QSECOFR password

110 pts.
Tags:
AS/400 Password Recovery
AS/400 security
QSECOFR
Hi, i forgot my qsecofr password.any possiable way to know that password..please help me.. Thanks in advance, Regards, baskar

Answer Wiki

Thanks. We'll let you know when a new response is added.

Hi,

You can normally reset the QSECOFR password using service tools, but you will need a profile capable of running service tools or at least resetting the passwords for service tools users. IBM have ways around this, but they generally keep the information to themselves.

Regards,

Martin Gilbert.

Hi,

If you have not changed the service tools passwords, I think IBM has a default setup.

U: QIBM
P: 2222222 – this is all ’2′s. I don’t remember how many, but just enter enough to fill the password field.

Len Hrabar

If the Service Tools User password is lost also, here’s the IBM ways around this. They do require a shutdown to manual IPL:

To reset the service tools device ID password on the server, do one of the following:
Note:
To perform the following procedure using SST, select the option Work with service tools user IDs and Devices everywhere it says select Work with DST environment and skip the step Select System devices. You must unlock the SST option before the option is usable. See Using Service Tools Device IDs in System Service Tools (SST).

* If you can obtain a console session using another device, do one of the following:
o Reset the service tools device ID password. By doing this, the service tools device ID password becomes the service tools device ID name, in uppercase. To reset the service tools device ID, perform these steps:
1. Access Dedicated Service Tools (DST) or System Service Tools (SST).
2. From the DST main menu, do the following:
1. Select Work with DST environment.
2. Select Service tools device IDs.
3. Type 2 in front of the service tools device ID to be reset, and then press Enter.
4. Press Enter again to confirm the reset.
Note:
When you reset the password in DST, the service tools device ID password becomes the service tools device ID name in uppercase. If you will be using a password other than the device name, you will have to delete the current service tools device ID and create a new ID with your desired password. If you delete and create a device ID, you will also have to delete and create the connection on the PC.
o To reset the service tools device ID to something other than the name in uppercase, perform these steps from the DST main menu:
1. Select Work with DST environment.
2. Select Service tools device IDs.
3. Type 3 in front of the old service tools device ID you want to delete, and then press Enter.
4. Press Enter again to confirm the deletion.
5. Using option 1 create a new service tools device ID and assign the password of your choice. If you delete and create a device ID, you will also have to delete and create the connection on the PC.
* If you do not have another device to sign on to the system, but do have an unused service tools device ID, do the following on the PC:
1. Delete the current configuration as follows:
1. Select the configuration name (under iSeries connection).
2. From the Connection menu, click Delete.
3. Click Yes to confirm the deletion if prompted.
2. Create a new configuration and use the unused service tools device ID during the configuration.
3. Use one of the methods above to reset the failing service tools device ID after connecting.
* If you cannot use another service tools device or service tools device ID to sign on and you are using the QCONSOLE service tools device ID, you will have to use the control panel or the remote control panel to reset the service tools device ID password by following these steps:
1. Place the system in Manual mode. Systems without a keystick will show 01 B in the Function/Data display.
Note:
Systems with a keystick should show the mode as Manual and 01 B in the Function/Data display.
2. Use the following information to help determine your progress and success of the reset:
Note:
If your system uses the new double-row Function/Data display control panel, you may have to perform a function 11 in order to display the results (D1008065). Allow at least 15 seconds for the initial function 65 to complete before doing a function 11 if the display did not respond with the D1008065.

The double-row display control panel presents data like this (models 270 and 8xx):
xxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxx

Each word is 8 characters but 4 words are displayed at a time for words 12 through 19. For example, requesting word 12 will provide you:
word__12word__13
word__14word__15

Requesting word 13 will provide you:

word__16word__17
word__18word__19

The single-row display control panel and the remote control panel presents data like this:
xxxxxxxx

Each word is 8 characters only and displayed individually. If you want word 17, you have to request function 17.

The data provided in the words can be accessed using many different methods.

Important: In order to know where you are in the process the following information is provided:
o Word 17 of the SRC D1008065 will contain the the number of function 65s you have done. When it reaches a count of 7 the reset of the service tools device ID password will take place. Word 18 will then be set to 00000000.
o Word 18 will show 00000001 until you have entered the seventh function 65. When the reset has completed, this word will be set to 00000000 unless more than 5 minutes have elapsed.
Note:
If you enter function 65 more than seven times, the count will start over.

For more detailed information on the control panel, see the Control Panel information.
3. Use one of the following methods to reset the QCONSOLE service tools device ID depending on the partition type:
o For independent systems or primary partitions follow these steps:
1. From the control panel, use the Up or Down buttons so that Function/Data display shows 25. Then press the Enter button. The Function/Data display should show 25 00.
2. Use the Up button once to increment the data to 26. Then, press the Enter button. The system will most likely respond with 01 B in the Function/Data display.
Note:
If the system responds with 65 FF repeat steps a and b again.
3. Using the Down button, decrement the data to 65, and then press the Enter button. The system will respond with 65 00. After processing the function the system will respond with a D1008065. Repeat this step so that you have entered 7 function 65s. You will have 5 minutes to complete this task. When the seventh 65 is entered and if it is found that greater than 5 minutes have elapsed, the reset will not be processed and the count will return to zero.
o For secondary partitions follow these steps using the console on the primary partition:
1. Access Dedicated Service Tools (DST) or System Service Tools (SST).
Note:
You must unlock the SST option before the option is usable. See Using Service Tools Device IDs in System Service Tools (SST).
2. Select Work with system partitions.
3. Select Work with partition status.
Note:
If the partition the reset will be performed on is not in manual mode, place a 10 in the selection area before continuing.
4. Enter a 65 on the line for the partition to be reset, then press Enter.
5. Repeat this step so that you have entered 7 function 65s. You will have 5 minutes to complete this task. When the seventh 65 is entered and if it is found that greater than 5 minutes have elapsed the reset will not be processed and the count will return to zero.

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • TomLiotta
    Simplest way is what should be done -- issue this command:
    CHGUSRPRF  QSECOFR  PASSWORD( newpassword )
    
    To make that work, sign on with the security officer profile that you created as soon as you installed the system. Enter the above command once you sign on. You would have created your own security officer profile because you shouldn't be using the QSECOFR profile for work on the system except at IBM's direction. .....You don't have an alternative *SECOFR profile available...? Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following