Lost QSECOFR Password and DST QSECOFR is disabled

0 pts.
Tags:
i5
iSeries
OS/400
I have a 170 at V5R1 and I have lost the QSECOFR password, and the DST QSECOFR has been disabled. I do have access to other DST profiles and can access SST, which allow me to modify the MI code if I wish. Anybody have any suggestions as to how I can regain access to this box, in any way, without having to do an OS reload?
ASKED: November 29, 2004  2:18 PM
UPDATED: November 4, 2010  11:16 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

if you have access to other DST profiles, log onto DST with one of those, take option 5(work with dst env), take option 6(service tools sec data), take option 1(reset operating system default password). This will put it back to QSECOFR, which you will be told to change..

Discuss This Question: 5  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Mbelle
    You have to run the command CHGDSTPWD and reset the DST to *default. This will set it back to QSECOFR over QSECOFR. Then you have to go into DST and it will make you change the password at that time.
    45 pointsBadges:
    report
  • NetBoss
    Here's a cut and paste from iSeries Information Center V5R2. The same should hold true for V5R1. (sorry for the loss of formatting) http://publib.boulder.ibm.com/iseries/v5r2/ic2924/index.htm will get you to the right area to do a search. When you get there just do a search for "Dedicated Service Tools" and you will find a more readable version of the following info. If you want to read the whole manual on Service Functions, check out the publication iSeries Service Functions Version 5 Release 2 SY44-5902-06. ---------------------------------------------------------- Recover or reset QSECOFR passwords When IBM ships a server, both a QSECOFR OS/400 user profile and a QSECOFR service tools user ID are supplied. These are not the same. They exist in different locations and are used to access different functions. Your QSECOFR service tools user ID can have a different password from your QSECOFR OS/400 user profile. Service tools user IDs have different password policies than OS/400 user profiles. If you lose or forget the passwords for both the QSECOFR OS/400 user profile and the QSECOFR service tools user ID, you may need to install your operating system again to recover them. Contact your service provider for assistance. If you know either of these passwords, this information tells you how to recover the password you do not know. Reset the QSECOFR OS/400 user profile password If you know the QSECOFR service tools user ID, you can use it to reset the QSECOFR OS/400 user profile to its initial value (QSECOFR). This procedure requires you to perform an initial program load (IPL) on your server. The change does not take affect until after the IPL. Complete the following steps to reset the QSECOFR OS/400 user profile: Start DST. Enter the QSECOFR service tools user ID and password on the DST Sign-On display. Select option 5 (Work with DST environment) from the Use DST menu. Select option 6 (Work with Service Tools Security Data) from the Work with DST Environment menu. You will see the Work with Service Tools Security Data menu: +--------------------------------------------------------------------------------+ | Work with Service Tools Security Data | | System: _____________ | | Select one of the following: | | 1. Reset operating system default password | | 2. Change operating system install security | | 3. Work with service tools security log | | 4. Restore service tools security data | | 5. Save service tools security data | | 6. Password level | | Selection | +--------------------------------------------------------------------------------+ Select option 1 (Reset operating system default password). The Confirm Reset of System Default Password display appears. Press Enter to confirm the reset. A confirmation message appears telling you that the system has set the operating system password override. Continue pressing F3 (Exit) to return to the Exit DST menu. Select option 1 (Exit DST). The IPL or Install the System menu appears. Select option 1 (Perform an IPL). The system continues with a manual IPL. If you need additional information about performing an IPL, see the Starting and stopping the iSeries topic. When the IPL completes, return the keylock switch or electronic keystick to the Auto position, if applicable. Sign on to OS/400 as QSECOFR. Use the CHGPWD command to change the QSECOFR password to a new value. Store the new value in a safe place. Attention: Do not leave the QSECOFR password set to the default. This is a security exposure because this is the value shipped with every iSeries server and is commonly known. Reset the QSECOFR service tools user ID and password If you know the password for the QSECOFR OS/400 user profile, you can use it to reset the password for the IBM-supplied service tools user ID that has service tools security privilege (QSECOFR) to the IBM-supplied default value by completing the following steps: Ensure that the server is in normal operating mode, not DST. Sign on at a workstation using the QSECOFR OS/400 user profile. On a command line, type CHGDSTPWD (Change IBM Service Tools Password). You see the Change IBM Service Tools Password (CHGDSTPWD) display: +--------------------------------------------------------------------------------+ | Change IBM Service Tools Pwd (CHGDSTPWD) | | | |Type choices, press Enter. | | | |Password . . . . . . . . . . . . *DEFAULT *SAME, *DEFAULT | | | +--------------------------------------------------------------------------------+ Type *DEFAULT and press the Enter key. This sets the IBM-supplied service tools user ID that has service tools security privilege and its password to QSECOFR. Attention: Do not leave the QSECOFR service tools user ID and password set to the default value. This is a security exposure because this is the value shipped with every iSeries server and is commonly known. See the Recommendations for managing service tools user IDs for more information.
    0 pointsBadges:
    report
  • Gramicci
    I am having the same issue however, the only account that actually works, doesn't have the authority to select option 6(Service Tools SEcurity). Any other ideas ?
    65 pointsBadges:
    report
  • Abigail
    Add *SERVICE to the account.
    645 pointsBadges:
    report
  • TomLiotta
    Add *SERVICE to the account. You can't grant an authority that you don't have. If your job is running under a profile that does not have *SERVICE special authority, and the authority cannot be gained from a group profile nor from adopted authority, then you can't add it to any account. Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following