55 lines
3.5 KiB
HTML
55 lines
3.5 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Lockable security system values" />
|
||
|
|
<meta name="abstract" content="You can lock the security-related system values to prevent users and programs from changing those values." />
|
||
|
|
<meta name="description" content="You can lock the security-related system values to prevent users and programs from changing those values." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvconcepts.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../rzakz/rzakzlockunlock.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="lockdown" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Lockable security system values</title>
|
||
|
|
</head>
|
||
|
|
<body id="lockdown"><a name="lockdown"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Lockable security system values</h1>
|
||
|
|
<div><p>You can lock the security-related system values to prevent users
|
||
|
|
and programs from changing those values.</p>
|
||
|
|
<p>System service tools (SST) and dedicated service tools (DST) provide an
|
||
|
|
option to lock these system values. By locking the system values, you can
|
||
|
|
prevent even a user with *SECADM and *ALLOBJ authority from changing these
|
||
|
|
system values with the CHGSYSVAL command. In addition to restricting changes
|
||
|
|
to these system values, you can also restrict adding digital certificates
|
||
|
|
to digital certificate store with the Add Verifier API and restrict password
|
||
|
|
resetting on the digital certificate store.</p>
|
||
|
|
<p>You can use system service tools (SST) or dedicated service tools (DST)
|
||
|
|
to lock and unlock the security-related system values. However, you must use
|
||
|
|
DST if you are in recovery mode because SST is not available during this mode.
|
||
|
|
Otherwise, use SST to lock or unlock the security-related system values.</p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvconcepts.htm" title="To effectively create a security policy and plan security measures for your system, you need to understand the following security concepts, some of which are general concepts and some of which are specific to the hardware type.">Concepts</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relinfo"><strong>Related information</strong><br />
|
||
|
|
<div><a href="../rzakz/rzakzlockunlock.htm">Lock function of security-related system values</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|