# Server Connection: PR5S Fields with the asterisk \* are mandatory.

Value	Description
SERVER NAME *	Enter a unique name for the server.
DESCRIPTION *	Provide a brief description of the server.
PORT *	Enter the port to connect to the server. This is the TCP/IP port the server will listen to in the STENG node.
QMANAGER NAME *	Enter the SPAZIO local Queue Manager. Maximum 48 characters.
DEFAULT CHARSET *	Select the default charset used to convert the received text in the external file. For a list of the default charset, follow this link.
USE EXTERNAL KEYSTORE *	Enable this toggle button to use an external HSM. These fields will appear: - Server key label : equivalent to the SERVER KEYLABEL* above. Enter the alias or label of the Private Key and Certificate stored in the HSM to be used to create the SSL connection. - Token type: string provided by the HSM vendor. - Token name: string provided by the HSM vendor.
SERVER KEYLABEL *	Select the alias or label of the Private Key and Certificate to be used to create the SSL connection.
AUTHENTICATION PROTOCOL	Select the SSL authentication protocol. Possible values: ALL ONLY SPECIFIC VALUES: SSLv3 TLSv1 TLSv1_1 TLSv1_2 TLSv1_3
ACCEPTED CIPHER SUITES	Select the cipherSuites accepted to establish SSL connection. For a list of all accepted Cipher Suites, follow this link.
REQUIRE CLIENT AUTHENTICATION *	Enable the toggle button if you want the server to require SSL Client Authentication to the client that is connecting. If enabled, the CLIENT CERTIFICATE MATCH field appears, and the appropriate option must be selected in the drop-down menu – details in the field here below.
CLIENT CERTIFICATE MATCH	This field appears if the Require Client Authentication button is enabled. It defines if the Certificate required for Client Authentication will be matched and how. Possible values: - NONE: the Certificate will not be matched. The presence of a valid Certificate is enough to proceed. This is the less secure option. - CNEQUALS (default value): the Common Name field of the subject of the Certificate must be exactly the same as the user name. This is the most restrictive option. - CNCONTAINS: the Common Name field of the subject of the Certificate must contain the user name.

DMZ mode
NONE (default)	No session proxying through DMZ Gateway applied.
PORT_FORWARDING	Incoming/Outgoing connections to/from STENG server will be proxied inside an SSL tunnel without being validated in advance. - DMZ PROXY PORT : this port represents the tunnel that is opened for connection with the STENG Server. - SERVER KEYLABEL: select the label of private key to be used by the SFTP server exposed in the DMZ Gateway. - AUTHENTICATION PROTOCOL: select the SSL authentication protocol. Possible values: - ALL* - ONLY SPECIFIC VALUES: SSLv3 TLSv1 TLSv1_1 TLSv1_2 TLSv1_3 - ACCEPTED CIPHER SUITES: for a list of all accepted Cipher Suites, follow this link. - REQUIRE CLIENT AUTHENTICATION *: enable the toggle button if SSL Client authentication must be required.
SESSION_TERMINATION	The server session will be terminated inside the DMZ Gateway, before data is sent to STENG server. - DMZ PROXY PORT : this port represents the tunnel that is opened for connection with the STENG Server. - SERVER PORT : enter the DMZ server port to be used for the connection. - Use external keystore for DMZ : enable this toggle button to use an external HSM for DMZ. These fields will appear: - DMZ Server key label : equivalent to the SERVER KEYLABEL below. Enter the label of the private key stored in the HSM to be used by the SFTP server exposed in the DMZ Gateway. - DMZ Token type: string provided by the HSM vendor. - DMZ Token name: string provided by the HSM vendor. - SERVER KEYLABEL: select the label of private key to be used by the SFTP server exposed in the DMZ Gateway. - AUTHENTICATION PROTOCOL: select the SSL authentication protocol. Possible values: - ALL - ONLY SPECIFIC VALUES: SSLv3 TLSv1 TLSv1_1 TLSv1_2 TLSv1_3 - ACCEPTED CIPHER SUITES: for a list of all accepted Cipher Suites, follow this link. - REQUIRE CLIENT AUTHENTICATION *: enable the toggle button if SSL Client authentication must be required.

To change any DMZ port of a PR5S server that belongs to a peer, select the server you want to update. Next, click the pencil icon in the top-right corner of the server card. Enter the new port or ports in the appropriate fields. Finally, click the **SAVE** button to confirm your changes. Remember that the new port number will only affect the peer's selected server. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.primeur.com/data-mover-1.21/transfer-protocols-and-connectors/server-connections/server-connection-pr5s.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.