SafeNet/400 Upgrade Procedure


You have two methods you can use when upgrading your SafeNet/400 installation from one release level to the latest release level as follows:

  • Method A - Traditional Direct Installation
  • Method B - Automatic Unattended Upgrade Installation

Either method will result in a successful upgrade installation. Method A is used for those situations where you can easily schedule some downtime for your system and you prefer to do a direct installation with operator supervision during the entire process. Method B can be used as an alternate when scheduling downtime is a problem. Method B is a two step process where the actual installation is done during an IPL of your system.

Both upgrade installation methods are described below.


Special Note - For all customers upgrading to Release 5 or higher from any release prior to Release 5.

Starting with Release 5 of SafeNet/400, a special user profile must be created on your AS/400 with the name of "SAFENET" before you start the upgrade process. All objects are now owned by this user profile. The user profile must have *SECOFR as its profile class and it must have all object authority. Before starting your upgrade, check your documentation for more information about this special user profile and make sure it exists on your system. (Note: the profile must have *IOSYSCFG authority.)


Method A - Traditional Direct Installation

If you are doing a traditional direct installation of your SafeNet/400 upgrade, complete the following steps:

  1. End all subsystems.

  2. De-Activate SafeNet/400. To De-Activate you must be signed on as QSECOFR. Select option 6 from the SN2 menu in Library PCSECLIB.

  3. After the De-Activate completes, press F3 to exit all SafeNet/400 menus.

  4. On the command line type LODRUN DEV(XXX) replace XXX with the name of your media device (either tape or CD-Rom reader). The upgrade is complete when the SafeNet/400 Main Menu is displayed.

  5. If any additional server settings will need to be set, please do so at this time by selecting menu option 1 from the SafeNet/400 Main Menu (Maintain Server Security Settings).

  6. Restart all subsystems and run your start-up program or IPL.

  7. Once step 6 is complete all processing can resume.


Method B - Automatic Unattended Upgrade Installation

To have the SafeNet/400 upgrade installed at your next IPL, use these instructions. Be sure to perform the update preparation EXACTLY as shown here. READ THE ENTIRE PROCEDURE BEFORE STARTING THIS PROCESS.

  1. Sign on to any terminal session on your system using a user profile OTHER THAN QSECOFR that has *SECOFR as a user class. The profile must also have *IOSYSCFG special authority. If no such user profile exists, we recommend that you create one to be active until after the update is completely installed.

  2. Load the update media in your drive (tape or CD-Rom).

  3. If you are installing the upgrade on a CISC system, go to instruction 4. If you are installing on a RISC system, go to instruction 5. THIS IS AN IMPORTANT CHOICE, IF YOU ARE UNSURE ABOUT YOUR CHOICE, CONTACT KISCO INFORMATION SYSTEMS.

  4. If you have a CISC system, enter the following command to load the update:

    RSTLIB SAVLIB(PCSECINST) DEV(XXX) LABEL(SAFENET) +
    ENDOPT(*UNLOAD)
    Continue at step 7.

  5. If you have a RISC system and you are installing from a CD-Rom, go to step 6, otherwise enter the following command to load the update from tape:

    RSTLIB SAVLIB(PCSECINST) DEV(XXX) LABEL(SAFENET) +
    ENDOPT(*UNLOAD) FRCOBJCVN(*YES *RQD)
    Continue at step 7.

  6. To load the update from CD, enter following command:

    RSTLIB SAVLIB(PCSECINST) DEV(OPTxx) OPTFILE("/SAFENET") +
    FRCOBJCVN(*YES *RQD)

    Note: Substitute single quotes for the double quotes shown here.

    Continue at step 7.

  7. From the command line, issue the following instruction:

    CALL PGM(PCSECINST/INSPREPCL)

    This procedure will make the following changes to your system:

    • Your system value QSTRUPPGM (the IPL Startup Program setting) will be temporarily changed. When the IPL runs, this value will be reset to its old value.
    • The user profile associated with the job description QSTRUPJD will be temporarily changed. Following the IPL, this value will be changed to QPGMR (the default factory setting). If you have another value set for this job description, you will have to manually change it after the IPL is complete. You can use the DSPJOBD command to verify the current setting for this before doing step #5.

  8. At your next IPL, the update to SafeNet/400 will be automatically applied. Please be prepared that this IPL process will take longer than normal by up to 20 minutes. Do not interrupt the IPL until it is completed. All values associated with your current SafeNet/400 installation will be preserved.
    Return to SafeNet/400 Support Page