Ports and Services for IBM i

This section lists the services that run after installing Zend Server and the ports these services listen to.

IBM i

After the installation the following ports will be used by Zend Server's components:

Apache server: listens on port 10101 and port 10100. Use the Zend Server Management Menu to stop/start/restart the Apache jobs - Option 10/ Option 11/ Option 12.

Java Server: The job name is " ZSTRJAVAMW" and it listens on port 10002. To start/stop this service from the Zend Server Management Menu use Option 24.

Changing the Apache Port

When Zend Server is installed, it is assumed that the Zend Server User Interface listens to 10101. If your environment is configured differently, when you try to access the User Interface, you receive a "Zend Server Exception Caught" error message.

The Web Server (Apache) listens to port 10100.

To fix this, the port settings must be changed.

After changing your Apache's port setting to another port, change the User Interface's port setting as follows:

Enter: STRZS7 or GO ZENDPHP74/ZSMENU.
Select Option 15 to update httpd.conf file.
Restart Apache.

You can also use IBM's "Web Administration for i5/OS" which will be running on port 2001 (http://<YOUR_IP>:2001.

Zend Server GUI secure connection

SSL installation

To install your SSL certificate on an IBM i system, do the following:

	Step 1: Downloading your SSL Certificate and its intermediate CA certificate: If you had the option of server type during enrollment and selected Other you will receive a x509/.cer/.crt/.pem version of your certificate within the email. Alternately you can access your Certificate User Portal by the supplied link in the email to pick up the x509 version of your certificate. Copy the SSL certificate, making sure to copy the —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– header and footer. Ensure there are no white spaces, extra line breaks, or additional characters. Use a plain text editor to paste the content of the certificate into a new file and save it with extension .txt If your intermediate CA certificate for your product is not in the body of the email, you can access your Intermediate CA from a link within that email. Copy and paste the contents of your Intermediate CA into its own file and save it with a .txt extension also. Some CAs may require two intermediates for best compatibility. Copy these two within their own corresponding .txt files and install them one at a time.
	Step 2: Installing your intermediate CA: Start Digital Certificate Manager (DCM). From the navigation panel, click Select a Certificate Store then select SYSTEM. Enter the password for the Certificate Store* and click Continue. From the navigation panel, select Manage Certificates. From the list, select Import Certificate > Certificate Authority (CA) then click Continue. On the next screen specify the path and file name of your intermediate CA .txt file and click Continue. Specify a name for your imported intermediate CA. Click Continue. A message appears stating the intermediate CA certificate has been imported. Click OK. The intermediate CA certificate is now installed. If you receive a error stating “The issuer of this certificate could not be found” or “The issuer of the certificate may not be in the certificate store” this is due to a missing Root certificate for your SSL/Intermediate that is required on the system. Getting your Root CA will vary and you may have to consult your CA in order to get this. The SSL Support Desk features intermediates and roots from the following big CAs. It must be in its own .txt file. Repeat step 2 to import your root and then your intermediate.
	Step 3: Installing the SSL Certificate: Start Digital Certificate Manager (DCM). From the navigation panel, click Select a Certificate Store then select SYSTEM. Enter the password for the Certificate Store* and click Continue. From the navigation panel, select Manage Certificates. From the list, select Import Certificate then select Server or Client. On the next screen specify the path and file name of your SSL Certificate .txt file, and click Continue.
	Step 4: Assigning your SSL certificate: In the navigation frame, select Manage Applications to display a list of tasks. From the task list, select Update Certificate Assignment to display a list of SSL-enabled applications for which you can assign a certificate. Select an application from the list and click Update Certificate Assignment. Select the certificate that you imported and click Assign New Certificate. The DCM displays a message to confirm your certificate selection for the application. For more information consult the IBM Knowledge Center.

Zend Server GUI SSL definitions

To access the Zend Server GUI via secure port 10102, do the following.

Stop the Zend Server environment using the green screen menu: STRZS7

Add the following directives to the Apache configuration file /www/zendphp74/conf/httpd.conf:

#SSL start
    Listen *:10102
    NameVirtualHost *:10102
    SetEnv HTTPS_PORT 10102
    SSLEngine On
    SSLAppName TESTQA
    <VirtualHost *:10102>
        RedirectMatch ^/$ /ZendServer/
        DocumentRoot /usr/local/zendphp74/gui/public/
        <Directory /usr/local/zendphp74/gui>
            Options FollowSymLinks
            AllowOverride None
            order allow,deny
            Allow from all
        </Directory>
        <Location /ZendServer>
            order allow,deny
            Allow from all
        </Location>
        Alias /ZendServer "/usr/local/zendphp74/gui/public"
        <Directory "/usr/local/zendphp74/gui/public">
            AllowOverride All
            order allow,deny
            Allow from all
         </Directory>
     </VirtualHost>
 #SSL end

Start the Zend Server environment using the green screen menu: STRZS7
Use the following URL to access secured Zend Server GUI: https://your_ibmi_server:10102/ZendServer