Complete the planning work sheets

The following planning work sheets illustrates the type of information you need before you enable your systems to use Kerberos authentication.

Table 1. Use Kerberos authentication between Management Central servers - prerequisite work sheet
Prerequisite work sheet Answers
Is your i5/OS™ V5R3 (5722-SS1) or later for all of your iSeries™ systems? Yes
Have you applied the latest program temporary fixes (PTFs)? Yes
Are the following options and licensed products installed on all your iSeries systems?
  • i5/OS Host Servers (5722-SS1 Option 12)
  • iSeries Access for Windows® (5722-XE1)
  • Start of changeNetwork Authentication Enablement (5722-NAE) if you are using V5R4 or laterEnd of change
  • Start of changeCryptographic Access Provider (5722-AC3) if you are running V5R3End of change
 Yes
Is iSeries Access for Windows (5722-XE1) installed on the administrator's PC? Yes
Is iSeries Navigator installed on the administrator's PC?
  • Is the Network subcomponent of iSeries Navigator installed on the administrator's PC?
  • Is the Security subcomponent of iSeries Navigator installed on the administrator's PC?
 Yes
Have you installed the latest IBMe(logo) server iSeries Access for Windows service pack? See iSeries Accesslink outside the Information Center for the latest service pack. Yes
Do you have *SECADM, *ALLOBJ, and *IOSYSCFG special authorities? Yes
Do you have one of the following systems acting as the Kerberos server? If yes, specify which system.
  1. Microsoft® Windows 2000 Server
    Note: Microsoft Windows 2000 Server uses Kerberos authentication as its default security mechanism.
  2. Windows Server 2003
  3. i5/OS PASE (V5R3 or later)
  4. AIX® server
  5. zSeries®
 Yes, Windows 2000 Server
For Windows 2000 Server and Windows Server 2003, do you have Windows Support Tools (which provides the ktpass tool) installed? Yes
Is the iSeries system time within 5 minutes of the system time on the Kerberos server? If not see Synchronize system times. Yes
Table 2. Use Kerberos authentication between Management Central servers - planning work sheet
Questions Answers
What is the name of the system group? MyCo2 system group
What systems will be included in this system group? iSeries A, iSeries B, iSeries C, iSeries D
What are the service principal names for the iSeries systems?

krbsvr400/iseriesa.myco.com@MYCO.COM
krbsvr400/iseriesb.myco.com@MYCO.COM
krbsvr400/iseriesc.myco.com@MYCO.COM
krbsvr400/iseriesd.myco.com@MYCO.COM
Parent topic: Scenario: Use Kerberos authentication between Management Central servers
Next topic: Set central system to use Kerberos authentication