Configure InterSystems IRIS Managed Cloud Service Productions

Create Authorization Credentials

Before configuring a production to use SFTP, create the authorization credentials that will be used in your productions. This task creates SFTP passphrase credentials that correspond to the file transfer user you created for your tenant on the Files pageOpens in a new tab of the Cloud Services Portal.

1. In the InterSystems IRIS Managed Cloud Service Management Portal, select Interoperability > Configure > Credentials.

2. In the right panel of the Credentials Viewer page, enter an ID that will be used in your production configuration.

3. Enter the User Name of the file transfer user from your tenant’s Files page.

4. Click Save.

Configure a Production to Use SFTP

After you have set up SFTP for your tenant on the Files pageOpens in a new tab of the Cloud Services Portal, you can configure a production to ingest files from a folder in your S3 bucket or output files to a folder in your S3 bucket. A business service can watch an input folder for incoming files, such as HL7 or X12 messages, and pass them to a business process for transformation or other processing. A business process can also pass outgoing files to a business operation, which can in turn deposit them in an output folder.

This section applies to business services (inbound adapters) and business operations (outbound adapters) that are of Input Type or Output Type FTP.

1. In the Management Portal, select Interoperability > Configure > Production.

2. Select your business service or business operation.

3. Click the Settings tab.

4. Configure the Basic Settings and SFTP Settings, as described below.

5. Click Apply when you are done to save your settings.

Basic Settings Section

• IP Port — Enter a port within the port range of your firewall rule.

Connection Settings Section

• SSL Configuration — Enter an SSL/TLS configuration to be used to secure traffic when using an external firewall rule.

  For business services, select a server SSL/TLS configuration.

• Local Interface — Use <IP Address> (IPv4 eth0) for private firewall rules. Use <IP Address> (IPv4 eth1) for external firewall rules. This binds the IP Port to the correct Local Interface.

  Make sure <IP Address> is within the CIDR block allowed by your firewall rule.

  For private firewall rules, if you see multiple choices matching the pattern <IP Address> (IPv4 eth0), select the one with 254 in the last octet of the IP address.

  Note:

  If you see an error similar to ERROR #5002: ObjectScript error: <PROTECT>zGetInterfacesInfo+2^%SYSTEM.INetInfo.1 in the Local Interface field, contact us using iService for assistance. (For more information, see Getting HelpOpens in a new tab.)

Connect to the Business Service

To connect to a business service from the external system, use the IP Port you specified in the business service settings. Connect to the Virtual IP Address listed on the Overview page if using a private firewall rule. Connect to the External IP listed on the Overview page if using an external firewall rule.

To quickly test connectivity from the other system to a business service, use the command nc -vv <InterSystems IRIS Managed Cloud Service IP address> <port number> on Linux or tnc <InterSystems IRIS Managed Cloud Service IP address> -Port <port number> on Windows.

The following examples show how to test connectivity to the Virtual IP Address 192.168.22.254 over the private network on port 5000.

Linux

nc -vv 192.168.22.254 5000
Connection to 192.168.22.254 5000 port [tcp/*] succeeded!

Windows:

tnc 192.168.22.254 -Port 5000


ComputerName     : 192.168.22.254
RemoteAddress    : 192.168.22.254
RemotePort       : 5000
InterfaceAlias   : Ethernet 2
SourceAddress    : <Source IP address>
TcpTestSucceeded : True