Managing service tools user ID

This topic describes how to manage service tool user IDs using DST, SST, and iSeries™ Navigator.

Service tools are used to configure, manage, and service your server. Service tools can be accessed from dedicated service tools (DST) or system service tools (SST). Service tools user IDs are required to access DST, SST, and to use iSeries Navigator functions for logical partition (LPAR) management and disk unit management. DST is available when the Licensed Internal Code has been started, even if i5/OS^® has not been loaded. SST is available from i5/OS. The following table outlines the basic differences between DST and SST.

Characteristic	DST	SST
How to access	Physical access through console during a manual IPL or by selecting option `21` on the control panel.	Access through interactive job with the ability to sign on with QSRV or the following authorizations: Authorized to STRSST (Start SST) CL command. Service special authority (SERVICE) or all object special authority (ALLOBJ). Functional privilege to use SST.
When available	Available even when the server has limited capabilities. i5/OS is not required to access DST.	Available when i5/OS has been started. i5/OS is required to access SST.
How to authenticate	Requires service tools user ID and password.	Requires service tools user ID and password.

Characteristic

DST

SST

How to access

Physical access through console during a manual IPL or by selecting option 21 on the control panel.

Access through interactive job with the ability to sign on with QSRV or the following authorizations:

Authorized to STRSST (Start SST) CL command.
Service special authority (*SERVICE) or all object special authority (*ALLOBJ).
Functional privilege to use SST.

When available

Available even when the server has limited capabilities. i5/OS is not required to access DST.

Available when i5/OS has been started. i5/OS is required to access SST.

How to authenticate

Requires service tools user ID and password.

See the iSeries Information Center > Security > Service tools for information about using the Service tools to perform the following tasks:

Access service tools with DST
Access service tools with SST
Access service tools with iSeries Navigator
Create a service tools user ID using DST
Change the functional privileges for a service tools user ID using DST
Change the description for a service tools user ID using DST
Display a service tools user ID using DST
Enable a service tools user using DST
Disable a service tools user using DST
Delete a service tools user ID using DST
Change service tools user IDs and passwords using SST or DST
Change your service tools user IDs and password using STRSST or QSYCHGDS API
Reset or recover the QSECOFR user profile password
Reset the QSECOFR service tools user ID and password
Save and restore service tools security data
Configure the service tools server for DST
Configure the service tools server for i5/OS
Monitor service function use through DST
Monitor service tools use through i5/OS security audit log

Parent topic:

Managing security