaseOn-Demandclientisavailablethroughanyoneofthree predefinedclientHTMLfiles.YoucannotusetheDeploymentWizard tocreateaDatabaseOn-DemandclientHTMLfile.Thepredefinedclients aredescribedbelow. DatabaseOn-Demandclient(database.html) "Download"meansthat alltheclientcodeisdownloadedtotheclientworkstationeachtime theenduserstartstheDatabaseOn-Demandclient. Usetheproblemdeterminationclientonlyif youareworkingwithHCLtoresolveaproblemwithyourZandIEmulatorforWebinstallation. ConfiguringDatabaseOn-Demandforusers ToconfigureDatabaseOn-Demandforusers,followthesesteps: UsetheAdministrationUtilitytodefinegroupsandusers(seeManagingusersandgroupsintheZandIEmulatorforWebonline help). Specifythedatabasefunctionsthatyouwantgroupsandusers tobeabletoperform,andspecifydefaultvaluesforsomeofthe databaseparametersinnewSQLstatementsandFileUploadstatements (seeDatabaseOn-DemandGroup/UserOptionsin theZandIEmulatorforWebonlinehelp). IfyouwanttocreatepredefinedSQLstatementsandFileUpload statementsforusersandgroups,followthesesteps: RuntheDatabaseOn-Demandclientasanenduser,andcreateSQL statementsandFileUploadstatements(seeGetting startedwithDatabaseOn-DemandintheZandIEmulatorforWebonline help). LaunchtheAdministrationUtilityandcopytheSQLstatements andFileUploadstatementstootherusersortogroups(seeDatabaseOn-DemandGroup/UserStatementsintheZandIEmulatorforWebonline help). ObtainingandinstallingaJDBCdriver Toconnecttoadatabaseserverrunningonaremotehost,theend userneedsaJavaDatabaseConnectivity(JDBC)driverinstalledon theclientworkstation. TheZandIEmulatorforWebclientandtheDatabaseOn-Demandclientalready includeaJDBCdriverfromtheIBMAS/400ToolboxforJava.Thisdriver allowsaclienttoaccessaDB2/400databaseonaproperlyconfigured IBMSystemiorAS/400hostsystem.Youdonotneedtoregisteror deploythisdriver. IfyouneedadifferentJDBCdriver: Contactthevendorortheadministratoroftheremotedatabase toobtaintheJDBCdriver. RegistertheJDBCdriverwithZandIEmulatorforWeborDatabaseOn-Demand. SeeRegisteringaJDBCdriverintheZandIEmulatorforWebonline help. DeploytheJDBCdrivertotheworkstationsofyourendusers. SeeDeployingaJDBCdriverintheZandIEmulatorforWebonline help. Fileformatsfordatabaseaccess TheenduserselectsafiletypeforanSQLstatementoraFile UploadstatementontheOutputtaboftheSQLWizardwindoworon theFiletaboftheFileUploadwindow. Forinformationonfileformats,seeFileformats fordatabaseaccessintheZandIEmulatorforWebonlinehelp. UsingmultiplecodepageswithDatabaseOn-Demand IfyouwishtousemultiplecodepageswithDatabaseOn-Demand, youneedtoaddjarorcabfilestoyourHTMLfile.Onlythosecode pagesthatcorrespondtothelanguageoftheHTMLfileareautomatically loaded.Forexample,ifyouarerunningfromaFrenchcomputer,but youwanttoaccessaDutchhost,youneedtomakethesemodifications. EdittheCommonJars.jsfile.Use jarfilenames,evenifyourclientswillbeusingInternetExplorer (thenameswillbeconvertedtocabfilenameslater). SupportedDatabaseOn-Demandcodepages ThefollowingtableliststhesupportedDatabaseOn-Demand clientcodepagelanguages,thecorresponding.jarfilenames,and thecomponentnames: Codepagelanguage .JARfilename Component name Arabic hacpar.jar HACPAR Czech,Hungarian,Polish,Slovenian hacpce.jar HACPCE Danish,Finnish,Dutch,Norwegian,Swedish hacp1b.jar HACP1B German,Spanish,French,Italian,Portuguese, BrazilianPortuguese hacp1a.jar HACP1A Greek hacpgr.jar HACPGR Hebrew hacphe.jar HACPHE Japanese hacpja.jar HACPJA Korean hacpko.jar HACPKO Russian hacpru.jar HACPRU SimplifiedChinese hacpzh.jar HACPZH Thai hacpth.jar HACPTH Turkish hacptr.jar HACPTR TraditionalChinese hacptw.jar HACPTW Creatinganddeployingservermacrolibraries ServermacrolibrariesareavailablefortheHTMLmodel pagesandConfigmodelusers.FortheHTMLpage,userscanuseDeployment wizardtocustomizetheservermacrolibrary;fortheConfigmodel, userscanusetheZandIEmulatorforWebadminconsole.GUIbasedconfiguration allowstheadministratortoconfigureforeachsession.Fortheadministrator toconfigureforallthesessionsdefined,usetheHTMLparameterSetServerMacroLibraryPath. ThevalueofSetServerMacroLibraryPathissharepathorrelativepath. Youcanusethevaluestocreateandmaintainacentralrepository ofmacrosforuserstoaccessfromtheirZandIEmulatorforWebsessions. Thesemacrosaredownloadedtotheuser'smachineonlywhenitis needed.Whenyoumakechangestoaservermacro,usersautomatically getyourupdatesthenexttimewhentheyaccessthemacro. Servermacrolibrarieshaveseveralbenefits: Theyprovideaconvenientwaytostore,edit,andadministermacros, allfromoneeasy-to-accesslocation. Theyalloweasysharingofmacrosamongmultipleusersandacross anynumberofsessions. TheyeliminatetheneedtoimportmacrosintotheZandIEmulatorforWebsession, andcanthereforereducethesizeofthesession.Themacrosareonly downloadedtotheuser'smachineifandwhentheuseraccessesthem. Youcaneditmacrosandreplacethefilesintheservermacro libraryatanytimewithoutregeneratingZandIEmulatorforWebsessionsor modifyingtheHTMLfiles.Anychangesyoumakeareautomaticallyavailable thenexttimeauserrequeststhatmacro. ServermacrolibrariescanresideonaWebserveroronashared networkdrive.Forbothtypesoflibraries,youcancontrolwhich macrosareavailabletoparticularZandIEmulatorforWebsessions.Ifyou useaWeb-basedmacrolibrary,youneedtocreateatextfilethat identifiesthespecificmacrosthatyouwanttobeavailableforthe sessionthatyouareconfiguring.Ifyouuseashareddrive-based macrolibrary,thenallthefilesinthespecified directorywillbeavailabletothesession.Userswillnotbeallowed towritetoaWeb-basedmacrolibrary,buttheymayupdateashared drive-basedmacrolibraryiftheyhavewrite-access. DeployingaservermacrolibrarytoaWebserver PutyourmacrosinaplacethatuserscanaccessthroughaWeb server.ThisdoesnotneedtobetheZandIEmulatorforWebpublishdirectory. Foreachsessionthatrequiresaseparatesetofmacros,create atextfilethatcontainsthelistofthemacrofilenames.Thetext fileformatcanonlyhaveonemacrofilenameperline,forexample: macro1.mac macro2.mac macro3.macBesuretonotethefollowingrules: Themacronamemustbethefirstelementontheline,sinceeverything afterthefirstelementisignored. Ifthefirstelementonthelinestartswith//,thelineisconsidered tobeacommentandisignored. Eachmacrothatyoulistinthetextfilemusthavea.macextension. Putthistextfileinthesamelocationasthemacrosthatit references. IntheDeploymentWizard,clicktheConfiguremenuontheHost SessionswindowandselectServermacrolibrary...Checkthe'Use aservermacrolibraryforthissession'boxandselectWebserver macrolibrary. SpecifythefullyqualifiedURLofthemacrolistthatyoucreated inStep2,forexample,http://servername/zieweb/macrolist.txt. ClickOK. Whenusersopentheirsessions,theycanusethePlayMacroor AvailableMacroswindowstoseethemacrosspecifiedinthelistthat youcreatedfortheirsession.Thesemacrosareavailablewhenusers selectServerlibraryastheirmacrolocation.TheServerlibrary locationisonlyavailableifyouhaveconfiguredthesessiontouse aservermacrolibrary. Note: ServerMacroLibrarycanalsobeconfigured inAdminClient. Deployingaservermacrolibrarytoashareddrive Putyourmacrosinashareddirectoryonyournetwork. IntheDeploymentWizardHostSessionswindow,selectthesession youwishtoconfigure,clicktheConfiguremenu,andselectServer macrolibrary.Checkthe'Useaservermacrolibraryforthissession' boxandselectShareddrivemacrolibrary. Specifythedirectorypath.Examplesofvaliddirectorypaths includethefollowing: Absolutepaths.Mappednetworkdriveletterscanalsobeused intheabsolutepath.Notethataservermacrolibraryshouldnever pointtoalocaldrive. RemotecomputernamesorIPaddressesareallowedaslongasthe user'scomputerisalreadyremotelyconnectedandauthenticatedto thecomputerthatissharingthedirectory.Thefollowingaretwo examplesofpathstoshareddrivemacrolibraries: \\your_host\macro_library,whereyour_hostis thehostnameandmacro_libraryisthemacro directory. \\123.45.67.89\macro_library,where123.45.67.89is theIPaddressofthehostandmacro_libraryis themacrodirectory.Ifyouareconfiguringamacrolibraryformorethanonesession, andeachsessionusesitsownsetofmacros,youwillneedtocreate aseparatedirectoryforeachsession. ClickOK. Whenusersopentheirsessions,theycanusethePlayMacroor theAvailableMacroswindowstoseealistofthemacrosinthedirectory. ThesemacrosareavailablewhenusersselectServerlibraryastheir macrolocation.TheServerlibrarylocationisonlyavailableifyou haveconfiguredthesessiontouseaservermacrolibrary. Modifyingsessionpropertiesdynamically ZandIEmulatorforWebsessionsaredefinedbytheadministratorandretrieved bytheZandIEmulatorforWebclientwhenauseraccessesaZandIEmulatorforWebHTML file.Thesessionpropertiesauserseesarefixedvaluesandconsist ofacombinationoftheadministrator'sinitialconfigurationand anyuserupdates.However,theremaybetimeswhenitwouldbeuseful withsomeHTMLfiles,orwithcertainsessionproperties,todynamically setavalueatthetimethattheHTMLisaccessed.Thistypeofcontrol allowsyoutosetparticularsessionpropertyvaluesbasedoninformation suchastheIPaddressoftheclientorthetimeofday. Inordertodynamicallysetsessionpropertiesatthetimethe HTMLisaccessed,theadministratormustwriteaprogramthatruns ontheWebserverandeffectivelymodifiestheHTMLjustbeforeit issenttotheclient.Eventhoughtheinitialsessionproperties arenotdefinedintheHTML,ZandIEmulatorforWebprovidesthecapability tooverridemanyofthesessionpropertiesintheHTML.Theseoverride valuesarealwaysusedbytheclientandtakeprecedenceoverboth theinitialsessionpropertiessetupbytheadministrator,aswell asanyupdatesforthepropertymadebytheuser.TheHTMLoverride valueisneverstored,sotheclientwillreturntousingpriorsettings forthepropertywhenevertheadministratorremovestheoverride. Also,theoverriddenpropertyislockedsoausercannotchangeit. Therearemanywaysinwhichanadministratorcouldwriteaprogram todynamicallysetoneormoresessionpropertiesusingtheHTMLoverrides, suchasusingJavaServerPages(JSP),servlets,Perl,REXX,orActive ServerPages(ASP).Thischaptertakesyouthroughacoupleofexamples thatfocusoncommonadministratorissues.Theseexamplesaremeant todemonstratethesyntaxandtechniqueofoverridingparticularproperties. Thesemechanismsapplytowhicheverprogrammingapproachtheadministrator maychoose. SettinguptheinitialHTMLfile TheinitialHTMLfileshouldbecreatedusingtheDeployment Wizard,whichwillallowyoutosetupthefeaturesthatareimportant toyou,suchasthesizeofthedownloadedcodeandthefunctions availabletoyourusers.ThefollowingsectionsdescribetheHTML parametersyouwillneedtoinclude.However,keepinmindthatthe exactformatrequiredfortheseparameterswillvarydependingon theformatoftheHTML.NotethatinZandIEmulatorforWeb, someoftheHTMLisgeneratedusingJavaScript,andHTMLparameters arespecifiedwithinaJavaScriptarrayorusingJavaScriptdocument.write statements. SettingtheCodebase TosetthecodebasewhencreatinganHTMLusingtheDeployment Wizard,dothefollowing: OntheAdditionalOptionswindow,clickAdvancedOptionsandgo totheOtherbranchinthetreeview. Typetherelativepath/zieweb/intheCodebase field. SavetheHTMLfiletothedefaultZandIEmulatorforWebpublishdirectoryyour_install_directory\ZIEWeb.TheHTMLfileisnowlocatedinthesamedirectorywiththeZandIEmulatorforWeb's archivefiles. CodebasereferstotheinstalledZandIEmulatorforWebpublishdirectory andnotthedirectorywhereDeploymentWizardfilesarepublished. AlthoughyoucanenterafullyqualifiedURLintheCodebasefield, westronglyrecommendthatyouentertherelativepath/zieweb/ forthedefaultpublishdirectorywhenmodifyingsessionproperties dynamically.IfyouenterafullyqualifiedURL,anyuserswhospecify thehostnameinadifferentmannerthanyouspecifiedastheCode basewillnotbeabletoaccessthefiles,eveniftheDNSentries resolvetothesameIPaddress. AddtheConfigBaseParameter AddaparametertotheHTMLfilecalledConfigBase.Similarto defining/zieweb/astheCodebaseinSettingtheCodebase, theConfigBaseparameterisnecessarybecauseyouwilleventually deployyourJSPfiletoalocationthatisdifferentthanthedefault publishdirectory,andtheZandIEmulatorforWebappletneedstoknowhow tofindthesessionconfigurationfileslocatedinthezieforweb/ZIEWeb/ZIEWebData directory.Thesefilesarecreatedatthesametimeyousaveyour DeploymentWizardHTMLfiletothepublishdirectory.UnlikeCodebase, theConfigBaseparameterrequiresafullyqualifiedURL.ConfigBase isatermthatisspecifictoZandIEmulatorforWeb. Formoreinformation,refertoDeveloping JavaServerPagesfileswithWebSphereextensions. OverridingHTMLparameters Thereareseveralstepsyouneedtofollowinordertodynamically setsessionproperties(theexamplesshownlaterinthischapterwill helpclarifyhowsomeoftheseparametersshouldbespecified): EnableHTMLoverrides.Bydefault,theclient willignoreHTMLoverrides.Toenableoverrides,youwillneedto includeanHTMLparametercalledEnableHTMLOverridesandsetitto avalueoftrue. Listthesessionstobeoverridden.Because theremaybemultiplesessionsassociatedwithanHTML,youwillneed tolistwhichoneswillbeoverridden.Youwillneedtoincludean HTMLparametercalledTargetedSessionList,havingavalueoftheexact namesofthesessionsthatshouldacceptoverrides.Thevalueshould beacomma-separatedlistofsessionnames,suchas"Session1Name, Session2Name". Specifytheoverrideitself.Foreachsession propertytobeoverridden,youwillneedtoincludeanHTMLparameter calledthepropertyname,withthevaluebeingthedesiredoverride. Thevalueyouspecifywillthenapplytoallsessionslistedinyour TargetedSessionListparameter.Ifyouwishtoonlyoverrideasubset ofthesessionsinyourTargetedSessionList,youcanspecifyavalue intheformatof"Session1Name=value1,Session2Name=value2",forexample. Specificsessionpropertiesthatcanbeoverridden Thefollowingtabledescribesthesessionpropertiesthatcanbe overriddenandgivestheacceptablevaluesforeachparameter: Table10.Sessionpropertiesthatcanbeoverridden Parametername Description Validvalues Host HostnameorIPaddressofthetargetserver. Appearsas"Destinationaddress"onpropertypanels.Appliestoall sessiontypes. HostnameorIPaddress. HostBackup1 HostnameorIPaddressofthebackup1server. Appearsas"Destinationaddress"ofbackup1onpropertypanels.Applies toallsessiontypes. HostnameorIPaddress. HostBackup2 HostnameorIPaddressofthebackup2server. Appearsas"Destinationaddress"ofbackup2onpropertypanels.Applies toallsessiontypes. HostnameorIPaddress. Port Theportnumberonwhichthetargetserveris listening.Appearsas"Destinationport"onpropertypanels.Applies toallsessiontypes. AnyvalidTCP/IPportnumber. PortBackup1 Theportnumberonwhichthebackup1server islistening.Appearsas"Destinationport"ofbackup1onproperty panels.Appliestoallsessiontypes. AnyvalidTCP/IPportnumber. PortBackup2 Theportnumberonwhichthebackup2server islistening.Appearsas"Destinationport"ofbackup2onproperty panels.Appliestoallsessiontypes. AnyvalidTCP/IPportnumber. CodePage Thecodepageoftheservertowhichthesession willconnect.Appearsas"HostCode-Page"onpropertypanels.Applies toallsessiontypesexceptFTP. Thenumericportion(forexample,037)ofthe supportedhostcodepagelistedinthesessionpropertypanel. SessionID Theshortnameyouwanttoassigntothissession (appearsintheOIA).Itmustbeuniquetothisconfiguration.Appears as"SessionID"onpropertypanels.Appliestoallsessiontypes. Onecharacter:A-Z. LUName ThenameoftheLUorLUPool,definedatthe targetserver,towhichyouwantthissessiontoconnect.Appears as"LUorPoolName"onpropertypanels.Appliesto3270Displayand 3270Printersessiontypes. ThenameofanLUorLUPool. LUNameBackup1 ThenameoftheLUorLUPool,definedatthe backup1server,towhichyouwantthissessiontoconnect.Appears as"LUorPoolName"ofbackup1onpropertypanels.Appliesto3270 Displayand3270Printersessiontypes. ThenameofanLUorLUPool. LUNameBackup2 ThenameoftheLUorLUPool,definedatthe backup2server,towhichyouwantthissessiontoconnect.Appears as"LUorPoolName"ofbackup2onpropertypanels.Appliesto3270 Displayand3270Printersessiontypes. ThenameofanLUorLUPool. WorkstationID Thenameofthisworkstation.Appearsas"Workstation ID"onpropertypanels.Appliesto5250Displayand5250Printsession types. Auniquenameforthisworkstation. ScreenSize Definesthenumberofrowsandcolumnsonthe screen.Appearsas"ScreenSize"onpropertypanels.Appliesto3270 Display,5250Display,andVTDisplaysessiontypes. value=rowsxcolumns 2=24x80(3270,5250,VT) 3=32x80(3270) 4=43x80(3270) 5=27x132(3270,5250) 6=24x132(VT) 7=36x80(VT) 8=36x132(VT) 9=48x80(VT) 10=48x132(VT) 11=72x80(VT) 12=72x132(VT) 13=144x80(VT) 14=144x132(VT) 15=25x80(VT) 16=25x132(VT) SLPScope ServiceLocationProtocol(SLP)Scope.Appears as"Scope"under"SLPOptions"onpropertypanels.Appliesto3270 Display,3270Printer,5250Display,and5250Printersessiontypes. Contactyouradministratortogetthecorrect valueforthisfield. SLPAS400Name ConnectsasessiontoaspecificIBMSystem i.Appearsas"iSeriesName(SLP)"onpropertypanels.Appliesto 5250Displayand5250Printersessiontypes. Thefully-qualifiedSNACPname(forexample, USIBMNM.RAS400B). FTPUser SpecifiestheuserIDthesessionuseswhen connectingtotheFTPserver.Appearsas"UserID"onpropertypanels. AppliestoFTPsessiontypes. AvaliduserID. FTPPassword Specifiesthepasswordthesessionuseswhen connectingtotheFTPserver.Appearsas"Password"onpropertypanels. AppliestoFTPsessiontypes. Avalidpassword. UseFTPAnonymousLogon EnablesthesessiontologintoanFTPserver usinganonymousastheuserID.Appearsas"AnonymousLogin"onproperty panels.AppliestoFTPsessiontypes. YesorNo. FTPEmailAddress Specifiesthee-mailaddresstousewhenconnecting totheFTPserverwhileusingAnonymousLogin.Appearsas"E-mail Address"onpropertypanels.AppliestoFTPsessiontypes. Avalide-mailaddress. PromptForDestinationAddress Specifieswhethertoprompttheuserforthe destinationaddresstousewhenconnectingtotheFTPserver.Appears as"DestinationAddress"onpropertypanels.AppliestoFTPsession types. yesorno CICSInitialTransEnabled Enablesaninitialtransactiontobestarted whenaCICSGatewaysessionisestablished. trueorfalse CICSInitialTrans Specifiesthenameoftheinitialtransaction tobestarteduponconnectiontoaCICShost.AppliestoCICSGateway sessionsonly.TheCICSInitialTransEnabledparametermustbeset totrueforthespecifiedtransactiontobestarted. Validtransactionidentifiersarestringsof between1and128characters.Thestringidentifiestheinitialtransaction andanyparameterstoberunuponconnectiontotheserver.Thefirst fourcharacters,orthecharactersuptothefirstblankinthestring aretakenasthetransaction.Theremainingdataispassedtothe transactiononitsinvocation. Netname Thenameoftheterminalresourcetobeinstalled orreserved.Ifthisfieldisblank,theselectedterminaltypeis notpredictable.AppliestoCICSsessionsonly. Avalidterminalresourcename. AnyerrorsencounteredinprocessingtheHTMLparametersaredisplayed intheJavaConsole. Example#1:OverridingtheLUnamebasedontheclient'sIP address AdministratorsmaywanttoavoidspecifyingLUnamesdirectlyin sessiondefinitions.Thisexampleshowsasimplewayofusingthe IPaddressoftheclienttolookupanLUnamelistedinatextfile anduseitasanoverridevalueinasession. ThisexampleiswrittenusingJSP.TheDeploymentWizard wasusedtocreateanHTMLfilethatcontainstwosessionsnamed3270 Displayand5250Display.NotethatinZandIEmulatorforWeb7 andlater,someoftheHTMLisgeneratedusingJavaScript,and HTMLparametersarespecifiedwithinaJavaScriptarrayorusingJavaScript document.writestatements.Also,theformatoftheHTMLvariesaccording totheclient. ThisexampleusesacachedJavapagetostartfromwith theneededchangesforHTMLoverridesinbold.WhentheDeployment WizardisusedtogenerateacachedJava2pageitgeneratesthefollowing files: Example1.html z_Example1.html Example_J2.htmlAMacintoshclientmakesuseoftheExample_J2.htmlpage. Afile(c:\luname.table)isreadthatcontainsIPaddress/LUname pairs.TheIPaddressoftheclientisusedtolookuptheproper LUname,whichisoverriddeninthe"3270Display"session.Seethe commentsintheexampleformoredetail.ThelinesaddedtotheDeployment Wizardoutputaredisplayedinbold. -//W3C//DTDHTML3.2Final//EN">

Example#2:Allowingtheusertospecifythehosttoconnect tousinganHTMLform AdministratorsmayalsowanttouseHTMLformstospecifyoverride valuesratherthancalculatingthem.Thefollowingexampledisplays asimpleformforentryofahostname.TheformpoststoaJSPprogram whichusesthehostnamespecifiedintheformtooverridethehost nameinthe3270Session. ThisexampleiswrittenusingJSP.TheDeploymentWizard wasusedtocreateanHTMLfilethatcontainstwosessionsnamed"3270 Display"and"5250Display."NotethatinZandIEmulatorforWeb2.0, someoftheHTMLisgeneratedusingJavaScript,andHTMLparameters arespecifiedwithinaJavaScriptarrayorusingJavaScriptdocument.write statements. Whenusingforms,theformdataneedstoberetainedacrossrequests totheprogram.ThisisbecauseZandIEmulatorforWebHTMLfilesreloadthemselves forJavadetectionandforbookmarkingsupportwhenusingconfiguration server-basedmodelpages.IfJava1isselectedandbookmarkingsupport isdisabledifusingtheconfigurationserver-basedmodel,thepage willnotneedtoreloadandthereisnoneedtoretaintheformdata. ThisexampleusesaJSPsessiontostoretheformdataacrossreloads. HereisasimpleHTMLformthatallowsforentryofahostname. TheformpoststotheJSPprogram(example2.jsp): Hostname
HereisthemodifiedoutputfromtheDeploymentWizard.Seethe commentsintheexampleformoredetail.ThelinesaddedtotheDeployment Wizardoutputaredisplayedinbold. //----StartJavaScriptvariabledeclarations----// varzie_Locale=''; varzie_jsapi=false; varzie_AppName=''; varzie_AppHgt='80%'; varzie_AppWid='80%'; varzie_CodeBase='/zieweb/'; varzie_FinalFile='z_example2.html'; varzie_JavaType='java2'; varzie_Obplet=''; varzie_jars='habasen.jar,ziebasen.jar,zieimg.jar,hacp.jar,ziesignn.jar,ha3270n.jar, ziecfgn.jar,ha5250n.jar'; varzie_URL=newString(window.location); varzie_DebugOn=false; varzie_SearchArg=window.location.search.substring(1); varzie_AppletParams=newArray; zie_AppletParams[0]=''; zie_AppletParams[1]=''; zie_AppletParams[2]=''; zie_AppletParams[3]=''; //Thenext2linesarerequiredinordertooverridesessionproperties. //Thefirstlineturnsontheprocessingforthisfunctionanddoesnot //needtobemodified.Thesecondlineidentifiesthesessionsthatyou //wanttochange.Inthisexample,thereare2sessionsidentified //named:"3270Display"and"5250Display". //Becarefultoincrementthearrayindexcorrectly. zie_AppletParams[4]=; zie_AppletParams[5]=; //ThefollowinglinechangestheHostorDestinationAddresssessionparameter //forthesessionnamed"3270Display".Inthisexample,theHostisbeingset //tothevaluesavedintheJSPsessionfromtheHTMLform. //Whenyouareinitiallytestingyourchanges,youmaywanttouseaconstant //valuetoverifythatthesyntaxiscorrectbeforeyouinsertyour //calculations. //Hereweoverridethehostforthe3270sessiontothevaluesavedinthe //jspsessionfromthehtmlform. zie_AppletParams[6]=">; //zie_AppletParams[x]=''; //----EndJavaScriptvariabledeclarations----// functiongetZIEMsg(msgNum){ returnZIEFrame.zieMsgs[msgNum]; } functiongetZIEFrame(){ returnZIEFrame; } varlang=detectLanguage(zie_Locale); document.writeln(''); document.writeln(''); document.writeln(''); ConfiguringZandIEmulatorforWebonzSeries Thischapterdescribeshowtosetupseparateread/writeprivate andpublishdirectoriesforconfiguringZandIEmulatorforWebonazSeries system. Thepurposeofthisconfigurationscenarioistoprovideinstructions forcommonzSeriesconfigurationtasks. Settingupseparateread/writeprivateandpublishdirectories SetupaseparateFileSystemfortheZandIEmulatorforWebprivate directory WhenZandIEmulatorforWebisinstalled,filesinthe/usr/lpp/ZIEWeb/zieforweb/privatedirectory areupdatedinanexecutionenvironment,notjustbymanufacturing refreshreleases.BecausethisdirectoryisnowupdatedduringtheZandIEmulatorforWebsoftware's execution,youarerecommendedtomountaseparate(non-service)File System.Youcandothisinoneofthefollowingways: MOUNTtheseparateFileSystemonthecurrentprivatedirectory location,suchas/usr/lpp/ZIEWeb/zieforweb/private. Createasymboliclinktotheprivatedirectorylocationasfollows: DoaTSOMKDIRtocreateadifferentmountpoint,suchas/etc/ZIEWeb/private. Rename,orbackupanddelete,youroriginalprivatedirectory. Createasymboliclinkfromtheexpectedlocation,/usr/lpp/ZIEWeb/zieforweb/private, topointtothereallocation,/etc/ZIEWeb/private. Usethefollowinglinkcommand: ln-s/etc/ZIEWeb/private/usr/lpp/ZIEWeb/zieforweb/private IfyouareusingLDAPandnativeauthentication,manuallycopy theHODrapdandthe/keysdirectorytothe system-specific/privatedirectory. Whenthesystem-specific/privatedirectory ismounted,itoverlaysbutdoesnotdestroythemaster/privatedirectory.Whenmaintenancereleases areapplied,usethemaster/privatedirectory. Ifthesefilesarechanged,copythemtothesystem-specific/privatedirectory. Setupaseparateuserpublishdirectory FilesgeneratedfromtheDeploymentWizardcanbeplacedinauser-defined directorythatisseparatefromtheZandIEmulatorforWebpublishdirectory. ThismakesiteasiertoapplyfutureZandIEmulatorforWebupgrades.This solutionkeepstheZandIEmulatorforWebpublishdirectoryreadonlyand providesaseparatewriteablelocationfordeployingDeploymentWizard files. ForinstructionsondeployingDeploymentWizardfilesinaseparate userpublishdirectoryandforinformationonotheruser-modified filesthatcanbeplacedoutsidethepublishdirectory,refertomigration instructionofdeploymentwizard. Youcancreateandmountaseparatefilesystemfortheuser-defined publishdirectory.ThegeneratedDeploymentWizardzipfileareto betransferredtothisdirectoryandunzippedbytheDWUnziputility. TheWebserverneedstoincludeanaliasstatementspecifictothe user-definedpublishdirectory. YoucanaccessthepagethroughtheURLthatspecifiesthealias oftheuser-definedpublishlocation.Forexample,ifthepublish directoryis/usr/lpp/ZIEWeb/publish,andthealiasisuserpublish, thentheURLtoaccesstheclientpagewouldbehttp:///userpublish/.html. InstallingtheDevelopmentWizardfromthez/OSserver TheDeploymentWizardnormallylocatesonaWindowsmachineduring theinstallationoftheproduct.Onz/OS,adownloadisprovided foryoutoinstalltheDeploymentWizardonWindowssoyoucangenerate clientpagesforthez/OSZIEserver.Refertothefollowingsteps forinstallingtheDevelopmentWizardfromthez/OSserver: UseFTPinbinarytorelocatethisfileofaWindowsworkstation:/usr/lpp/ZIEWeb/zieforweb/ZIEWeb/depwiz/DW.zip. Extractthezipfileintoafolder. Tostarttheinstall,goto\DeploymentWizard\disk1in Explore. DoubleclickimLauncherWindows.battolaunchInstallationManager UserInterface. Followtheinstructionstofinishtheinstallation. OncetheDevelopmentWizardisinstalled,youcanlaunchit.Go toStart>All Programs>HCLZandIEmulatorforWebDeployment Wizard. ConfiguringZandIEmulatorforWebonIBMSystemi AfteryouinstallZandIEmulatorforWebontheIBMSystemi platform,configurethesoftwareasfollows: TosetuptheServiceManager,followtheinstructionsinConfiguring,starting,andstoppingtheZandIEmulatorforWebService ManageronIBMSystemi. TousetheDeploymentWizardwithanIBMSystemisystem,follow theinstructionsinUsingtheDeploymentWizardwithIBMSystemi. Toconfiguresecurity,followtheinstructionsinConfiguringIBMSystemiserversforsecureconnection. TounderstandtherequirementsforUnicodesupportusingCoded CharacterSetIdentifiersseeUnicodeSupportfori/OSandOS/400. Configuring,starting,andstoppingtheZandIEmulatorforWebService ManageronIBMSystemi ThefollowingcommandscanbeusedfromtheIBMiv7r1 orOS/400commandline. Configure YoucanusetheNCServiceManager-OS400.shscriptfile toconfigureServiceManager.NCServiceManager-OS400.shislocated inthefollowingdirectoryontheIBMSystemi: ZIE_install_directory>/lib/samples/NCServiceManager/. ToconfiguretheServicemanagersettings,performthe followingtasks: Accessthedirectory//lib/samples/NCServiceManager/.Here,isthelocationorpathwhereZandIEmulatorforWebhasbeen installed.Forexample,/QHCL/ProdData/ZIEForWeb/. OpentheNCServiceManager-OS400.shfile. Verifythattheruntimevariablesarecorrectandcorrespondwith yourenvironment.Changethedefaultvaluesoftheruntimevariables iftheydonotcorrespondwithyourenvironment.Theseincludethe following: LocationoftheJRE:JAVA_ENGINE Update thevalueoftheJAVA_ENGINEtothecompletepathorlocationofthe jreinstalledonthesystem.ItmustbeJavaV6orhigher.Itmust pointto/bin/javain theJavainstallationdirectory. LocationoftheZandIEmulatorforWebpublishdirectoryon theserver:MY_ZIEWeb_DIRECTORY Verify,and updateifnecessary,thevalueofMY_ZIEWeb_DIRECTORYtothecomplete pathoftheZandIEmulatorforWebinstallationdirectory.Itmustbethe installationdirectoryofZandIEmulatorforWebandthedirectorycontains /bin,/libandotherfoldersofZandIEmulatorforWeb.Generally,thisvalue isupdatedonceatthetimeofinstallation.Forexample,/QHCL/ProdData/ZIEForWeb. Targetpathsspecifiedwithinthecommandfile:MY_PUBLISHED_DIRECTORY Verify,andupdateifnecessary, thevalueofMY_PUBLISHED_DIRECTORYtothecompletepathoftheZandIEmulatorforWebPublish directory.Generally,itisthe/ZIEWebdirectory, whereistheZandIEmulatorforWebinstallation directory. ConfirmthatNCServiceManager-OS400.shhasthenecessaryexecute permissionsandauthorizedtowritetodirectoriesintheZandIEmulatorforWebinstallation ontheserver. Start TostarttheZandIEmulatorforWebServiceManager,runNCServiceManager-OS400.sh sothatitstartsandcontinuestoruninthebackground. OnewaytoachievethisonIBMiSeriesistosubmit ajobbyinvokingtheIBMPASEforSystemitorunthescript.Contact yourIBMiSeriesadministratorforthedetailsonbestwaystosubmit ajobsuitabletoyouriSeriessetupandrequirements. Anexamplecommandthatsubmitsajob: sbmjobcmd(callpgm(qp2shell)parm('/QOpenSys/usr/bin/-sh''/QHCL/ProdData/ZandIEmulatorforWeb/lib/samples/NCServiceManager/NCServiceManager-OS400.sh')) Stop Tostoptheservicemanager,endthejobonIseries. ContactyourIseriesadministratorfordetailsonasuitablemethod forstoppingtheservice. Onewaytodothisiswiththefollowingexample steps: TypeWRKACTJOBtoopenalistofactive jobs. IntheWorkwithActiveJobsmenu, theZandIEmulatorforWebservicemanagerjobgetslistedwithfunctionnameJVM-NCServiceM.Scrolldownthemenutothisjob entryandselecttheWorkWith..option, typicallyoption5. SelecttheEndjoboption.For this,type41toendthejob,andpresstheEnterbutton.Thisendstheservicemanagerjob andstoptheservicemanager. WorkwithZIEServerstatus TodeterminewhethertheServiceManagerisrunning, itneedstobecheckedwhethertheJavaprogramNCServiceManager, whichisstartedbythescriptNCServiceManager-OS400.sh,isrunning ornot.Therefore,themethodtochecktheserverstatusmightvary accordingtothemethodusedtostarttheservicemanager. Intheexampleabove,the ServiceManagerisstartedbysubmittingajobtoruntheNCServiceManager-OS400.sh script.Hence,theyoucanperformfollowingtwowaystocheckthe status: UsetheWRKACTJOBcommandtoreviewthestatus: Enterthecommand: WRKACTJOBThisprovidesalistof activejobs. IntheWorkwithActiveJobsmenu,theZandIEmulatorforWebservice managerjobgetslistedwiththefunctionnameJVM-NCServiceM. UsethePageDownorPageUpbutton toscrolldownthemenutothisjobentryandentertheappropriate optionnumbertoWorkwith..thejob, typicallyoption5. Utilizethemenuoptionstoreviewthejobstatus. Querytheprocessstatusinthecommandline. IntheexampleofStart,thescript NCServiceManager-OS400.shisexecutedbyinvokingtheIBMPASEfor Systemi(qp2shell)intheSBMJOBcommand.Hence,inthiscase,the followingstepscanalsohelptocheckthestatus: OntheIBMSystemi,signontoagreenscreencommandline. b) EnterthePASEshellenvironment.Onthegreenscreencommand line,enterthefollowingcommand: callqp2term. OnthePASEshell,typethefollowingcommand: ps-ef|grepNCServ. Note: NCServiceManageristhenameof theJavaprogramthatrunstheservicemanager. IfthecommanddetectsthattheServicemanagerisrunning, itwillprovideanoutputthatwouldlooklikethefollowing: $ >ps-ef|grepNCServ kushald31461015:23:30-0:00/QHCL/ProdData/OS400/Java400/jFr omPASEjava-classpath.:sm.zip:ibmjndi.jar:jndi.jar:jsdk.jar:ods.jar:jt400.j ar-Djava.net.preferIPv4Stack=true-DFIPS=oncom.ibm.eNetwork.HODUtil.service s.admin.NCServiceManager/QHCL/ProdData/ZandIEmulatorforWeb $ Note: ThePASEshelliscase-sensitive.Hence, itisimportanttomaintainthecorrectcaseofalphabetsincommand (stepc). StartInformationBundler IntheeventthatyouneedtocontacttheHCLCenter forassistance,thealreadyavailableInformationBundlerscriptfile canbeusedtogatherinformationaboutyourZandIEmulatorforWebconfiguration. Forusageinformation,referthesectionRunningtheInformationBundleroftheZIEWebV1 document. CreateZIEWebPrinterDefinitionTable CreateacustomprinterdefinitiontableforZandIEmulatorforWeb3270 printersessions.Inordertousethisfunction,pleasereferthe sectionunderCompilingaPDTonaniSeries serversection. Acustomprinterdefinitionmightbenecessary ifyouhaveaspecialpaperformoriftheprinterisnotsupported. ThefollowingoptionsarenotavailableonZIEWebV2.0: UsingtheDeploymentWizardwithIBMSystemi TousetheDeploymentWizardtodeployscreenstoanIBMSystem i-basedZandIEmulatorforWebserver,dothefollowing: FromaWindowsworkstation,mapanetworkdriveto/qhcldirectoryontheIBMSystemisystem thatisZandIEmulatorforWebserver.RefertotheIBM SystemiWebsiteformoreinformation. DownloadDeploymentWizardinstallationimagefromanalready installedZandIEmulatorforWebv2.0server.Accessdashboard.html(forexamplehttp://zieserver.name.com/zieweb/dashboard.html, andclickonDeploymentWizardInstallation ImageforWindows. RefertotheinstallationinstructionsforinstallingDeployment Wizard.YoucanrunthiswithouthavingtoinstalltheentireZandIEmulatorforWebserver. Designthecustomfeaturesandselections. SavethecustomizedHTMLfiletothemappednetworkdrive(For example,y:\ProdData\zieforweb\zieweb\myweb). Useabrowsertotestoutthefile(Forexample,http://iSeries.name.com/zieweb/myweb.html). ConfiguringIBMSystemiserversforsecureconnection FollowthestepsbelowtoconfigureaCustomizedCAskeyring: Ensurethatjavaisinstalledinthesystem. Openaunix/AIX-basedcommandline.Forexample,QSHELLorIBM IPASEshell. NavigatetotheZandIEmulatorforWebpublishfolderintheZandIEmulatorforWebinstallation directory.Generally,itis/QHCL/ProdData/ZIEForWeb/ZIEWeb/. Enterthecommand java-classpath.:your_install_dir/lib/sm.zipcom.ibm.hod5sslight.tools.P12KeyringCustomizedCAsconnectmyServer.raleigh.hcl.com:702. Thiscommandcantakeafewminutestocomplete.Ifyouareasked forapassword,typezieweband pressEnter. Selectthecertificatenumberthatcorrespondstothe CertificateAuthority(CA)thatyouwanttoaddtothekeyring.Be suretoaddtheCAcertificateandnotthesitecertificate.Ifthe portisnotresponding,refertoConfiguringIBMi7.1serversfor secureconnection. Repeatsteps3to5for eachtargetserver. ToviewthecontentsoftheCustomizedCAskeyring,performthe followingsteps: Ensurethatjavaisinstalledinthesystem. Openalinux-basedshell,forexample,QSHELLorIBMiPASEshell. NavigatetotheZandIEmulatorforWebpublishfolderintheZandIEmulatorforWebinstallation directory.Generally,itis/QHCL/ProdData/ZIEForWeb/ZIEWeb/. Enterthecommand java-classpath.:your_install_dir/lib/sm.zipcom.ibm.hod5sslight.tools.P12KeyringCustomizedCAslist. InstallingandconfiguringZandIEmulatorforWebwithTLS oni/OSandOS/400 Thefollowinglistprovidesahigh-leveloverviewofthesteps neededtoinstallandconfigureZandIEmulatorforWebwithTLS: Verifyallsoftwareandhardwarerequirementsaremet. InstallallnecessaryIBMSystemisoftwareproducts.Referto yourIBMSystemidocumentationfordetails. InstallallrequiredPTFs.ThelatestPTFsarelocated onattheIBMeServerSystemisupportportal. InstallandconfiguretheIBMHTTPServerorIBMApplication Server.Refertotheproductdocumentationfordetails. CreateaCertificateAuthority(CA)fromtheDigitalCertificate ManagerontheIBMAdministrativeServerorpurchaseapublicCA. RefertoyourIBMSystemidocumentationfordetails. ConfigureTLSontheIBMHTTPServerorIBMApplication Server.Refertotheproductdocumentationfordetails. ConfigureZandIEmulatorforWebwithTLS.RefertoConfiguringTLSintheonlinehelpfordetails. ConfiguringaTelnetserverforsecureconnection VisitIBMSystemiKnowledgeCenterand searchonTLStolearnthestepsyouneed totaketoenableTLS.Youmightneedtorepeatthestepsforeach IBMSystemi7systemthatyouwanttousesecureconnectionswith. ConfiguringtheZandIEmulatorforWebCustomizedCAskeyring PerformthefollowingstepstoconfigureaCustomizedCAs keyring: Ensurethatjavaisinstalledinthesystem. Openalinux-basedshell,forexample,QSHELLorIBMIPASEshell. NavigatetotheZandIEmulatorforWebpublishfolderin theZandIEmulatorforWebinstallationdirectory.Generally,itis/QHCL/ProdData/ZIEForWeb/ZIEWeb/. Enterthecommand java-classpath.:your_install_dir/lib/sm.zipcom.ibm.hod5sslight.tools.P12KeyringCustomizedCAsconnectmyServer.raleigh.hcl.com:702This commandcantakeafewminutestocomplete.Ifyouarepromptedfor apassword,typeziewebandpressEnter. Selectthecertificatenumberthatcorrespondsto theCertificateAuthority(CA)thatyouwanttoaddtothekeyring. BesuretoaddtheCAcertificateandnotthesitecertificate.If theportisnotresponding,refertoConfiguringIBMSystemIservers forsecureconnection. Repeatsteps3to5for eachtargetserver. ToviewthecontentsoftheCustomizedCAskeyring,dothefollowing: Ensurethatjavaisinstalledinthesystem. Openalinux-basedshell,forexample,QSHELLorIBMIPASEshell. NavigatetotheZandIEmulatorforWebpublishfolderintheZandIEmulatorforWebinstallation directory.Generally,itis/QHCL/ProdData/ZIEForWeb/ZIEWeb/. Enterthecommand java-classpath.:your_install_dir/lib/sm.zipcom.ibm.hod5sslight.tools.P12KeyringCustomizedCAslist. IfyouhavemultipleIBMSystemi machinesandwouldliketocreateasinglecertificatethatallthe machinescanuse,considercrosscertification.RefertoManagingSecurity,Cryptographic ServicesAPIs,andApplicationSystem/400 CryptographicSupport/400Version3foradditionalinformation aboutcrosscertification. Clientauthentication Foradditionalsecurity,considerTLSwithclientauthentication totightlycontrolwhocanTelnettoyoursystemovertheInternet. Forexample,youcanconfiguretheTelnetservertoonlyallowauthentication iftheclientcertificatewasissuedbyyourIBMSystemi(through DigitalCertificateManager). Theclientcertificateshavealimitedvalidityperiod(forexample, 90days).Whenthecertificateexpires,theusermustperformthe ClientCertificateDownloadprocessinordertocontinue.Thisprocess requiresavalidIBMSystemiuserIDandpassword. NotallTelnetclientsoftwareis capableofclientauthentication.Whenenabled,allTLS-enabledTelnet connectionstotheIBMSystemirequireausercertificate. RefertotheIBMSystemiWebsite formoreinformation. ConfiguringtheZandIEmulatorforWebOS/400proxyforsecureconnections TheOS/400proxycanbeconfiguredtoencryptfiletransferand DatabaseOn-Demandconnections.Todothis,thefollowingadditional softwaremustbeinstalledoneachtargetIBMSystemi: IBMCryptographicAccessProvider IBMClientEncryption HostServers DigitalCertificateManager SetupTLSuserauthorizations Youneedtocontrolauthorizationoftheuserstothefiles.To helpyoutomeettheTLSlegalresponsibilities,youneedtochange theauthorityofthedirectorythatcontainstheTLSfilestocontrol useraccesstothefiles.Inordertochangetheauthority,dothe following: Enterthecommandwrklnk'/QHCL/ProdData/HTTP/Public/jt400/*'. Selectoption9inthedirectory. Ensure*PUBLIChas*EXCLUDEauthority. GiveuserswhoneedaccesstotheTLSfiles*RXauthoritytothe directory.Youcanauthorizeindividualusersorgroupsofusers. Rememberthatuserswith*ALLOBJspecialauthoritycannotbedenied accesstotheTLSfiles. SecureWebserving TheZandIEmulatorforWebserverusestheWebservertodownload programobjectstothebrowser.Thisinformationcanbeencrypted, butwithaconsiderableperformanceimpact. Thedefaultportforsecurewebservingis443.Ifthatportis notenabled,port80isused.Toenablesecurewebserving,perform thefollowingsteps: FromaWebbrowser,enter:http://:2001(where istheTCP/IPhostnameofyourIBMSystemi).Ifyouareunableto connect,starttheHTTPserverwiththefollowingi/OSandOS/400 command: STRTCPSVRSERVER(*HTTP)HTTPSVR(*ADMIN) Enterthei/OSorOS/400userprofileandpassword(whenprompted). youneedtohave*ALLOBJand*SECADMauthoritiestocompletetheremaining configurationactivities. ClickIBMHTTPServerforAS/400. ClickConfigurationandAdministration. ClickConfigurations. SelecttheCONFIGconfigurationfromthelist. ClickSecurityConfiguration. FortheAllowHTTPconnectionsandAllowTLSconnectionsselections: Portnumber(443) SelectTLSClientauthenticationNone. SelectApply. ClickAS/400Tasksbuttononthelowerleftsideofthescreen. ClickDigitalCertificateManager. ClickSystemCertificates. ClickWorkwithSecureApplications. ClickQHCL_HTTP_SERVER_CONFIG;thenclickWorkwithSystemCertificate. ClickAssignNewCertificate. EndtheadministrationHTTPserverinstancewiththefollowing i/OSandOS/400command: ENDTCPSVRSERVER(*HTTP)HTTPSVR(DEFAULT) Wait10secondsfortheHTTPinstancetoshutdown. StarttheadministrationHTTPserverinstancewiththefollowing i/OSandOS/400command: STRTCPSVRSERVER(*HTTP)HTTPSVR(DEFAULT) FromaWebbrowser,enterhttps://server.name/zieweb/dashboard.html(whereserver.nameistheTCP/IPhostnameofyourIBM Systemi). FormoreinformationonawidevarietyofIBMSystem itopics,seeIBMiPDFfilesandmanuals. UnicodeSupportfori/OSandOS/400 Generalinformation Ina5250Displaysession,ZandIEmulatorforWebsupportsthe displayofUnicodedatalocatedinfieldstaggedwithCodedCharacter SetIdentifiers(CCSIDs).FormoreinformationseeUnicode supportfori/OSandOS/400usingCodedCharacterSetIdentifiers. Hostprogramminginformation Forhostprogramminginformation,refertotheIBMSystemiWebsite. Eclipse-Pluginsupport ThischapterdescribeshowtosetupZandIEmulatorforWebfortheIBM Eclipse-Plugin. Note: ZandIEmulatorforWebcurrentlysupports Eclipse-PluginonWindowsplatformonly.PleasechecktheREADME foradditionalsupportasthatwillbeupdatedifadditionalplatforms areadded. Eclipse-Pluginisthefoundationfornext-generation,network-centric computing.BuiltontheEclipserichclientplatform,itprovides additionalfeaturesformanaginganddeployingapplicationseasily toendusers. OnEclipse-Plugin,allapplicationsarepackagedasEclipse"features", whichconsistof"plugins"and"fragments".Eclipse featuresareusuallyinstalledfroman"updatesite",which isadirectoryonamachinethatisweb-accessible. TobuildtheZandIEmulatorforWebpluginforEclipse-Plugin,ZandIEmulatorforWebprovides aJavaappletcalled"UpdateSiteUtility".TheUpdateSiteUtility convertsZandIEmulatorforWebjarfilesintoEclipsepluginsandfragments andplacestheminaneworanexistingupdatesitedirectory. Procedurestoinstallfeaturesfromanupdatesitearedifferent dependingonEclipse-Pluginplatforms,suchasWorkplaceManagedClient (WMC)orWebSphereEveryplaceDeployment(WED).WhenWMCisused, extraconfigurationstepsarerequiredonitsservercounterpart, WorkplaceCollaborationService(WCS).TheUpdateSiteUtilitygenerates anXMLfile,whicheasestheconfigurationstepsonWCS. CreatingZandIEmulatorforWebplug-ins TocreateanddeploytheseZandIEmulatorforWebpluginstoruninEclipse-Plugin, dothefollowing: EnsurethatyouhaveanHTML-modelDeploymentWizardpagethat definesthesessionsforyourplugin.YoucanuseanyexistingHTML-model pageorcreateanewone. Note: OnlyHTML-modelpagesare supportedfortheEclipse-Pluginfeature.Onceyour pageiscompleted,puttheunzippedDeploymentWizardoutputfiles intotheZandIEmulatorforWebpublishdirectory. Createadirectory,forexamplec:\update, thatwillbeusedastheEclipseupdatesiteforyourplugin(s),if youdonotalreadyhaveonedefined.Next, DefineanaliastothatdirectoryintheWebserverconfiguration andrestarttheWebserver. YouarenowreadytocreatetheZandIEmulatorforWebplugin. OntheEclipseupdatesitemachine,openabrowser,runningJavaJRE andpointittotheZandIEmulatorforWebURL:http:////WCTConfig.html. Note: OnLinux,youneedtosettheLD_LIBRARY_PATHenvironment variablewhenusingtheIBMJavaplugin. Forexample,ifyouwant tousetheJavapluginthatisshippedbyZandIEmulatorforWebserverfor Linux,useexportcommandtosettheLD_LIBRARY_PATHenvironmentvariable asfollows: exportLD_LIBRARY_PATH=/opt/hcl/ZandIEmulatorforWeb/zieweb_jre/jre/bin: $LD_LIBRARY_PATH ThisURLwillrunaspecialUpdateSiteUtilityapplettoassist inbuildingtheplugin. FillintheBasicInformationpaneloftheUpdateSiteUtility asfollows: UpdateSiteDestinationDirectory(Required) SpecifytheEclipseupdatesitedirectorycreatedinStep2,forexample c:\updates. ZIEWebCodeBase(Required)This fieldshouldalreadybecorrectlyfilledin,ifyoupointedtoWCTConfig.html asdescribedinStep3.Thisfieldneedstospecifythelocationof theZandIEmulatorforWebpublishdirectoryintheform:http:/// TheZandIEmulatorforWebservernamemustbefully-qualified.Itcannot bearelativeURLnameoronelike"localhost"or"127.0.0.1". DeploymentWizardOutputFile(Required)Specify thenameoftheHTML-modelDeploymentWizardpagecreatedinStep 1. FeatureVersion(Required)Specifytheversion stringusedinthegeneratedfeatureintheformatmajor.minor.service, like1.0.0. UserJARFilePath(Optional)Specifythe pathofajarfilecontainingcustomercodeusedforsolutionsthat requirecustomcodetointeractwiththeZandIEmulatorforWebsessions. Youcanspecifymultiplefilesseparatedbycommas(,). Note: IfyouneedtousetheRunAppletfeature, youneedtopackageyourappletsinajarfileandspecifythefile pathhere. YoucanreducethesizeoftheEclipseplugintobecreatedby uncheckinganyunnecessaryfeaturesorhostcodepagesontheRuntimeCodesandtheCodePagespanels oftheUpdateSiteUtilitypanel. Whenyouhavecompletedallthefields,selectGenerateandDeployPlugin.Theapplet createstheZandIEmulatorforWebplugin,andplacesitintheupdatesite youhavespecified. Followingfilesarecreatedormodifiedinthedirectoryspecified asUpdateSiteDestinationDirectory: Sitemapfile(site.xml):Thisfilelists thefeaturesthatareinstallablefromthisupdatesite. XMLAccessscriptfile:Thisfileisan inputofWebSpherePortalXMLAccessutilityforinstallingZandIEmulatorforWebfeature onWCS.Thefilenamesaregivenintheform:(deploymentwizard outputfilename)_DeployScript.xml.OnXMLAccess,refertoIBMAcceleratorsforWebSpherePortalfamily. featuressubdirectory:Thissubdirectory containstheZandIEmulatorforWebfeaturearchives. pluginssubdirectory:Thissubdirectory contains: ZandIEmulatorforWebplugin Pluginitself.Filenameisgivenintheform:com.ibm.eNetwork.HOD.wct_(pluginversion).jar ZandIEmulatorforWebcodefragment ZandIEmulatorforWebruntimecode.Filenameisgiven intheform:com.ibm.eNetwork.HOD.wct.(function name)_(pluginversion).jar Configfragment Fragmentthatstoresconfigurationinformation. Filenameisgivenintheform:com.ibm.eNetwork.HOD.wct.configs.(deployment wizardoutputfilename)_(featureversion).jar imagessubdirectory:Thissubdirectorycontains animagefileusedonWMC/WCS. Forinformationaboutinstallingthepluginontheclient, refertodocumentsthatcomewithyourEclipse-Pluginplatforms. SettingSessionPropertiesDynamically OntheEclipse-Pluginplatform,HTMLoverridescannotbeusedin ordertodynamicallysetsessionpropertiesbecausenoHTMLfiles areusedforrunningtheZandIEmulatorforWebplugin.Ifyouneedtohave thesimilarfunctionality,dothefollowingsteps: ImplementaJavaclassthatimplementsthecom.ibm.eNetwork.HOD.wct.IHODConfigFactoryinterface, whichisstoredinthewct.jarfile.Thewct.jarfileisinstalled intheZandIEmulatorforWebpublishdirectory.Theinterfacehastwopublic methods: publicStringsetHodHtmlFileName() publicPropertiesgetHodHtmlParameters() Following isanexampleofsuchJavaclasses: Figure8.ExampleofJavaclasses packagecom.ibm.eNetwork.HOD.wct.samples; importjava.util.Properties; importcom.ibm.eNetwork.HOD.wct.IHODConfigFactory; publicclassConfigOverrideimplementsIHODConfigFactory{ /*(non-Javadoc) *@seecom.ibm.eNetwork.HOD.wct.IHODConfigFactory#getHodHtmlFileName() */ publicStringgetHodHtmlFileName(){ return"hodwmc"; } /*(non-Javadoc) *@seecom.ibm.eNetwork.HOD.wct.IHODConfigFactory#getHodHtmlParameters() */ publicPropertiesgetHodHtmlParameters(){ Propertiesp=newProperties(); p.put("EnableHTMLOverrides","true"); p.put("TargetedSessionList","3270Display"); p.put("host","3270Display=hostname"); returnp; } PackagetheJavaclassinajarfile. EdittheUpdateSiteUtilityHTMLfile(WCTConfig.html)intheZandIEmulatorforWebpublish directoryandsettheshowUserClassparametertotrue: varshowUserClass="true"; RuntheUpdateSiteUtilityand specifyadditionalparametersasfollows:UserJARFilePath:The filepathofthejarfilecreatedonthestep2. UserConfigurationFactoryClass:ThenameoftheJavaclassimplemented onthestep1. GenerateaZandIEmulatorforWebpluginanddeployittoyourEclipse-Plugin platform. Usingaseparateuserpublishingdirectory Whenyouareusingaseparateuserpublishingdirectoryotherthan theZandIEmulatorforWebpublishdirectory,youneedtospecifythedirectory onUpdateSiteUtilitywiththefollowingprocedure: EdittheUpdateSiteUtilityHTMLfile(WCTConfig.html)inZandIEmulatorforWebpublish directoryandsettheshowAlternatePublishDirectoryparametertotrue: varshowAlternatePublishDirectory="true"; RuntheUpdateSiteUtilityandspecifyyourseparateuserpublishing directoryintheAlternatePublishDirectoryentryfield. ViewIDsusedinZandIEmulatorforWebplugin FollowingisthelistofviewIDsusedbyZandIEmulatorforWebplugin. Youaresuggestedknowingthemwhenyouconfigurepagelayouton WCSmanually. ID Description com.ibm.eNetwork.HOD.wct.SessionsView ConfiguredSessions com.ibm.eNetwork.HOD.wct.SessionLabelsView ActiveSessions com.ibm.eNetwork.HOD.wct.TerminalView Terminal(Display,Printer,FTP,etc.) LimitationsonusingZandIEmulatorforWebinaEclipse-Pluginenvironment FollowingarelimitationsnotmentionedaboveonusingZandIEmulatorforWebin anEclipse-Pluginenvironment: SometimesaZandIEmulatorforWebmodaldialogcangetbehindtheEclipse-Plugin shellwindow.ThiswillhappenifZandIEmulatorforWebhasadialogopen andtheuserswitchestoanotherapplicationoutsideofEclipse-Plugin. UserwillhavetodoALT-TABtofindtheZIEWebdialogthat needstobeacknowledged. "ConfirmOnExit"doesnotwork.The"ConfirmOn Exit"settingisignoredintheEclipse-Pluginenvironment.Since itisnotsupported,theoptionhasbeenremovedfromthesession properties. Ifasessionislaunchedandadestinationaddressisnotconfigured, theZandIEmulatorforWebappletisabletolaunchthesessionproperties dialog.IntheEclipse-Pluginenvironment,usersreceiveamessage thatadestinationaddressisrequiredbutthepropertiesdialogdoes notopen. GUIelementslikeMacroManager,Keypad,andToolbarcannotbe addeddynamicallytoarunningsession.Instead,theseitemsmust beenabledusingtheexistingpropertiesinthePreferencessection ofthesessionproperties. Optionto"StartinaSeparateWindow"hasnomeaning inthisenvironmentsincethesessionisalwaysinaneditorpane. Thisoptionisremovedfromthesessionproperties. Onlyaclientwithdebugcapabilitiesisavailable.Reducing thepreloadcomponentsusingtheDeploymentWizardPreloadOptions tomakethefootprintsmaller(withtheexceptionofhostcodepages and5250FileTransfer)isnotpossible. Clientdoesnot automaticallyupdatetothenewcodelevel.TheAdministratorneeds tore-configureUpdateSitesothattheEclipse-Pluginplatformcan installthenewplugin/fragments. RunAppletworksonlywhentheappletispackagedinaJARfile andinstalledonclientmachines. IPMONtracingissupportedonlyinthe"normal"mode. The"automatic"modeisnotsupported.Ontheexecution modesofIPMON,refertothe"OverviewofIPMONtracing"topic intheonlinehelp. WhenmultipleZandIEmulatorforWebfeaturesareinstalled,theZandIEmulatorforWebplugin displaysthelistofinstalledZandIEmulatorforWebfeaturesintheconfigured sessionsviewtolettheuserselectonefeatureamongthem.After onefeatureisonceselected,theuserneedstorestartWEDtoselect adifferentfeature. PressingandreleasingtheAlt-keythrowsanexceptiononthe Javaconsole.ThisisaknownproblemwiththeIBMJREandhasbeen resolvedinIBM1.8andlater. ConfiguringZandIEmulatorforWebServertouseLDAP TheZandIEmulatorforWebServerisusedtomanageconfigurationdata fortheconfigurationserver-basedandcombinedmodels.Forthedefault operationalmodeoftheZandIEmulatorforWebServer,thisdataissaved inanon-sharedprivatedatastore.Someenterprisecustomersneed tomanagetheirconfigurationinformationbetweenmultipleZandIEmulatorforWebservers. Ifthesecustomersusethenon-sharedprivatedatastore,thentheir administratorsmustmanagethedataforeachZandIEmulatorforWebServer separately.ALightweightDirectoryAccessProtocol(LDAP)server directoryprovidestheabilitytoshareuserandgroupconfiguration informationoverdifferentinstancesoftheZandIEmulatorforWebconfiguration server. UsinganLDAPdirectoryservertomanageandshareyourdefinitions acrossmultipleZandIEmulatorforWebserversisanoptionthatmustbecarefully plannedandexecuted.Migrationfromtheprivatedatastore,inparticular, hasimplicationsontheconfigurationdata.LDAPenablesthecustomer tomanagetheconfigurationinformationbyarrangingusersintoa hierarchicaltreeofgroups.Ifexistingusersaremembersofmore thanonegroup,thensomeinformationwillbelost.Notethatthe configurationdataintheprivatedatastoreisnotchangedwhena migrationtoLDAPoccurs.Refertoimplications ofmigratingtoLDAPintheZandIEmulatorforWebonlinehelpformore detailedinformation. SettingupLDAPsupport DecidewhichLDAPDirectoryserveryouaregoingtouseand,if necessary,installit. IfyouarerunningaversionofLDAPthatdoesnotsupportthe schemaforZandIEmulatorforWeb,installtheZandIEmulatorforWebschemaextension filesasdescribedinInstallingtheschemaextensions.(Theschemaextension filesarenotrequiredforIBMLDAPVersion3.xorlater.) AskyourLDAPadministratorforasuffixwhichZandIEmulatorforWebwill usetostoreconfigurationinformation.Makeanoteofthedistinguished name(DN)ofthissuffix;youwillneedthisinformationtocomplete theLDAPsetup. AskyourLDAPadministratorforanadministratorDNandpassword forZandIEmulatorforWeb;thesewillbeusedtoauthenticatetotheLDAP server.TheadministratorDNmusthavecreate,modifyanddeleteprivileges forthesuffixmentionedinthepreviousstep.Makeanoteofthe DNandpassword;youwillneedthisinformationtocompletetheLDAP setup. EnableLDAPontheDirectoryServicewindowintheadministration utility.Also,optionally,migratetheprivatedatastoreconfiguration informationtotheLDAPdirectoryserver.Formoreinformation,refer toConfiguringZandIEmulatorforWebServertouseLDAP. Usersandgroupsthatarealreadydefinedin LDAPforotherpurposesarenotusedbyZandIEmulatorforWeb.Usersand groupsforZandIEmulatorforWebmustbedefinedseparatelybyeithermigrating theconfigurationinformationfromtheprivatedatastoreorbysetting uptheusersandgroupsinZandIEmulatorforWebafterenablingLDAP. IfyouareusingtheIBMLDAPserveronWindows andAIXplatforms,andyouarecreatingalargenumberofusers,make surethatDB2isconfiguredwiththepropervalueforAPP_CTL_HEAP_SZ. Whilethevalueforthisvariableisdependentonindividualinstallations, settingAPP_CTL_HEAP_SZto512isagoodstartingvalue. Toconfigure DB2heapsizeinaWindowsorAIXenvironment,issuethesecommands: setDB2INSTANCE=ldapdb2 db2connecttoldapdb2 db2updatedbcfgforldapdb2usingAPP_CTL_HEAP_SZ512 db2forceapplicationall db2terminate db2stop db2startAlso,besurethatSTMTHEAPislargeenough.Thesizeforthese parametersaredependentsolelyonindividualcustomerconfigurations andthenumberofZandIEmulatorforWebusersthatarebeingmigratedto LDAP. Installingtheschemaextensions TheZandIEmulatorforWebextensionstotheLDAPdirectory schemaareprovidedinseveralfilesthatarelocatedintheLDAP subdirectoryofthepublishdirectory(forexample,your_install_directory\ZIEWeb\ldap, whereyour_install_directoryisyourZandIEmulatorforWebinstallation directory).ThesefilescontainextensionstotheLDAPschemaand arestoredinthestandardslapdformat.Theschemaextensionsmust beineffectbeforeZandIEmulatorforWebcanstoreconfigurationinformation inanLDAPserver.ContactyourLDAPadministratortohavetheseschema extensionsinstalled. RefertotheProgramDirectoryforinstructionsoninstallingthe schemaextensionsforthezSeries. YourLDAPadministratormayhavealreadyinstalled theseschemaextensionsforusebyanotherIBMproduct.Ifso,skip thesesteps.IfyouareusingtheIBMDirectoryServerVersion3.1.1 orlater,theschemaispre-installed,soyoucanskipthesesteps also. ToinstalltheZandIEmulatorforWebschemaextensionsonaNetscapeLDAP Directoryserver: Copythefollowingslapdfilesfromthe/ldapdirectorytotheNetscapeLDAPconfigdirectory ontheLDAPserver: Netscape.IBM.at Netscape.IBM.oc StoptheLDAPserver. Editthe/slapd.conffile andaddthefollowingstatements: userat"/Netscape.IBM.at" useroc"/Netscape.IBM.oc" RestarttheLDAPServer. ToinstalltheZandIEmulatorforWebschemaextensionsonanIBMLDAP Directoryserver: CopythefollowingslapdfilesfromtheZandIEmulatorforWebpublish directory/ldapdirectorytothe/etcdirectoryonyourLDAPserver: V2.1.IBM.at V2.1.IBM.oc StoptheLDAPserver. Editthe/etc/slapd.at.conffile andaddthefollowingstatementtotheendofthefile: include/etc/V2.1.IBM.at Editthe/etc/slapd.oc.conffile andaddthefollowingstatementtotheendofthefile: include/etc/V2.1.IBM.oc RestarttheLDAPserver. ConfiguringtheZandIEmulatorforWebservertouseLDAPasadata store OpentheAdministrationwindowandlogontoZandIEmulatorforWeb. ClickServices>DirectoryService ClicktheUseDirectoryService(LDAP)boxandthenenterthe LDAPserverinformation. DestinationAddress TypetheIPaddressoftheLDAPdirectory.Useeitherthehost nameordotteddecimal format.ThedefaultisthehostnameoftheZandIEmulatorforWebserver. DestinationPort TypetheTCP/IPportonwhichtheLDAPserverwillaccepta connectionfromanLDAPclient.Thedefaultportis389. AdministratorDistinguishedName Typethedistinguishedname(DN)ofthedirectoryadministrator thatallowsZandIEmulatorforWebtoupdateinformation.youneedtouse theLDAPstringrepresentationfordistinguishednames(forexample,cn=Chris Smith,o=HCL,c=US). AdministratorPassword Typethedirectoryadministrator'spassword. DistinguishedNameSuffix Typethedistinguishedname(DN)ofthehighestentryinthe directoryinformationtree(DIT)forwhichinformationwillbesaved.ZandIEmulatorforWebwill storeallofitsconfigurationinformationbelowthissuffixinthe DIT.youneedtousetheLDAPstringrepresentationfordistinguished names(forexample, cn=ZIEWeb,o=HCL,c=US). MigrateConfigurationtoDirectory Service Tomigrateusersandgroupsfromtheprivatedatastoretothe LDAPdirectory,clickthecheckbox.MigratingtoLDAPhassignificant implicationsforyourgroupanduserconfigurationinformation.Refer toLDAPMigrationImplicationsintheonline helpformoreinformation.Youcancheckthisboxeitherwhenyou switchtothedirectoryserver,orafteryouhavemadetheswitch. TheRedirectorconfigurationisnotmigrated tothedirectoryserver. IfyouhaveaproblemconnectingtoLDAPand migrating,trytoconnecttoLDAPfirst.Then,aftersuccessfully connecting,trytomigrate. ClickApply. WhenyouareaskedtoauthenticatewiththeLDAP directoryforthefirsttime,specifyauserIDof"admin"andapassword of"password".Youcanchangethispasswordafterthefirstlogon. Eventhoughyoumighthavechangedyourpasswordfortheprivate datastore,thatIDandpasswordcontinuestobevalidfortheprivate datastoreonly.FortheLDAPdirectory,aseparateuserIDandpassword arerequired.Toavoidconfusion,youcanchangeyourLDAPdirectory passwordtobethesameasyourprivatedatastorepassword. Changesmadeonthispanelareeffectiveimmediately.Onceyou haveswitchedtotheLDAPserver,subsequentuser-relatedchanges willbemadeonlyontheLDAPserver,includingadministrativechanges togroups,users,orsessions,andchangessuchasnewpasswords, macros,keyboardchanges,etc.,byeithertheadministratororauser. Appendixes AppendixA.Notices Thisinformationwasdevelopedforproductsandservicesoffered intheU.S.A. HCLmaynotoffertheproducts,services,orfeaturesdiscussed inthisdocumentinothercountries.ConsultyourlocalHCLrepresentative forinformationontheproductsandservicescurrentlyavailablein yourarea.AnyreferencetoanHCLproduct,program,orserviceis notintendedtostateorimplythatonlythatHCLproduct,program, orservicemaybeused.Anyfunctionallyequivalentproduct,program, orservicethatdoesnotinfringeanyHCLintellectualpropertyright maybeusedinstead.However,itistheuser'sresponsibilitytoevaluate andverifytheoperationofanynon-HCLproduct,program,orservice. HCLmayhavepatentsorpendingpatentapplicationscoveringsubject matterdescribedinthisdocument.Thefurnishingofthisdocument doesnotgiveyouanylicensetothesepatents.Youcansendlicense inquiries,inwriting,to: HCL 330PotreroAve. Sunnyvale,CA94085 USA Attention:OfficeoftheGeneralCounsel HCLTECHNOLOGIESLTD.PROVIDESTHISPUBLICATION"ASIS"WITHOUT WARRANTYOFANYKIND,EITHEREXPRESSORIMPLIED,INCLUDING,BUTNOT LIMITEDTO,THEIMPLIEDWARRANTIESOFNON-INFRINGEMENT,MERCHANTABILITY ORFITNESSFORAPARTICULARPURPOSE.Somejurisdictionsdonotallow disclaimerofexpressorimpliedwarrantiesincertaintransactions, therefore,thisstatementmaynotapplytoyou. Thisinformationcouldincludetechnicalinaccuraciesortypographical errors.Changesareperiodicallymadetotheinformationherein;these changeswillbeincorporatedinneweditionsofthepublication.HCL maymakeimprovementsand/orchangesintheproduct(s)and/orthe program(s)describedinthispublicationatanytimewithoutnotice. Anyreferencesinthisinformationtonon-HCLWebsitesareprovided forconvenienceonlyanddonotinanymannerserveasanendorsement ofthoseWebsites.ThematerialsatthoseWebsitesarenotpart ofthematerialsforthisHCLproductanduseofthoseWebsitesis atyourownrisk. HCLmayuseordistributeanyoftheinformationyou supplyinanywayitbelievesappropriatewithoutincurringanyobligation toyou. Licenseesofthisprogramwhowishtohaveinformationaboutit forthepurposeofenabling:(i)theexchangeofinformationbetween independentlycreatedprogramsandotherprograms(includingthis one)and(ii)themutualuseoftheinformationwhichhasbeenexchanged, shouldcontact: HCL 330PotreroAve. Sunnyvale,CA94085 USA Attention:OfficeoftheGeneralCounsel Suchinformationmaybeavailable,subjecttoappropriateterms andconditions,includinginsomecases,paymentofafee. Thelicensedprogramdescribedinthisdocumentandalllicensed materialavailableforitareprovidedbyHCLundertermsoftheHCL CustomerAgreement,HCLInternationalProgramLicenseAgreementor anyequivalentagreementbetweenus. Informationconcerningnon-HCLproductswasobtainedfromthesuppliers ofthoseproducts,theirpublishedannouncementsorotherpublicly availablesources.HCLhasnottestedthoseproductsandcannotconfirm theaccuracyofperformance,compatibilityoranyotherclaimsrelated tonon-HCLproducts.Questionsonthecapabilitiesofnon-HCLproducts shouldbeaddressedtothesuppliersofthoseproducts. AppendixB.Trademarks HCL,theHCLlogo,andhcl.comaretrademarksorregisteredtrademarks ofHCLTechnologiesLtd.,registeredinmanyjurisdictionsworldwide. OtherproductandservicenamesmightbetrademarksofIBM® orothercompanies.