Resetting QSECOFR service tools user ID

Methods to recover from a disabled QSECOFR service tools user ID:

vSign on with the QSECOFR OS/400 user profile.

vUse the XPF CL command CHGDSTPWD with *DEFAULT as the parameter value. Executing this command will enable the profile (if disabled), reset the profile’s password to QSECOFR, and set the password to expired. After using the CHGDSTPWD command, you can change the password of the QSECOFR service tools user ID by signing on to DST.

Note: If the system security is set to prevent a service tools user ID with a default and expired password from changing its own password, then you will not be able to sign on to SST until you first sign on to DST and change your password there.

Performing an IPL to DST for secondary partitions

Perform the following steps:

1.Enter STRSST at the OS/400 command line on the system console for the primary partition. Press Enter.

2.At the Start Service Tools (SST) Sign On display, type in a user ID and password with QSECOFR service tools user ID authority. Press Enter.

3.At the System Service Tools display, select the Start a service tools option.

4.Select the Work with system partitions option.

5.Select the Work with partition status option.

6.Use the cursor to select the secondary partition you want to IPL.

7.Select option 10 (Mode manual).

8.Select option B (Source B).

9.Select option 1 (Power on). Press Enter.

10.The IPL or Install the System display appears on the secondary partition console. Select the Use Dedicated Service Tools option.

11.The DST Sign On display appears. Sign on to DST as QSRV.

Type QSRV as the valid user ID and get the password from the customer. If the customer has changed the full DST authority, user ID, or password, ask the customer for the correct values.

Note: If prompted for a password, be sure to give the new (changed) password to the customer.

Note: V5R1 limits you to three sign on attempts to DST. After three unsuccessful attempts, the service tools user ID will be disabled. The system administrator with QSECOFR authority will need to reset the ID.

12.The Use Dedicated Service Tools (DST) display appears.

The system is in the limited paging environment (see “System paging environments” on page 2). See “DST options” on page 10 for details on DST options.

This ends the procedure.

6Service Functions V5R2

Page 20
Image 20
IBM SY44-5902-05 manual Resetting Qsecofr service tools user ID, Performing an IPL to DST for secondary partitions