Changing password security levels and upgrading operating systems on the IBM i

Changing password security levels and upgrading operating systems on the IBM i

We are planning a change from Password Level 0 to Password Level 2, and eventually to Level 3. Do you have any planning tools and/or documents that will help us prepare for this change? We have 3 System i servers: production, backup (DR) with replication using iTera HA, and a separate development server that currently has two partitions.

We are also interested in upgrading our operating systems. For production and backup, we want to go from V5R3 to V6R1, and for development, we want to move from V5R4 to V6R1. How will this affect our change in password level planning?

    Requires Free Membership to View

    Register today to access targeted resources from our editorial writers and independent industry experts including news, tips, and advice to help you do your job more efficiently and effectively. Stay informed on the hottest topics and biggest challenges faced by IT professionals working with iSeries products and services.

    By submitting your registration information to Search400.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of Search400.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

IBM provides planning information for changing this system value in Chapter 3 of the Security Reference manual beginning in V5R4.

The main considerations are ensuring that the clients connecting to the NetServer don't require the old Lanman password. In addition, if you've customized your sign-on screen, you'll have to customize the version that provides a 128-character password field. This field, as well as the password field on CHGPWD, CRTUSRPRF and CHGUSRPRF commands all switch to allow 128-character passwords.

Finally, changing the levels requires an IPL before they take affect. While the version of the software the clients are running does need consideration, the release of the server (i5/OS), shouldn't be an issue.

This was first published in April 2009