Security Guide for IBM i V6.1

Security Guide for IBM i V6.1

Author: Jim Cook

Publisher: IBM Redbooks

Published: 2009-05-29

Total Pages: 426

ISBN-13: 0738432865

DOWNLOAD EBOOK

The IBM® i operation system (formerly IBM i5/OS®) is considered one of the most secure systems in the industry. From the beginning, security was designed as an integral part of the system. The System i® platform provides a rich set of security features and services that pertain to the goals of authentication, authorization, integrity, confidentiality, and auditing. However, if an IBM Client does not know that a service, such as a virtual private network (VPN) or hardware cryptographic support, exists on the system, it will not use it. In addition, there are more and more security auditors and consultants who are in charge of implementing corporate security policies in an organization. In many cases, they are not familiar with the IBM i operating system, but must understand the security services that are available. This IBM Redbooks® publication guides you through the broad range of native security features that are available within IBM i Version and release level 6.1. This book is intended for security auditors and consultants, IBM System Specialists, Business Partners, and clients to help you answer first-level questions concerning the security features that are available under IBM. The focus in this publication is the integration of IBM 6.1 enhancements into the range of security facilities available within IBM i up through Version release level 6.1. IBM i 6.1 security enhancements include: - Extended IBM i password rules and closer affinity between normal user IBM i operating system user profiles and IBM service tools user profiles - Encrypted disk data within a user Auxiliary Storage Pool (ASP) - Tape data save and restore encryption under control of the Backup Recovery and Media Services for i5/OS (BRMS) product, 5761-BR1 - Networking security enhancements including additional control of Secure Sockets Layer (SSL) encryption rules and greatly expanded IP intrusion detection protection and actions. DB2® for i5/OS built-in column encryption expanded to include support of the Advanced Encryption Standard (AES) encryption algorithm to the already available Rivest Cipher 2 (RC2) and Triple DES (Data Encryption Standard) (TDES) encryption algorithms. The IBM i V5R4 level IBM Redbooks publication IBM System i Security Guide for IBM i5/OS Version 5 Release 4, SG24-6668, remains available.


IBM System i Security: Protecting i5/OS Data with Encryption

IBM System i Security: Protecting i5/OS Data with Encryption

Author: Yessong Johng

Publisher: IBM Redbooks

Published: 2008-07-24

Total Pages: 308

ISBN-13: 0738485373

DOWNLOAD EBOOK

Regulatory and industry-specific requirements, such as SOX, Visa PCI, HIPAA, and so on, require that sensitive data must be stored securely and protected against unauthorized access or modifications. Several of the requirements state that data must be encrypted. IBM® i5/OS® offers several options that allow customers to encrypt data in the database tables. However, encryption is not a trivial task. Careful planning is essential for successful implementation of data encryption project. In the worst case, you would not be able to retrieve clear text information from encrypted data. This IBM Redbooks® publication is designed to help planners, implementers, and programmers by providing three key pieces of information: Part 1, "Introduction to data encryption" on page 1, introduces key concepts, terminology, algorithms, and key management. Understanding these is important to follow the rest of the book. If you are already familiar with the general concepts of cryptography and the data encryption aspect of it, you may skip this part. Part 2, "Planning for data encryption" on page 37, provides critical information for planning a data encryption project on i5/OS. Part 3, "Implementation of data encryption" on page 113, provides various implementation scenarios with a step-by-step guide.


IBM i 6.1 Independent ASPs: A Guide to Quick Implementation of Independent ASPs

IBM i 6.1 Independent ASPs: A Guide to Quick Implementation of Independent ASPs

Author: Scott Vetter

Publisher: IBM Redbooks

Published: 2009-12-10

Total Pages: 268

ISBN-13: 0738433683

DOWNLOAD EBOOK

This IBM® Redbooks® publication explains how to configure and manage independent disk pool (IASP) functionality of IBM i 6.1. It is designed to help IBM technical professionals, business partners, and customers understand and implement independent disk pools in the IBM i 6.1. In addition, this publication provides the background information that is necessary to plan, implement, and customize this functionality to your particular environment. It provides guidance on running user applications with either application data or most application objects residing in an independent disk pool. Considering that you can also use independent disk pools in a cluster environment, this publication shows you the basic steps to make your independent disk pool switchable between two Power SystemsTM servers or a single server with multiple LPARs. Independent auxiliary storage pools have many business and technical advantages for Power Systems using IBM i. Not only are independent auxiliary storage pools (IASPs) easy to create and maintain, most applications can use them by simple work management changes. IASPs can provide immediate benefits to your enterprise.


IBM I5/OS IP Networks

IBM I5/OS IP Networks

Author: Kent Bruinsma

Publisher:

Published: 2007

Total Pages: 0

ISBN-13:

DOWNLOAD EBOOK

Over the course of many years, the developers in both the Endicott and Rochester labs have been working very hard adding functions to each release of OS/400 and i5/OS to make the configuration and use of the IBM System i in a TCP/IP network easier and more powerful. If you need to design an IP network that is self-configuring, fault-tolerant, secure, and efficient in its operation, then this IBM Redbooks publication is for you. We start low with the details of IP interface and route implementation on i5/OS. Through the study of these building blocks, we show how to create IP networks that are easier to configure, tolerant of faults, and can perform both inbound and outbound load balancing. i5/OS has always had many built-in Network Security features. These features have been enhanced to include an Intrusion Detection System (IDS). This allows you to be notified of attempts to hack into, disrupt, or deny service to the system. Moving up to the application layer, we demonstrate the dynamic power of IP by having the DHCP server assigning IP addresses and automatically updating the i5/OS Dynamic DNS. Now clients and servers can be added dynamically to the IP network and assigned a name automatically.


Understanding AS/400 System Operations

Understanding AS/400 System Operations

Author: Mike Dawson

Publisher: MC Press

Published: 2000-05

Total Pages: 812

ISBN-13: 9781583470152

DOWNLOAD EBOOK

Tis guide is intended for students learning computer operations and administration on the AS/400 computer system. Offering a unique approach to learning AS/400 operations with extensive hands-on labs, self-tests, and review questions, this book uses real-world situations to enable users to be productive with AS/400 operations. This book also covers the requirements of the two IBM AS/400 certification exams: AS/400 Associate System Operator Certification (test 052) and AS/400 Professional System Operator Certification (test 053). The primary goal of this book is to teach users how to perform day-to-day operations on an AS/400 computer system, including IPL, starting and stopping the system, backup and recovery, and system cleanup. Procedures covered include creating and maintaining user environments, device configuration and management, security implementation, work and data management, and TCP/IP configuration. Console operations discussed include jobs, message handling, and working with spool files and peripheral devices. Functions of Operations Navigator are covered, and Electronic Customer Support (ECS) and PTF upgrades are also introduced.


IBM i 6.1 Technical Overview

IBM i 6.1 Technical Overview

Author: Jim Cook

Publisher: IBM Redbooks

Published: 2009-12-16

Total Pages: 518

ISBN-13: 0738433608

DOWNLOAD EBOOK

This IBM® Redbooks® publication introduces a technical overview of the main new features, functions and enhancements available in IBM i 6.1 (formerly called i5/OS® V6R1). It gives a summary and brief explanation of new capabilities and what has changed in the operating system, and also discusses many of the licensed programs and application development tools associated with IBM i. Many other new and enhanced functions are described, such as virtualization of storage, security, JavaTM performance, improved performance with IBM System StorageTM devices, backup and recovery, including base IBM i, Backup, Recovery and Media Services (BRMS). The book introduces the PowerHATM product, IBM Systems Director-based system management and an easier Web enablement. The information provided in this book will be useful for customers, Business Partners, and IBM service professionals involved with planning, supporting, upgrading, and implementing IBM i 6.1 solutions.


IBM Systems Director Navigator for i

IBM Systems Director Navigator for i

Author: Brandon Schulz

Publisher: IBM Redbooks

Published: 2009-12-02

Total Pages: 224

ISBN-13: 0738433802

DOWNLOAD EBOOK

In this IBM® Redbooks® publication we discuss IBM Systems Director Navigator for i, which is a Web console interface for IBM i administration where you can work with the Web-enabled tasks of System i® Navigator. IBM Systems Director Navigator for i includes a number of welcome pages that allow you to quickly find the task that you want to perform. The IBM Systems Director Navigator for i interface is not just a set of URL addressable tasks, but is a robust Web console from which you can manage your IBM i system. However, the System i Navigator Tasks on the Web, which are a set of URL-addressable tasks, can be accessed by using the URL or from within the IBM Systems Director Navigator for i interface. The information in this book is intended to help you start using the Web-based console, IBM Systems Director Navigator for i, by providing you with a look at the new interface as well as tips for working with various parts of the new console.