Volume. Enterprise Secure File Transfer (ESFT) User Guide

Legal Notices Pacific Gas and Electric Co. (hereinafter referred to as PG&E) practices as described in this document are intended for PG&E personnel. Any conflicting interpretation or deviation(s) from this document for special applications must be expressly approved by an authorized PG&E representative. PG&E reserves the right to enhance or modify these in the pursuit of better business practices. NOTICE OF COPYRIGHT: Copyright 2011 by PG&E as an unpublished work. All rights reserved. In claiming any copyright protection that might be applicable, PG&E reserves and does not waive any other rights it may have (by agreement, statutory or common law, or otherwise) with respect to this material. See Notice of Proprietary Rights. NOTICE OF PROPRIETARY RIGHTS: This document and the material on which it is recorded is the property of PG&E. Its use, reproduction, transfer, and/or disclosure to others, in this or any other form is prohibited except as permitted by a written License Agreement from PG&E. NOTICE: This document is intended as a System Support tool. It is, to the best of our knowledge, complete and accurate. PG&E does not, however, warrant this document s accuracy or omission. PG&E reserves the right to update this document without prior notification. TRADEMARKS: All company and product names in this document may be trademarks of the company with which they are associated. PG&E Internal Version 0.1 Page 2 of 17 1/17/2017

Table of Contents Internal and External Users 1 INTRODUCTION... 4 1.1 How to use Enterprise Secure transport web access plus... 5 1.2 Install and configure WinSCP SSH client to access ESFT (Internal PG&E USER)... 8 1.3 Install and configure WinSCP SSH client to access ESFT (External to PG&E s environment)... 9 1.4 ESFT Browser Support (FOR Internal PG&E Users)... 11 1.5 ESFT Browser Support (For External Users)... 12 1.6 Best practice tips using ESFT... 13 1.7 ESFT Support SERVICES... 14 1.8 ESFT Support Contact Information... 14 1.9 ESFT Decommissioning Process Information... 14 1.10 FAQ S... 16 1.10.1 I forgot my Password... 16 1.10.2 Client Connections Available... 16 2 DOCUMENT CONTROL... 17 PG&E Internal Version 0.1 Page 3 of 17 1/17/2017

1 INTRODUCTION This guide should be used as a simple reference point when internal ESFT services, implementation, or support is required. What is Enterprise Secure File Transfer (ESFT)? Do you have a need to send sensitive information either to another employee or to an external third party? You can now do so securely, using Enterprise Secure File Transfer system (ESFT). ESFT is PG&E s standard service for secure file exchange that aligns with the company s Cryptographic Controls Standard. Additionally, ESFT can handle large volumes of data and file sizes (company email has a 15 MB file size limitation). ESFT has a number of applications; you can send files internally between employees or systems, or externally, between third parties or vendors. This document outlines how to access and use the Enterprise Secure File Transfer system. There are two main connectivity methods to access the system which include an http browser or SSH standalone client. Both methods and configurations will be outlined in this section beginning with http browser access: Browser Selection URL for browsers internal to PG&E s network https://esft.comp.pge.com URL for browsers external to PG&E s network https://esft.pge.com IE 8,9,10,11 or Firefox version 24.x and above At ESFT Login page enter the following: User Name: LANID <lowercase> Password: PG&E domain At ESFT Login page enter the following: User Name: Assigned Username Password: Assigned PG&E password Enter your unique credentials at the ESFT login screen: PG&E Internal Version 0.1 Page 4 of 17 1/17/2017

NOTE: Internal Users : If after entering ESFT login credentials and your screen shows loading please see ESFT Browser Support section on page 11 (1.4) External Users : If after entering ESFT login credentials and your screen shows loading please see ESFT Browser Support section on page 12 (1.5) 1.1 HOW TO USE ENTERPRISE SECURE TRANSPORT WEB ACCESS PLUS Please note: Screen shot illustrations are for demonstration purposes only. Web Access Plus complete pane view: Let s look at each sub pane and its corresponding functionality to understand how to display and transport files. View 1: Remote pane: This view illustrates the remote folder structure in a hierarchical format. Folders and files opened here are displayed Secure Transport pane as well. View 2: SecureTransport: Allows you to view, delete, copy, and move the SecureTransport Server files. PG&E Internal Version 0.1 Page 5 of 17 1/17/2017

View 3: My Computer: Allows you to view, delete, copy and move the files and folders on your local computer. Folders and files are displayed in the Secure Transport pane as well. View 4: Transfers Queue: Shows a list of active, paused, canceled and finished transfers. Transferring Files The main function of Web Access Plus is to view and transfer files There are several ways to upload and download files in this user interface, we will outline a few simple steps to illustrate how to transmit files by either the upload or download process. End users are encouraged to explore different uploading and downloading techniques. Uploading: Step 1. Action Select one or more files from the local site. (Refer to view 3) Note: To select multiple files, press Ctrl or Shift while selecting the files. Right click on selected files and select copy from the drop down menu 2. 3. Click on the remote pane and drill down into the target folder. (Refer to view 1) Right click in the Secure Transport pane and select paste file from the drop down menu (Refer to view 2) 4. 5. Upload commences and Transfer Queue details indicate status. (Refer to view 4) 6. Uploaded files will now be displayed in the Secure Transport pane PG&E Internal Version 0.1 Page 6 of 17 1/17/2017

Downloading: Step 1. Action Select one or more files from the remote pane. To select multiple files, press Ctrl or Shift while selecting the files. Right click on the selected file(s) and select download 2. 3. 4. 5. In the save in dialog box select the drop down menu path, navigate to the required target folder. Download commences and Transfer Queue details indicates status Navigate to target folder path on local system to open downloaded files. File Delivery Notification: Email notification from PG&E user upload Email notification from automated process (Please note: file names and folders paths are for illustration purposes alone, your files and folder paths will be specific to your ESFT environment) PG&E Internal Version 0.1 Page 7 of 17 1/17/2017

1.2 INSTALL AND CONFIGURE WINSCP SSH CLIENT TO ACCESS ESFT (INTERNAL PG&E USER) Please note: This process only applies to internal PG&E hardware running Windows 7. Internal WinSCP SSH client Installation and configuration steps: Step 1 2 3 4 5 6 7 8 9 10 11 Action Start > Search programs and files > Type Software Center Search for WinSCP_4.3.5 Install in program offerings in the Available Software tab Click on the link WinSCP_4.3.5 Install Click on the INSTALL button at the bottom of the screen When the download dialog box appears select the Run button Installation will run in the back ground and takes a few minutes to install A WinSCP icon should appear in your start menu once install is complete Click on the icon to open into the WinSCP login screen On the left, under Session, click stored Session Click the New button on the right In session dialog box, populate the following fields: Host name: esft User name: LANID <lowercase> Password: PG&E domain password Port: 22 Protocol: SFTP Click on the Save button 12 13 14 15 16 19 20 21 Save session as: lanid@esft Under stored sessions highlight your session and click login ESFT connection commences Continue connecting to an unknown server and add its host key to the cache? Click on the Yes button Enter Username password: WinSCP Opens into two panes Left pane is local user drives and folders Right pane is the ESFT site folder structure Suggested configuration to mitigate transfer anomalies Select the Options tab in the menu and scroll down to Preferences In the left menu Click on the transfer button Under Filename modification make sure that No change is selected and there is no check mark next PG&E Internal Version 0.1 Page 8 of 17 1/17/2017

22 to Replace \:*? Click the OK button Select the Options from the menu again and select Preferences Click the Endurance button Under Enable transfer resume/transfer to temporary filename for Click the button next to Disable Select OK 23 End configuration steps 24 WinSCP Opens into two panes Left pane is local user drives and folders Right pane is the ESFT folder structure 26 The best practice is to create a folder under the local C:\ drive to upload from and download to. 27 To upload simply navigate to and open your folder on your local C: drive Open the required folder on the ESFT server side With your pointer drag the files to the folder on the ESFT server side and hover over the target folder The Copy dialog box appears, select OK The file transfer finishes 28 Down loading files from ESFT is just a reverse of the upload process 1.3 INSTALL AND CONFIGURE WINSCP SSH CLIENT TO ACCESS ESFT (EXTERNAL TO PG&E S ENVIRONMENT) Please note: This process only applies to External to PG&E s environment. External WinSCP 5.7.x SSH Client Installation and configuration Procedure Step Action Navigate to this URL http://winscp.net/eng/download.php 1 and download the 5.7.x Installation Package 2 Once the download completes, click on winscp5557setup.exe installer package 3 Click the Run button 4 Select Setup Language Click the OK button 5 Welcome to the WinSCP Setup Wizard - Click next> 6 License Agreement - Click the i accept the agreement button and click Next> 7 Setup type - Select Typical installation (recommended) and Click Next> 8 Initial user settings - Select Commander button and click Next> 9 Ready to Install Click on the Install button 10 Install Progresses.. PG&E Internal Version 0.1 Page 9 of 17 1/17/2017

11 12 13 14 Completing the WinSCP setup Wizard Uncheck both options regarding Google Chrome and click Next> Completing the WinSCp Setup Wizard Check mark on Launch WinSCP Uncheck the Opening Getting started page Click the Finish button WinSCP Login page configuration / credentials File protocol: SFTP Host name: esft.pge.com Port number: 22 Username: ESFT Login name Password: ESFT Login password Click on the Save button Save session as site Site name: username@esft.pge.com Folder: <root> Uncheck Save password Check Create desktop shortcut Click the OK button 15 Highlight username@esft.pge.com and select the Login button 16 ESFT connection commences 17 Continue connecting to an unknown server and add it s host key to the cache? Click on the Yes button 19 Enter username password WinSCP Opens into two panes 20 Left pane is local user drives and folders Right pane is the ESFT site folder structure 21 22 23 24 Suggested configuration to mitigate transfer anomalies Select the Options tab in the menu and scroll down to Preferences In the left menu Click on the transfer button Select the Edit button Transfer settings Filename modification Remove check mark next to Replace \:*? Click the OK button Preferences - Click on Endurance in menu Enable transfer resume / transfer to temporary filename for Click on the Disable radial button and select OK 25 End configuration steps PG&E Internal Version 0.1 Page 10 of 17 1/17/2017

WinSCP Opens into two panes 26 Left pane is local user drives and folders Right pane is the ESFT folder structure 27 The best practice is to create a folder under the local C:\ drive to upload from and download to. 28 To upload simply navigate to and open your folder on your local C: drive Open the required folder on the ESFT server side With your pointer drag the files to the folder on the ESFT server side and hover over the target folder The Upload dialog box appears, select OK The file transfer finishes 29 Downloading files from ESFT is just a reverse of the upload process 1.4 ESFT BROWSER SUPPORT (FOR INTERNAL PG&E USERS) ESFT Browser Support: If you experience a loading screen after entering your ESFT credentials and ESFT site does not load, please use the steps listed below to rectify issue: Please note: these steps will only work with PG&E Windows 7 machines within the network! Step Action 1 Go to Start > Search Programs and Files 3 Type Software Center in the field 4 Select Software Center icon in the top of the list 5 Once in Software Center run the package Oracle 1.7.x Uninstaller Oracle 1.7.x Uninstaller. 6 Click the Run button 7 8 When the download window opens check the Run program automatically when download completes box then click Download. After that completes run the same steps but this time use the package Oracle JRE 1.6.045 (x86) Install Oracle JRE 1.6.045 (x86). PG&E Internal Version 0.1 Page 11 of 17 1/17/2017

When the process completes please clear the cache in your browser with the following steps for Windows Internet Explorer 8, 9, 10, 11 9 Press down on the following keys Ctrl + Shift + Del Make sure to uncheck Preserve Favorites website data and check both Temporary Internet Files and Cookies then click Delete If you are using Mozilla Firefox please try clearing your cache 10 Press down on the following keys Ctrl + Shift + Del Select drop down Time range to clear and click the Clear Now button 9 If these steps do not rectify browser loading issue when accessing ESFT site, please send SMC request to the ESFT Admin Team: http://tsc/forms/entintmidware/esftsupport.aspx 1.5 ESFT BROWSER SUPPORT (FOR EXTERNAL USERS) ESFT Java loading fix for customers external to PG&E s environment Why am I getting a loading screen when trying to access PG&E s Enterprise Secure File Transfer from my browser? Your browser JAVA level has been elevated above the threshold to access ESFT, above JAVA 6 update 45. To recover, you will be required remove any JAVA update above therefore mentioned level. How do I uninstall Java updates on my Windows computer? Manual Uninstall Steps: You can uninstall older versions of Java manually in the same way as you would uninstall any other software from your Windows computer. Navigate to the respective Uninstall Program path based upon specific OS listed below. If there are two Javas listed, remove any Java listing above JAVA 6 update 45. Older versions of Java may appear in the program list as J2SE, Java 2, Java SE or Java Runtime Environment. Windows 8 - Uninstall Programs 1. Right-click on the screen at bottom-left corner and choose the Control Panel from the pop-up menu. 2. When the Control Panel appears, choose Uninstall a Program from the Programs category. 3. Select the program to uninstall and then click its Uninstall button. 4. Click yes to confirm the program uninstall. PG&E Internal Version 0.1 Page 12 of 17 1/17/2017

Windows 7 and Vista - Uninstall Programs 1. Click Start 2. Select Control Panel 3. Select Programs 4. Click Programs and Features 5. Select the program you want to uninstall by clicking on it, and then click the Uninstall button. You may need administrator privileges to remove programs. Windows XP - Uninstall Programs 1. Click Start 2. Select Control Panel 3. Click the Add/Remove Programs control panel icon 4. The Add/Remove control panel displays a list of software on your system, including any Java software products that are on your computer. Select any that you want to uninstall by clicking on it, and then click the Remove button. 1.6 BEST PRACTICE TIPS USING ESFT Best practice tips using ESFT ESFT is a transient site, every upload will eventually be removed from the drive within a few weeks Do not try to download to or upload from a SharePoint folder, shared drive, or mapped drive. Do not try to open content within ESFT, navigate to resources downloaded to your local system and open them there Make sure you upload to a folder on the ESFT side. Files uploaded to root on ESFT will be seen by you but no other parties Keep in mind, you can create as many sub-folders as required under a top level share. Anyone who has access to the top level folder will have access to all sub folders. If you want to segment and control folder access, new application folders will be required, please contact the ESFT Admin Team for assistance or submit a ESFT SMC request to http://tsc/forms/entintmidware/esftsupport.aspx PG&E Internal Version 0.1 Page 13 of 17 1/17/2017

1.7 ESFT SUPPORT SERVICES To order ESFT services please use the information and link below. Please note: the support link will only work on PG&E s network. The first step for requesting ESFT services involves creating a SMC request using the link below: http://tsc/forms/entintmidware/esftsupport.aspx Please include a high level description of your ESFT request using these bullet point questions: Internal PG&E Users: List of LAN IDs needing access (is it just you or some of the other members from your team as well) External Users: If there are external vendors, we would need Organization name, Name of the contact person, email ID and Phone number Project Name: For our inventory Shared Folder Name: If all users can access a single shared folder, please suggest a folder name. If each external entity should only see their own files, we can create separate folders based on the vendor organization name. PCC/Order number: It will be couple of hours based on the request details. Date by when support needed: Is there a specific date by when you would need this? 1.8 ESFT SUPPORT CONTACT INFORMATION ESFT Support Contact Information For ESFT Support: Submit an online request @ http://www/tsconline/forms/entintmidware/esftsupport.aspx For ESFT Questions or support email: EIESFTAdministrators@exchange.pge.com For Urgent ESFT Issues: Primary On-Call (925) 415-6572 Secondary On-Call (925) 415-2627 1.9 ESFT DECOMMISSIONING PROCESS INFORMATION Step Action PG&E Internal Version 0.1 Page 14 of 17 1/17/2017

1 Submit a ESFT SMC request to http://www/tsconline/forms/entintmidware/esftsupport.aspx 2 Indicate ATS Department and LANID or external ID to be disabled on the system Please note: ESFT policy is to disable active accounts from the system when not required 3 Accounts can always be enabled if required in the future 4 Once the required internal or external accounts have been disabled, ESFT Admin Team will notify requesting party of current status through an email chain. PG&E Internal Version 0.1 Page 15 of 17 1/17/2017

1.10 FAQ S How to request access to ESFT 1.10.1 I forgot my Password Step Process 1 Navigate to URL https://esft.pge.com 2 Click on the Forgot your Password? Link. 3 Enter your email address and click on Submit: 4 You will receive an email for password reset instructions. 5 After clicking on the link in the mail, you will get a new password in a separate email. 1.10.2 Client Connections Available Software Type Web Browser FTP and HTTP Clients SSH Clients Supported Software Versions Firefox on Linux, Windows XP, Vista, & Windows 7 Internet Explorer 7, 8 and 9 on Windows XP, Vista, & Windows 7 (please note IE10 and 11 are not compatible) Axway SecureClient also supported for HTTPS transfers curl 7.19 (HTTPS only) CuteFTP Professional 8.3.2 FDX 4.5.2 FileZilla 3.0.0 or later versions Igloo FTP Professional 3.9 SmartFTP Client 3.0 SecureTransport 4.9 Rich Internet Client SecureTransport Windows Client 4.2 SecureTransport Windows Client 4.5 WinSCP 4.1.9 or later versions FDX 4.5.2 FileZilla 3.0.0 or later versions PuTTY SecureFile Transfer 0.60 SCP and SFTP (shipped with Solaris 10) WinSCP 4.1.9 or later versions PG&E Internal Version 0.1 Page 16 of 17 1/17/2017

2 DOCUMENT CONTROL Document Responsibility Doc Author(s): Ankit Misra Doc Current Version: 1 Date Completed: Document Contributors Contributor Name Role Comments Daniel Green EI ESFT Admin Document Reviewers Version Date Reviewer Name Relationship Comments Reviewed Document Approvers Approved By Date Version Signatures Role/Comments Change History This section details the changes this document has undergone once it is base lined. 5/28 Modified instruction set and screen shots for section 1.1 5/28 Modified WinSCP version Install and configure Section 1.3 PG&E Internal Version 0.1 Page 17 of 17 1/17/2017