• Preventing IBM i data theft

    A firewall should be the first line of defense to protect your IBM i system, but not the only security measure you take. Rich Loeber counsels you to not ignore the enemy within. Build strong object...

  • Security incident response system for System i

    Any security officers working with IBM System i need to organize a security incident response system to handle incidents of varying severity.

  • Setting up security for programmers on IBM i

    Programmers working on an AS/400 need greater security access than a standard user, but determining how much access they should get isn't always easy. Rich Loeber provides tips on what options exis...

  • Blocking AS/400 DB2 users

    To block DB2 users from altering data using WinSQL tool, a security software tool may be the best bet for true protection.

iSeries system and application security

Email Alerts

Register now to receive Search400.com-related news, tips and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Start security auditing with one command

    Do you want to set security auditing without creating journal receivers, journals, or changing of system values? You can with the CHGSECAUD command. 

  • Password security hole

    A little known security hole: If you allow adjacent digits, a user can set their password to all numbers. 

  • Creating your iSeries security policy

    In the past, the main security policy decision was whether or not to have locks on the doors to the computer room. That was it. In today's inter-networked world, security has become of paramount importance and your security policy is correspondingly... 

  • Resetting the SST user profile

    One member asks, "Can the SST user profile be reset? My company changed all default users. I have QSECOFR access. " Search400.com security expert Carol Woodbury responds. 

  • CAPP: What it represents for i5/OS

    When computer security issues started to become higher priority, the powers that be who set up standards developed the C2 standard (also known as "Trusted Computing Systems Evaluation Criteria [TCSEC], developed by the US Department of Defens... 

  • Keeping consultants honest

    I am always surprised by the number of programming shops that, in addition to their own resources, use external consultants for programming and systems tasks. The reasons are varied, but consultants present some serious security exposures. In this ... 

  • Changing user profile authorities

    One Search400.com member writes, "When changing a user profile CHGUSRPRF USRPRF(PERSON) SUPGRPPRF(PERSONALLO), when does the authorities of the supplemental group PERSONALLO go into affect for user PERSON? In this case PERSONALLO has *ALLOBJ special ... 

  • Managing the iSeries Navigator Application Administration functions

    One Search400.com member writes, "We have the need to allow a support profile that does not have *ALLOBJ authority to view a production user's profile joblog. We have found the way to address this via Skyview/Ops Navigator/Host Applications/Customiz... 

  • Answering and deleting messages in QSYSOPR message queue

    One Serch400.com member writes, "What controls a user's ability to be allowed to answer and (especially) delete messages in the QSYSOPR message queue? How can we restrict them?" 

  • Answer and delete in the QSYSOPR message queue

    One Search400.com member writes, "What controls a user's ability to be allowed to answer and (especially) delete messages in the QSYSOPR message queue? How can we restrict them?" Security expert Carol Woodbury explains.