Removing SIPN FIN capability

To remove SIPN FIN capability, you must remove the COs you created and configured when setting it up. To help you do this, FTM SWIFT generates, during customization, for each business OU, scripts with names of the form:

deployment_dir/instance/admin/ou_script.cli

where:

deployment_dir

Directory specified in the CDP initialization file.

instance

Name of the instance.

ou

Name of the OU.

script

Names of the scripts containing the necessary remove commands:

dnfcfrsl

If you no longer want to use a synonym LT with the SIPN FIN service, or if you want to move the synonym LT to another business OU, use this script to remove from the business OU the COs of types DnfLTApplicationSettings and DnfSynonymLT. This script removes these COs. Modify and run this script once for each LT.

dnfcfrco

If you no longer want to use a master LT with the SIPN FIN service, or if you want to move the master LT to another business OU, use this script to remove from the business OU the COs of the following types:

DnfLTApplicationSettings
DnfLTConn
DNF_ILC_CMD
DnfLT

This script removes these COs. Modify and run this script once for each LT.

dnfcfrfc

If you are a central institution that wants to stop using a SWIFTNet FINCopy or FINInform service in Y-copy mode, remove the corresponding COs of type DnfFinCopyServiceConn.

dnfcfrfs

If you no longer want to use a SWIFTNet FINCopy service, or if you are a central institution that wants to stop using a SWIFTNet FINInform service, use this script to remove the corresponding COs of type DnfFinCopyService.

dnfcfrce

If you no longer want to use exception option sets to specify exception queues, use this script to remove the CO of type DnfExceptionOptionSet

dnfcvrsv and dnfcvrsc

To remove signature verification, use the following scripts:

dnfcvrsv: Remove the CO DnfFIN of type DnfSignatureService.
dnfcvrsc: Remove the COs of type DnfSignatureConn that specify to which SAG and message partner a verify command applies.

The customization process substitutes the placeholder DNIvOU in these scripts with the name of the OU. To modify and run these scripts:

Copy the scripts into your home directory.
To find out which LTs are defined, follow the procedure described in Listing LTs.
Replace the following items in the copies of the scripts as appropriate:
<ltname>

The name (BIC9) of the LT.

<number>
The two-digit number of a connection between a master LT or the signature processing service and an SAG. To find out which connections are defined, use the list command:
```
list -ou ou -lt DnfLTConn        -co %       -lo nco
list -ou ou -lt DnfSignatureConn -co DnfFIN% -lo nco
```
<synonymLT>

The name (BIC9) of the synonym LT.

<fin_copy_service>

The name of a CO of type DnfFinCopyService that is to be removed. This CO was created during the procedure described in Configuring SWIFTNet FINCopy and FINInform services.

<BIC8>

The first eight characters of the LT name.

<exception_co>

The name of the exception option set.

<service>

The name of the service that provides signature verification capability. It must be DnfFIN.

Run each script once for each business OU. To do this, you must have the system configuration administrator (DniSA) role. Enter the following commands:

dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft ou_dnfcfrsl.cli
dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft ou_dnfcfrco.cli
dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft ou_dnfcfrfc.cli
dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft ou_dnfcfrfs.cli
dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft ou_dnfcfrce.cli
dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft ou_dnfcvrsv.cli
dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft ou_dnfcvrsc.cli

Approve and deploy the changes:
```
dnicli -i instance -ou SYSOU -s DNI_SYSADM 
app -ou ou
dep -ou ou
```
```
com -ou DNFSYSOU
app -ou DNFSYSOU
dep -ou DNFSYSOU
```
If dual authorization is enabled, another user with the appropriate access rights must approve the changes before they can be deployed. If dual authorization is disabled, you can skip approving the changes and immediately deploy them.
Run the script dnfcfres.cli to remove the default exception option set from DNFSYSOU.
Remove SIPN FIN roles from users manually, similar to the way they were added, for example:
```
rem -user JSMITH -ro SWIFTNetFINOperator -ou BANKA
```