background image

Security

 

of

 

your

 

Operations

 

Console

 

configuration

 

Operations

 

Console

 

security

 

consists

 

of

 

service

 

device

 

authentication,

 

user

 

authentication,

 

data

 

privacy,

 

and

 

data

 

integrity.

 

An

 

Operations

 

Console

 

local

 

console

 

directly

 

attached

 

to

 

the

 

server

 

has

 

implicit

 

device

 

authentication,

 

data

 

privacy,

 

and

 

data

 

integrity

 

because

 

of

 

its

 

point-to-point

 

connection.

 

User

 

authentication

 

security

 

is

 

required

 

to

 

sign

 

on

 

to

 

the

 

console

 

display.

 

The

 

following

 

list

 

gives

 

you

 

an

 

overview

 

of

 

your

 

Operations

 

Console

 

LAN

 

security

 

as

 

shown

 

in

 

Figure

 

1

 

on

 

page

 

14.

 

1.

   

A

 

user

 

enters

 

the

 

correct

 

password.

 

2.

   

Operations

 

Console

 

sends

 

the

 

service

 

tools

 

device

 

ID

 

(QCONSOLE)

 

and

 

its

 

encrypted

 

password

 

to

 

the

 

system.

 

3.

   

The

 

system

 

checks

 

the

 

two

 

values.

 

If

 

they

 

match,

 

the

 

system

 

updates

 

both

 

the

 

device

 

and

 

DST

 

with

 

a

 

newly

 

encrypted

 

password.

 

4.

   

The

 

connection

 

process

 

then

 

validates

 

the

 

service

 

tools

 

user

 

ID

 

and

 

password

 

before

 

sending

 

the

 

system

 

console

 

display

 

to

 

the

 

PC.

 

 

Operations

 

Console

 

13

Summary of Contents for System i

Page 1: ...System i Connecting to System i Operations Console Version 5 Release 4 ...

Page 2: ......

Page 3: ...System i Connecting to System i Operations Console Version 5 Release 4 ...

Page 4: ...umber 5722 SS1 and to all subsequent releases and modifications until otherwise indicated in new editions This version does not run on all reduced instruction set computer RISC models nor does it run on CISC models Copyright International Business Machines Corporation 2000 2006 All rights reserved US Government Users Restricted Rights Use duplication or disclosure restricted by GSA ADP Schedule Co...

Page 5: ... prerequisite checklist for Windows XP Local console directly attached to the server with remote access allowed 32 Setting up a local console on a network 32 Completing prerequisite checklist for Windows 2000 Local console on a network 32 Completing prerequisite checklist for Windows XP Local console on a network 32 Setting up a remote console through dial up support 33 Completing prerequisite che...

Page 6: ... from local console on a network LAN to a local console directly attached for a logical partition 71 Configuring the PC to use the new console type 73 Changing from a twinaxial console to an Operations Console 73 Changing the console from a twinaxial console to an Operations Console in a non partitioned or primary partitioned system 73 Changing the console from a twinaxial console to an Operations...

Page 7: ...tor problems 104 PC5250 window does not display user data 105 Troubleshooting system reference code data 105 System reference code A6nn500x 105 System reference code A6005001 A6005004 and A6005007 105 System reference code A6005008 106 System reference code A9002000 107 System reference code A6005082 108 Failure to display D1008065 and D1008066 automatically after calling the function 108 IPL step...

Page 8: ...vi System i Connecting to System i Operations Console ...

Page 9: ...Sockets Layer SSL that supports device and user authentication without certificates If you plan to use Operations Console to manage System i hardware see the Managing Operations Console topic collection in the IBM Systems Hardware Information Center Related information Managing Operations Console What s new for V5R4 This topic highlights the changes made to the Operations Console topic collection ...

Page 10: ...and manage your System i environment and it does not require the use of a personal computer to act as a console You access the System i platform through a console screen a keyboard and twinaxial cables Web site v iSeries Access Web site This web site includes online product information about iSeries Access and Operations Console Other information v iSeries Access for Windows Installation and setup...

Page 11: ...erations Console Before you begin setting up your Operations Console determine how to best configure it After you complete the planning requirements you can create a setup checklist that will list the Operations Console prerequisites for your system Related concepts PC preparations for Operations Console on page 30 After you complete the planning requirements and know which configuration and PC op...

Page 12: ...r with port 0 addressed either 0 or 1 or port 1 addressed either 0 or 1 can become a console device if twinaxial console is the console type selected If twinaxial console is selected as the console type then Operations Console devices may not be started v Operations Console allows multiple LAN connections to a single system or logical partition but only one 5250 session can have control of a syste...

Page 13: ...ame or different qualified device regardless of what the former console was doing The following information pertains to independent and primary partitions v Console supporting hardware may be required to be located in specific slot locations based on model v Multiple IOPs capable of supporting a console workstation can interfere with the selection of the desired LAN adapter Consider the following ...

Page 14: ...onsole v The adapter location is fixed or at least limited for independent systems or primary partitions Based on your system s hardware requirements you might have limited choices of console types Try to accommodate at least one additional console type if possible v Consider using the take over and recovery option as part of your backup console strategy However the hardware used for the new conso...

Page 15: ...apter were to fail consider a local console directly attached to the server as a backup By changing the console type to a local console directly attached to the server with remote access you can add the ability for a remote PC to become the console v In a logical partition or multiple system environment you will most likely be using multiple local consoles on a network LAN configuration on a singl...

Page 16: ...an one way of using those devices as the console depending on your configuration and circumstances Scenario Consoles for multiple systems or partitions on page 10 This scenario discusses a situation in which you want to manage multiple systems or partitions Takeover or recovery of an Operations Console connection on page 60 You can use these functions to take control of another console device Prep...

Page 17: ...ich configuration and PC operating system you will be using you can create and go through a checklist for setting up Operations Console Planning considerations for your control panel on page 24 To make a connection to the control panel you need to configure a remote control panel RCP or a virtual control panel VCP All IDs that want access need proper authority Related reference Scenario A single c...

Page 18: ...will be using you can create and go through a checklist for setting up Operations Console Related reference Scenario A single console directly attached to the system without remote support on page 8 This scenario discusses a situation in which you might want a single console attached to the system Operations Console cable requirements on page 21 You need to meet these cable requirements for suppor...

Page 19: ...d to be used by the console or other service tools Related concepts PC preparations for Operations Console on page 30 After you complete the planning requirements and know which configuration and PC operating system you will be using you can create and go through a checklist for setting up Operations Console Related reference Operations Console hardware requirements on page 18 You need to meet the...

Page 20: ...OTP request The Operations Console PC replies with the information submitted during the configuration wizard The system then stores and uses the configuration information for the service IP communications stack The Operations Console PC must be placed on a network that can be accessed by the system This can be the same physical network or a network that permits broadcast packets to flow This is an...

Page 21: ... is required to sign on to the console display The following list gives you an overview of your Operations Console LAN security as shown in Figure 1 on page 14 1 A user enters the correct password 2 Operations Console sends the service tools device ID QCONSOLE and its encrypted password to the system 3 The system checks the two values If they match the system updates both the device and DST with a...

Page 22: ... Console local console on a network uses a version of Secured Sockets Layer SSL that supports device and user authentication but without using certificates Device authentication The device authentication is based on a service tools device ID Service tools device IDs are administered in the dedicated service tools DST and system service tools SST They consist of a service tools device ID and a serv...

Page 23: ...ta Operations Console using a direct connection has the same data privacy of a twinaxial connection If the physical connection is secure as discussed under service device authentication the console data remains protected To protect the data ensure only authorized people enter the computer room Operations Console local console on a network uses a secure network connection if the appropriate cryptog...

Page 24: ...sion protection be aware that Operations Console uses ports 449 2300 2301 2323 3001 and 3002 for normal operations In addition port 2301 which is used for the console on a partition running Linux is also vulnerable to probes If your tool were to probe any of these ports it may cause loss of the console which might result in an IPL to recover These ports should be excluded from intrusion protection...

Page 25: ...s Operation Console as a local console directly attached to the server a network connection for iSeries Navigator is required To complete the iSeries Navigator connection the system needs a network adapter and a configured i5 OS line description LIND Operations Console is connected over a serial cable attached to an asynchronous card on the System i platform iSeries Navigator is connected through ...

Page 26: ...ons Console requirements Before using Operations Console ensure that you have met all the hardware software and cabling requirements for Operations Console Operations Console hardware requirements You need to meet the PC and System i hardware requirements for an Operations Console configuration Figure 3 iSeries Navigator and Operations Console configuration on the same network Figure 4 iSeries Nav...

Page 27: ...t to use an Operations Console local console on a network LAN you need to install the LAN adapter for Operations Console according to your model IBM supports a local console on a network LAN only on models 270 and 8xx Table 2 shows the supported cards for LAN connectivity Table 3 shows the correct location for the LAN card Note Supported cards and locations are only for nonpartitioned systems or p...

Page 28: ...ns Console you must use the existing console to perform these steps on the system Changing the console from a twinaxial console to an Operations Console in a logical partition on page 74 To change from a twinaxial console to an Operations Console you must perform these steps on the system using the existing console before turning off the system or performing an initial program load IPL Related ref...

Page 29: ...as Microsoft Proxy Client Hummingbird SOCKS Client NEC SOCKS 5 or others you cannot route the subnet for 192 168 0 0 to the firewall Operations Console uses addresses in the range of 192 168 0 0 to 192 168 0 255 Incorrect routing causes Operations Console to fail Check your SOCKS configuration and make sure that the entry is Direct 192 168 0 0 255 255 255 0 Data encryption for a local console on a...

Page 30: ...orted adapter might be used in a logical partition There are cases where the multifunction IOP MFIOP might not support certain input output adapter IOA types in a logical partition When in doubt contact your service representative Related reference Scenario A single console directly attached to the system with remote support on page 9 This scenario discusses the ability to dial in to the console f...

Page 31: ...owever these devices may function correctly in some situations Planning considerations for your Operations Console installation or upgrade To plan for your Operations Console installation or upgrade you need to know this information If you are upgrading to V5R4 and you want to replace an existing console with Operations Console upgrade the system before migrating the console This will prevent any ...

Page 32: ... The Operations Console features that match the connectivity you plan to use should be specified as part of the order for your new system In this way at the point in the upgrade instructions where console functions are required on the new system you can perform them on your new Operations Console device Also when migrating a former load source device that was used with Operations Console local con...

Page 33: ...Related information Control Panel Remote control panel A remote control panel RCP connects to the system through a local area network LAN With RCP you can perform most of the control panel functions from a local or a remote location v The local console on a network will select the remote control panel by default Use Properties to deselect the function if you do not want to use the remote control p...

Page 34: ...trol panels Related information iSeries Access Service Packs Web site Limitations of the virtual control panel Before you install and use a virtual control panel VCP consider these features and limitations v The VCP is only available while the console is connected v You must remove the parallel remote control panel cable if installed before configuring the VCP connection v A unique service tools d...

Page 35: ...ck to be inserted before the user is eligible to use the mode button For example the user has the remote panel key privilege but will not have the mode function available until the keystick is present For systems without the keystick the user ID being used would only require the remote panel key privilege Related tasks Installing the virtual control panel Follow these steps to install the virtual ...

Page 36: ...ser ID other than QSECOFR QSRV 22222222 or 11111111 for use with the VCP you have to set the service tools user privileges for Partition remote panel key to allow access to the mode function To verify or set this service tools user privilege do the following 1 Go to the DST main menu 2 Select Work with DST environment Service tools user IDs 3 Move the cursor to the user you want to verify or set t...

Page 37: ...control then click Next Notes v If the PC you are working with is connected to a network do not use a name that can be found on that network v When setting up VCP in System i environment there is no partition 0 5 If the Service TCP IP Address field contains a value you will have to use Back and enter another name The name you used was found on your network or in the hosts file If no TCP IP address...

Page 38: ...111 and 11111111 or QSECOFR and If you have previously created additional service tools user IDs you could use any of those as well PC preparations for Operations Console After you complete the planning requirements and know which configuration and PC operating system you will be using you can create and go through a checklist for setting up Operations Console Related concepts Planning considerati...

Page 39: ...Access for Windows __ 6 Apply iSeries Access for Windows service packs __ 7 Install Operations Console Connection Modem __ 8 Install Operations Console cables __ 9 Configure Operations Console on the PC Completing prerequisite checklist for Windows XP Local console directly attached to the server You need to complete this checklist to set up a local console directly attached to the server on Windo...

Page 40: ..._ 4 Verify available communications port __ 5 Install iSeries Access for Windows __ 6 Apply iSeries Access for Windows service packs __ 7 Install Operations Console Connection Modem __ 8 Install PC modem __ 9 Create and configure incoming connections __ 10 Grant remote access __ 11 Install Operations Console cables __ 12 Configure Operations Console on the PC Setting up a local console on a networ...

Page 41: ...ole on the PC Completing prerequisite checklist for Windows XP Remote console through dial up support You need to complete this checklist to set up a remote console through dial up on Windows XP __ 1 Meet Operations Console hardware requirements __ 2 Meet Operations Console software requirements __ 3 Install iSeries Access for Windows __ 4 Apply iSeries Access for Windows service packs __ 5 Instal...

Page 42: ...ble using the Typical or PC5250 User options a Required Programs b 5250 Display and Printer Emulator if IBM Personal Communications V5 8 or V5 7 CSD 1 minimum is not installed You do not need a license to use 5250 Display Emulation just for Operations Console even though the window says that you do Important If your Operations Console configuration is going to support only the remote control panel...

Page 43: ...s 2000 For a local console to communicate with the system you must install the Operations Console connection modem that is included with Operations Console Use these instructions only if you are configuring a local console that is directly attached to the system or a local console that is directly attached with remote access allowed To install the modem follow these steps 1 Click Start Settings Co...

Page 44: ...rive path Client Access Aoc Inf cwbopaoc inf where drive is the drive where iSeries Access for Windows is installed Note The default install path is C Program Files Ibm Client Access Aoc Inf cwbopaoc inf 7 Click Open then click OK 8 Click Next 9 Select the communications port where the Operations Console cable is attached and click Next 10 If prompted select Continue Anyway to continue the install...

Page 45: ...C before you can use the modem click OK Then perform a shutdown and restart your PC Otherwise you may be prompted to restart the PC If that is the case click Yes or OK to perform the shutdown Note If you were not prompted to restart the PC restart the PC to force a rewrite of changed data Granting remote access You need to grant remote access in order for a remote console to have access to the loc...

Page 46: ... the check box for the PC modem that is going to receive the calls from the remote console Make sure that the Operations Console Connection check box is not selected If other check boxes are selected do not change them Then click Next 7 Click Do not allow virtual private connections Then click Next Note If you have a virtual private network VPN leave this check box unchecked 8 Select or add any us...

Page 47: ...t Configuration Protocol DHCP click Assign TCP IP addresses automatically using DHCP Then go to the next step If your network does not use DHCP click Specify TCP IP addresses Then do the following to specify the addresses a In the From field type the address 192 168 0 5 b In the To field type the address 192 168 0 24 c The Total field shows 20 12 Select the Allow calling computer to specify its ow...

Page 48: ...lug all PC power cords from the electrical outlets You need to install the Operations Console cable if you want to use the console function 5250 emulation or command interface to the system This graphic is an overview of your system unit console PC and Operations Console cable This overview is intended to show you a general setup The port location and part numbers could be different depending on t...

Page 49: ... page 23 To plan for your Operations Console installation or upgrade you need to know this information Cabling a model 830 or a model 840 Operations Console These diagrams illustrate how to cable a model 830 or model 840 Operations Console Figure 5 Model 830 Operations Console 41 ...

Page 50: ...etup The configuration wizard and Operations Console window starts Follow the steps through the wizard and enter any required data Important IBM System i and eServer i5 models start counting logical partitions with the number 1 even if it is the only partition instead of a 0 iSeries 270 and 8xx models start counting logical partitions with the number 0 For the console to connect properly your logi...

Page 51: ... performing tasks such as changing the console configuration switching between different console types and changing passwords After you complete your Operations Console planning and set up your connection you have several options to help you manage your local and remote console connections Related concepts Planning considerations for Operations Console on page 3 Before you begin setting up your Op...

Page 52: ...e create the connection configuration Also Operations Console should be closed and restarted before attempting to connect a new configuration This action will remove all cached values associated with any old configurations 1 Select the configuration name 2 Click Disconnect Wait until the status shows Disconnected at the remote console 3 Select the configuration name 4 From the Connection menu clic...

Page 53: ... console has control release control b Select the configuration name c From the Connection menu click Disconnect The connection status shows Disconnecting d Wait until the status shows Not connected to local console at the remote console 2 Select the configuration name 3 From the Connection menu click Delete 4 Click Yes to confirm the deletion Windows 2000 XP users You may need to delete the netwo...

Page 54: ...ame b From the Connection menu click Connect 3 In the LAN Service Device Sign on window sign on using the access password that allows the system to access your service device information You must also provide your assigned service tools user ID and password Operations Console needs a valid access password service tools user ID and service tools password to authorize the connection between the loca...

Page 55: ...e time allowing a single PC to be the console for multiple systems or partitions Connecting a local console directly attached to the system Connecting a local console directly attached with remote access allowed enables remote consoles to connect to the system It also allows System i control to be automatically granted to the first requester or allows you to have control at the local console to ha...

Page 56: ...en connecting a console Operations Console provides status messages to assist you in troubleshooting the connections Connecting a remote console to a local console by modem Connecting a remote console to a local console with remote support allows the remote console to communicate to a system through the local console The remote console user must have dial in authority at the local console You need...

Page 57: ...ntrol tasks For example you can grant or refuse control of the console request control of the console and determine which user is in control of the console Both directly attached local consoles and LAN attached local consoles can have data on the display at the same time This is not associated with the console option Allow console recovery and console can be taken over by another console Regardles...

Page 58: ...ete an existing local console or remote console to meet your specific needs while using Operations Console You must be a member of the Administrators group to delete a console Connecting a local console directly attached to the system on page 47 Connecting a local console directly attached with remote access allowed enables remote consoles to connect to the system It also allows System i control t...

Page 59: ...tached with remote access allowed if it started in unattended mode v When SERVER appears in the Current User field Related tasks Connecting a local console directly attached to the system on page 47 Connecting a local console directly attached with remote access allowed enables remote consoles to connect to the system It also allows System i control to be automatically granted to the first request...

Page 60: ...onsole connects to a local console or a local console requests control v At a remote console after the remote console releases control to a local console To display the remote control panel from the Connection menu click Remote Control Panel Displaying the remote control panel in read only mode allows you to see the remote control panel when you do not have System i control Requesting and releasin...

Page 61: ...n the system and the PC e Confirm that the console appears If a remote console user has control and you do not want to force control back from the remote console send a message to the remote console asking the user to release control To request control at the local console after the remote console releases control and control did not return to the local console do the substeps in step 2 If a remot...

Page 62: ...portant It is not necessary to send a message before requesting control b From the Connection menu click Request Control If the local user grants control to the remote console the console appears If the local user refuses giving control to the remote console a window opens indicating the refusal Related tasks Connecting a remote console to a local console by modem on page 48 Connecting a remote co...

Page 63: ...n on page 44 You might need to delete an existing local console or remote console to meet your specific needs while using Operations Console You must be a member of the Administrators group to delete a console Related reference System i control on page 50 Control of your system means having an active console at a PC Sending a message to a controlling local console or remote console While using Ope...

Page 64: ...ol on page 50 Control of your system means having an active console at a PC Using the Properties page On the Properties page you can find information about the system associated with the connected configuration and make changes to an existing configuration If the partition number is showing then there is a configuration error associated with the configured connection The error may be wrong partiti...

Page 65: ... Warnings This option can be used to prevent many of the common dialog windows from showing For example the confirming a delete function dialog window will not be displayed if this is not selected v Prerequisite Warning The dialog presented during the configuration wizard concerning the requirements can be turned off using this option v Use Single Sign on This option provides the ability to share ...

Page 66: ...ment of multiple consoles If you have more than one workstation that is capable of being the console to the same system or partition there might be more than one way of using those devices as the console depending on your configuration and circumstances For example if the console type is set for Operations Console LAN which has a value of 3 a local console directly attached value of 2 will not be ...

Page 67: ... DST or SST to change the console type to a 2 for Operations Console direct The asynchronous communications adapter will not be active at this time since the console type is set for LAN so you would have to manually start the asynchronous card with a function 66 on the control panel or remote control panel Once the communications line is active you can disconnect the LAN connected console and crea...

Page 68: ...ver or debug an Operations Console problem depending on the problem the connectivity used for the current console the target console type and the current state of the system If you are unsure of any function or recovery action contact your service provider for assistance Related reference Using the console service functions 65 21 on page 92 Console service functions 65 21 are the emergency console...

Page 69: ... Takeover details Here is the additional information about the console takeover function v This function must be enabled if you want to take over the console or be protected from the loss of the console using the recovery function v The option Allow console recovery and console can be taken over by another console is enabled on the Select Console window in DST or SST v This function does not inclu...

Page 70: ...the method used to make the change Examples would be Using DST or SST to change the console type would allow the console to change only at the next IPL Following this action with a force DST function 21 using the control panel or LPAR menu may not always work either Changing tags in the LPAR environment will also require an IPL to cause a change of the console However using the console service fun...

Page 71: ...Ds repeat steps 4 and 5 This privilege will be used the next time the user ID signs on Note When a user signs on at a device capable of taking over the console the status of the Take over the console field is updated In order to reflect a change such as a user being granted the Take over console privilege the user would have to exit the Console Information Status window using F3 or F12 and sign on...

Page 72: ... delivered the data will be stored until later When a console is reconnected by an authorized user has the takeover console privilege from an eligible device the user might see fast window refreshes until all the stored data has been delivered Actually doing a disconnection and a reconnection is considered a recovery not a takeover The data present at LAN3 will not change after the takeover Curren...

Page 73: ... console error An example of this might be the loss of your network during normal operations The console type could be changed using one of the following methods v DST or SST menus delayed v Native macros delayed v Console Service Functions 65 21 Immediate Only the console service functions 65 21 method will automatically take down the old connection and activate all the resources for the new choi...

Page 74: ...ectronic customer support If you are currently using electronic customer support ECS and you need to directly attach your console you must move the electronic customer support cabling to another communications port before trying to install an Operations Console local console directly attached to the server Note This may require you to change the resource information used for electronic customer su...

Page 75: ... 10 Press F3 to return to the DST main menu The system is now configured for use by Operations Console local console on a network when an action is taken to search for a new console This could include an IPL the native macro or the console service function 65 21 Do NOT take an action to switch to the new console until you have satisfied any necessary PC configurations The system value QAUTOCFG mus...

Page 76: ...than the IOP tagged for use by Operations Console Operations Console cannot be used as an alternate console v To verify the console IOP for ECS perform the following steps Note If you use Operations Console as your console type you must also tag the same IOP used for the console as the IOP for ECS a Press F12 until you arrive at the Work with Partition Configuration window b Enter a 9 in front of ...

Page 77: ...figuration Related information Access service tools Configuring the PC to use the new console type when changing from a local console directly attached to a local console on a network To change from an Operations Console with local console directly attached to a local console on a network LAN you must configure the PC to use the new console type Follow these steps on the PC 1 Disconnect the curren...

Page 78: ...nections or you plan to use the local console on a network LAN as a backup console then you do not need to do the clear If either of these choices is true continue with step 12 6 Press F11 to configure the adapter 7 Press F6 to perform a clear 8 Press F7 to store the new values 9 If you are not currently using this resource for the console connection press F13 to deactivate the adapter You will be...

Page 79: ...t the IOP that will support your intended console do one of the following v If the adapter to be used for the intended console is under the same IOP as the previous console s adapter the console IOP is already correctly tagged Go to step 8 v If the adapter to be used for the intended console is under a different IOP than the currently configured console place a 1 in front of the IOP to select it a...

Page 80: ...n this deactivation will cause your console connection to close and you may not be able to restart it without an IPL 17 Press F12 twice to exit this window You should return to the Work with System Devices window If you re using SST this returns you to Work with Service Tools User IDs and Devices 18 Select Select Console 19 Select Operations console direct Important You must change the console typ...

Page 81: ...ration if you will not be using the cabled connection as a backup console do the following a Select the configuration name under iSeries Connection b From the Connection menu click Delete c Click Yes to confirm the deletion Related reference Setting up a local console directly attached to the server on page 31 You need to complete the unique setup prerequisites checklist based on the configuration...

Page 82: ...rence Operations Console hardware requirements on page 18 You need to meet the PC and System i hardware requirements for an Operations Console configuration Configuring the PC to use the new console type after changing from a twinaxial console to an Operations Console on page 76 To change from a twinaxial console to an Operations Console you must configure the PC to use the new console type Relate...

Page 83: ...e IOP is correctly tagged for ECS Go to step 9 d To tag the console IOP for ECS enter a 1 in front of the IOP to be tagged for ECS Note If you will be using Operation Console as the intended console you should now see both a and a associated with the console IOP 9 Press F3 to exit to the DST main menu 10 Select Work with DST environment 11 Select System Devices skip this step if using SST 12 Selec...

Page 84: ...workstation to manually delete the controller and device description associated with the old console device Related concepts PC preparations for Operations Console on page 30 After you complete the planning requirements and know which configuration and PC operating system you will be using you can create and go through a checklist for setting up Operations Console Changing from an Operations Conso...

Page 85: ...jor system options Then for Enable automatic configuration select Y Continue with Performing optional steps on the PC Related tasks Deallocating or moving the LAN adapter card from use by Operations Console on page 86 During a migration you might need to deallocate the LAN card from use by Operations Console You need to deallocate the LAN card if you are not planning on using an Operations Console...

Page 86: ...11 Select System Devices skip this step if using SST 12 Select Select Console 13 If you are currently using Operations Console local console on a network LAN select Operations Console local console on a network LAN and follow these steps to deallocate the network adapter Note If this resource will be used for the service tools server iSeries Navigator connections or you plan to use the local conso...

Page 87: ...Connection menu click Delete c Click Yes to confirm the deletion d Uninstall iSeries Access for Windows Turn off the PC and remove any hardware and cables that are no longer needed at this time It is recommended that you turn off the system before removing any cables or adapters from the system Note If the new console fails to work in i5 OS you may need to use another workstation to manually delet...

Page 88: ...system are out of synchronization Changing the service tools device ID password on the PC and system There is no advantage of changing the service tools device ID password unless the passwords on the PC and system are out of synchronization If this is the case see the Resynchronize the PC and service tools device ID password topic for how to make them both the same again Since this password is act...

Page 89: ...work configuration Related reference Considerations for changing the service tools device ID passwords on page 79 You need to review these considerations before you reset the service tools device ID password Resetting the service tools device ID password on the system To reset the service tools device ID password on the system you need to perform these steps Note To perform the following procedure...

Page 90: ...ervice tools device PC or other terminal or service tools device ID to sign on and you are using the QCONSOLE service tools device ID you need to use the control panel or the remote control panel to reset the service tools device ID password by following these steps 1 Place the system in Manual mode Systems without a keystick shows 01 B in the Function Data display Note Systems with a keystick sho...

Page 91: ...d then press the Enter button The system will respond with 65 00 After processing the function the system will respond with a D1008065 Repeat this step so that you have entered 7 function 65s You will have five minutes to complete this task When the seventh 65 is entered and if it is found that greater than five minutes have elapsed the reset will not be processed and the count will return to zero...

Page 92: ...e service tools device ID follow these steps 1 Select the connection name that you will be making the change for and then select Connection Properties 2 Select the Device ID tab 3 Click the Reset button and then click OK 4 The Access Password window opens Enter the current access password and then click OK Creating service tools device IDs on the system You will need to set up service tools device...

Page 93: ...sing a network connection One reason to add this function is when a system has been logically partitioned Although the primary partition can have a non networked console a remote control panel to a secondary partition might be desirable Regardless of which method you use to implement the configuration data the actual name and associated address used for the service host name depends on the network...

Page 94: ...ols DST or System Service Tools SST 2 Select Work with DST environment 3 Select System devices skip this step if using SST 4 Select Select Console 5 Select Operations Console LAN and press Enter This should show Verify Operations Console Adapters 6 Press F11 to configure 7 The service host name interface name field contains the name If you are creating a new service connection follow these steps a...

Page 95: ...pter will get reallocated on the next IPL Related tasks Changing the console from an Operations Console to a twinaxial console in a non partitioned or primary partitioned system on page 76 To change from an Operations Console to a twinaxial console follow these steps on the system using the existing console Related reference Planning considerations for your Operations Console installation or upgra...

Page 96: ...e configurations and therefore reset the service tools device IDs of those PCs as well To reset another service tools device ID repeat this step e Press F3 until the DST main menu appears 11 There are two methods for completing the necessary work in order to allow a new IP address or service host name interface name The first is using an IPL This is the recommended method because you will have mor...

Page 97: ...l IPL on page 90 You can start your system by performing a manual initial program load IPL Completing the PC changes After making changes to the network values for Operations Console LAN you need to complete the changes to the PC Related information Access service tools Completing the PC changes After making changes to the network values for Operations Console LAN you need to complete the changes ...

Page 98: ...y performing a manual initial program load IPL These instructions assume the system is powered off If the system is powered on use one of the various methods available to start the manual IPL To perform a manual IPL follow these steps 1 Look at the Function Data display on the control panel Systems with a keystick should show the mode as Manual and 01 B in the Function Data display Systems without...

Page 99: ...in 11 If you see System Reference Code SRC x6xx500x where the x can be any letter or number in the Function Data display then go to the Troubleshoot system reference code SRC data topic for details If you do not see System Reference Code SRC x6xx500x where the x can be any letter or number in the Function Data display then see the information about handling and reporting system problems in the Tro...

Page 100: ...e SRC Related reference Switching from one console type to another when a console is currently available on page 59 If you know in advance that you will need a different console type you can use the current console to make the changes necessary for use with a different console Using the console service functions 65 21 Console service functions 65 21 are the emergency console recovery functions Thi...

Page 101: ...the connection failure has been solved This option may be used in place of an IPL for some circumstances such as after a clear of the LAN adapter configuration v Dump Operations Console flight recorders to vlogs DD Note This option will not work if the system performs IPL in D mode This option will allow you to capture valuable debug information regarding a console connection failure for support p...

Page 102: ...s Console adapter DD Dump all console related flight recorder into a set of vlogs Notes 1 Selecting 02 will automatically activate the asynchronous communications adapter used for Operations Console direct attached 2 Selecting 03 may also require a function A3 to activate the LAN adapter in rare cases Also if a LAN connected console is connected the emulator may go to a Disconnected state If so yo...

Page 103: ...the system side debugging and analysis tool for collecting data for or managing console related work IBM supplied macros are advanced debug and analysis tools resident on the system These tools are intended to be used only with the direction of support personnel because inappropriate use of these tools can cause unpredictable problems with your system If you are not comfortable in the service tool...

Page 104: ...art a service tool 3 Select Display Alter Dump 4 Select Display Alter storage 5 Select Licensed Internal Code LIC data 6 Select Advanced analysis 7 Page down until you find the FLIGHTLOG option Place a 1 next to the option and press Enter You should be on the Specify Advanced Analysis Options display The command should show as FLIGHTLOG 8 Enter the option SEC UNLOCKDEVID in the Options field Note ...

Page 105: ...t you in troubleshooting the connections A status message indicates whether or not you have a connection problem It is displayed under Status in the Connection details area of the Operations Console window Do the following before you start troubleshooting the connection v Make sure that you have the latest Service pack for iSeries Access for Windows v If your local console allows remote consoles t...

Page 106: ...el unavailable This appears during an initial connection to a system It shows when there is a problem with the remote control panel cable and the connection and you choose not to retry the connection Connecting remote control panel This appears when the connection fails during the initial connection or stops working after the initial connection Possibly the remote control panel cable is disconnect...

Page 107: ... you have connection problems Troubleshooting connection problems When setting up your initial connection you might encounter problems connecting your Operations Console configuration Local console connection problems When setting up your local console you might encounter problems connecting Failure to connect is defined as problems resulting in the status not going to Connected and the emulator d...

Page 108: ... for your network you can use a crossover cable to directly connect the PC to the adapter temporarily This will isolate the PC and system from any potential problems on your network that might interfere with proper operations Note A crossover cable is a standard network cable but has the transmit and receive signal wires reversed This virtually allows each end to act as if a hub switch or router i...

Page 109: ...smit serial port chip Go to Advanced settings for the serial port and verify the check mark is checked to use a buffered UART Make sure the Receive Buffer setting is not set to the right most setting If that does not help and you suspect that the PC might not have the buffered UART you can try slowing down the connection between the PC and system Depending on the operating system you may have to c...

Page 110: ...s HyperTermiAccessoriesnal Note You want the executable and not one of the predefined connections or the folder 2 If it is not found use these instructions to install it a Place the installation media if CD ROM into the CD ROM drive and wait for the program to begin Then close the window If the program did not automatically start or the installation media is not a CD ROM continue with the next ste...

Page 111: ... take the system to a known state Note You may need to enter function 25 and 26 in order to have access to the upper functions 16 The system s control panel might display D1008065 after a while Also in the HyperTerminal window you might receive some data 17 At the system s control panel enter function 66 You might see D1008066 Also in the HyperTerminal window you might receive some data 18 Using u...

Page 112: ...window The names must be the same What TCP IP uses for a name is retrieved and placed there When the remote console is then configured make sure the name of the local console is the same It is possible to have two different system names on the same PC The name used for Operations Console is taken from the DNS entry in the TCP IP service Troubleshooting authentication problems When setting up your ...

Page 113: ...console types and console tasks These SRCs are associated with the operation of the control panel method to change the console type or accomplish a console task when the console or other workstation is not available Remember nn can be any alphanumeric designation v A6nn 500A You are displaying the current console type setting v A6nn 500B You did a second 65 21 so you are in edit mode v A6nn 500C Y...

Page 114: ...d contains the last 4 characters of the original failure type For example if word 16 contained 50010001 the twinaxial related SRC would be A6005001 and the console type is set to use a twinaxial console Refer to that SRC v If you are attempting to use Operations Console select the appropriate section in the table below as follows Local console on a network uses words 13 14 and 15 Local console dir...

Page 115: ...ct cable Note It is expected that a D mode IPL with a new load source direct access storage device DASD will show the console type value of 00 Examples of when this can occur might be that the copy of data from a failing DASD did not copy all data or you are installing a new logical partition Also there are times when the DASD is late reporting an the console type value was not retrieved in time I...

Page 116: ...e capable resources might be found plus the time it takes to walk the bus this activity has increased the amount of time spent at this IPL stepin the startup process Troubleshooting remote control panel and virtual control panel problems When setting up your initial connection you might encounter problems accessing your control panels Related reference Virtual control panel on page 26 A virtual co...

Page 117: ...rror message The current access password entered is not valid Please enter the valid access password This message typically means that the access password you entered in the Service Device Sign on window is not the same as the password you entered in the Specify Access Password window during the configuration wizard Make sure that the caps lock is not active and reenter the access password using t...

Page 118: ...rk data interfering with reconfiguration of network connectivity If you are configuring a local console on a network LAN and the user keeps getting an old IP address which might be wrong but you cannot get to it without changing the name you might need to edit the hosts file on the PC You might need to edit the file and remove the entry in question Notes 1 It is also suggested that you remove or a...

Page 119: ...llowing 1 Make certain that no other devices PCs that normally are eligible to become the console are connected 2 Perform the console service functions 65 21 using 65 21 21 This will cause the console to be lost temporarily The device should then become the console with a sign on screen appropriate to the system state assuming that it matches the current console type setting For example if the sys...

Page 120: ...112 System i Connecting to System i Operations Console ...

Page 121: ... country where such provisions are inconsistent with local law INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION AS IS WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS OR IMPLIED INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF NON INFRINGEMENT MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE Some states do not allow disclaimer of express or implied warranties in certain tr...

Page 122: ... the examples include the names of individuals companies brands and products All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental Each copy or any portion of these sample programs or any derivative work must include a copyright notice as follows your company name year Portions of this code are derived from IB...

Page 123: ...IBM Except as expressly granted in this permission no other permissions licenses or rights are granted either express or implied to the publications or any information data software or other intellectual property contained therein IBM reserves the right to withdraw the permissions granted herein whenever in its discretion the use of the publications is detrimental to its interest or as determined ...

Page 124: ...116 System i Connecting to System i Operations Console ...

Page 125: ......

Page 126: ... Printed in USA ...

Reviews: