Reset the QSECOFR i5/OS user profile password

If you know the password for the QSECOFR service tools user ID, you can use it to reset the QSECOFR i5/OS™ user profile to its initial value (QSECOFR). This procedure requires you to perform an initial program load (IPL) on your server. The change does not take effect until after the IPL.

To reset the QSECOFR i5/OS user profile, complete the following steps:

  1. Start DST.
  2. Enter the QSECOFR service tools user ID and password on the DST Sign-On display.
  3. Select option 5 (Work with DST environment) from the Use DST menu.
  4. Select option 6 (Work with Service Tools Security Data) from the Work with DST Environment menu. You will see the Work with Service Tools Security Data menu:
                          Work with Service Tools Security Data                       
    
                                                         System: _____________        
    
       Select one of the following:                                                   
    
                1. Reset operating system default password                            
    
                2. Change operating system install security                           
    
                3. Work with service tools security log                               
    
                4. Restore service tools security data                                
    
                5. Save service tools security data                                   
    
                6. Password level                                                     
    
       Selection                                                                      
    
  5. Select option 1 (Reset operating system default password). The Confirm Reset of System Default Password display appears.
  6. Press Enter to confirm the reset. A confirmation message appears telling you that the system has set the operating system password override.
  7. Continue pressing F3 (Exit) to return to the Exit DST menu.
  8. Select option 1 (Exit DST). The IPL or Install the System menu appears.
  9. Select option 1 (Perform an IPL). The system continues with a manual IPL. If you need additional information about performing an IPL, see the Start and stop the server topic.
  10. When the IPL completes, return the keylock switch or electronic keystick to the Auto position, if applicable.
  11. Sign on to i5/OS as QSECOFR. Use the CHGPWD command to change the QSECOFR password to a new value. Store the new value in a safe place.
Attention: Do not leave the QSECOFR password set to the default. This is a security exposure because this is the value included in every iSeries™ server and is commonly known.