SafeNet/400 Upgrade Procedures

Normal SafeNet/400 Upgrade Procedure

• Method A - Traditional Direct Installation
• Method B - Automatic Unattended Upgrade Installation

Either method will result in a successful upgrade installation. Method A is used for those situations where you can easily schedule some downtime for your system and you prefer to do a direct installation with operator supervision during the entire process. Method B can be used as an alternate when scheduling downtime is a problem. Method B is a two step process where the actual installation is done during an IPL of your system. Important Note: You cannot use method B when upgrading more than one release level.

Both upgrade installation methods are described below.

Before you start your upgrade

1. Make sure that you have your SafeNet/400 permanent installation codes available for use. They may be needed towards the end of the installation process. If you do not have these codes available, contact Kisco Information Systems and obtain the codes prior to starting this procedure.

2. Check the size of the file named TRAPOD in library PCSECDTA. If it is very large, you should consider doing a purge of it in advance of the upgrade, especially if your system is low on free disk space. During the upgrade, all files in PCSECDTA are copied over into the newly installed version. Some customers do not purge this file regularly and are then surprised when the upgrade install takes a very long time or fills up their free disk space. If you do a purge, but specify in the purge to save the information to the archive files, then make sure you backup the archive and clear the archive file members before the upgrade. The archive file is named TRAPARCW and is also in library PCSECDTA. If you do not purge the TRAPOD file and it is very large, be prepared for a long upgrade process. Note: If you do a purge, make sure that you do it before you end all subsystems at the start of the upgrade process.

3. Check the following system values. They should be set as indicated here. If they are not, note the current settings then change them to these settings:

   QALWOBJRST - *ALL
   QVFYOBJRST - value 3 or lower
   QFRCCVNRST - value 1

   After all upgrade processing has been completed, you can change these values back to what they werebefore you started.

If you have any problems during the upgrade process, please refer to SafeNet/400 Upgrade Recovery instructions on how to deal with any problems during your upgrade installation.

Method A - Traditional Direct Installation

If you are doing a traditional direct installation of your SafeNet/400 upgrade, complete the following steps:

1. End all subsystems using the command: ENDSBS *ALL (you MUST bring your system to a restricted state).

2. De-Activate SafeNet/400. To De-Activate you must be signed on as QSECOFR. Select option 6 from the SN2 menu in Library PCSECLIB.

3. After the De-Activate completes, press F3 to exit all SafeNet/400 menus.

4. On the command line type LODRUN DEV(XXX) replace XXX with the name of your CD-Rom reader. The upgrade is complete when the SafeNet/400 Main Menu is displayed. Check the Additional Documentation Topics that will print on your system following the upgrade for possible additional considerations and instructions.

5. If any additional server settings will need to be set, please do so at this time by selecting menu option 1 from the SafeNet/400 Main Menu (Maintain Server Security Settings).

6. Go to the INSTALL menu in library PCSECLIB and run option #3 to check the software installation status. If the status reports that the software is not installed, do the following:
   • Enter T in the type of install field and press ENTER
   • Enter P in the type of install field, your permanent install code, authorized user level and all 9's in the expiration date and press ENTER.
   This will reset your permanent installation status for the software.

7. Restart all subsystems and run your start-up program or IPL.

8. Once step 7 is complete all processing can resume.

Method B - Automatic Unattended Upgrade Installation

To have the SafeNet/400 upgrade installed at your next IPL, use these instructions. Be sure to perform the update preparation EXACTLY as shown here. READ THE ENTIRE PROCEDURE BEFORE STARTING THIS PROCESS. Important Note: You cannot use method B when upgrading more than one release level.

The following process documents how to pre-load the upgrade onto your system and get your system set up to do the actual upgrade during your next IPL. You can perform this process at any time prior to your next IPL. We recommend that you pre-load the upgrade as close to the time of your scheduled IPL as is practical for you. Pre-loading the upgrade far in advance could result in problems if you have an un-scheduled IPL due to a system problem or power failure.

1. Sign on to any terminal session on your system using a user profile OTHER THAN QSECOFR that has *SECOFR as a user class. The profile must have *ALLOBJ, *IOSYSCFG, *JOBCTL, *SAVSYS, *AUDIT and *SECADM special authority. If no such user profile exists, we recommend that you create one to be active until after the update is completely installed.

2. Load the update CD in your drive.

3. To load the update from CD, enter following command:

   RSTLIB SAVLIB(PCSECINST) DEV(OPTxx) OPTFILE("/SAFENET") +
   FRCOBJCVN(*YES *RQD)

   Note: Substitute single quotes for the double quotes shown here.

4. From the command line, issue the following instruction:

   CALL PGM(PCSECINST/INSPREPCL)

   This procedure will make the following changes to your system:

   • Your system value QSTRUPPGM (the IPL Startup Program setting) will be temporarily changed. When the IPL runs, this value will be reset to its old value.
   • The user profile associated with the job description QSTRUPJD will be temporarily changed. Following the IPL, this value will be changed to QPGMR (the default factory setting). If you have another value set for this job description, you will have to manually change it after the IPL is complete. You can use the DSPJOBD command to verify the current setting for this before doing step #5.

5. At your next IPL, the update to SafeNet/400 will be automatically applied. Please be prepared that this IPL process will take longer than normal by up to 20 minutes. Do not interrupt the IPL until it is completed. All values associated with your current SafeNet/400 installation will be preserved. Check the Additional Documentation Topics that will print on your system following the upgrade for possible additional considerations and instructions.

6. As soon as practical following the IPL., go to the INSTALL menu in library PCSECLIB and run option #3 to check the software installation status. If the status reports that the software is not installed, do the following:
   • Enter T in the type of install field and press ENTER
   • Enter P in the type of install field, your permanent install code, authorized user level and all 9's in the expiration date and press ENTER. This will reset your permanent installation status for the software.

   ---