Managing security for logical partitions

 

Most security related tasks you perform on a partitioned system are the same as on a system without logical partitions. However, when you create logical partitions, you work with more than one independent system. Therefore you have to perform the same tasks on each logical partition instead of just once on a system without logical partitions.

Here are some basic rules to remember when dealing with security on logical partitions:

• You must first configure the service tools server in order to access the iSeries™ Navigator logical partition functions. For more information on the service tools server, refer to Configuring the service tools server .

• Users performing logical partition operation or administration authority will require a Service Tool user profile in the primary partition.

• You add users to the system one logical partition at a time. You need to add your users to each logical partition you want them to access.

• Partitions cannot see or use memory and disk units of another logical partition.

• Partitions can only see their own hardware resources.

• The iSeries Navigator logical partition function can see all system hardware resources in the Configure Partitions window by selecting All hardware when used from the primary partition. When used from secondary partitions, only the resources assigned to the partition are viewable. In either partition, users require logical partition operation or administration authority to view information.

• The system control panel controls the primary partition. The remote control panel controls all partitions on the server. When any partition is set to secure, no actions can be performed from either the system panel, the remote control panel, or the Work with Partitions Status display from SST. To force DST from the system control panel or the remote control panel, change the mode to Manual.

  • You can use the remote control panel to power on and power off the partition.

  • You can use the remote control panel to set the secondary partition mode from secure to any other value.

  Once a secondary partition's mode is no longer secure, you can use the remote control panel to change the partition status.

For more information on security on your iSeries server, refer to iSeries Security-Reference and Planning and setting up system security for additional information on security.

 

Parent topic:

Managing logical partitions

Related concepts
System reference codes (SRCs) for logical partitions Enforcing security in secondary partitions

Related tasks
Logical partition authority