H06.25 Software Installation and Upgrade Guide

1. Before starting Safeguard, the system administrator must log on with the old super ID password.
The old password is the one used before the algorithm was changed to HMAC256.
2. Start Safeguard.
3. The system administrator must set a grace period for users to change their expired passwords.
4. Users are prompted to change their password when logging into the system if:
• Their user account existed before the installation of the H03 version of Safeguard, or
• They are new users and their password was encrypted in DES or not encrypted at all
before PASSWORD-ALGORITHM was changed to HMAC256.
When prompted, users should enter and re-enter a new password and log onto the system
as usual.
5. For new users that were added to the system after PASSWORD-ALGORITHM was changed
to HMAC256, the system administrator must reset their passwords to enable them to log onto
the system. Otherwise, the users cannot access the system after fallback.
Migration With Standard Security (Safeguard Not Installed)
Once the new version is installed, use the new PWCONFIG utility to modify the appropriate
attributes if you do not want to accept the new default values.
Fallback With Standard Security (Safeguard Not Installed)
In all cases, install the previous version of Standard Security.
If ENCRYPTPASSWORD is OFF or ALGORITHM is set to DES, no extra fallback steps are required.
If ALGORITHM is set to HMAC256:
• When users first change their password after HMAC256 is enabled, they must remember
their immediate previous password.
• After fallback, users must use their old password to log onto the system if:
Their user account existed before the installation of the H03 version of Standard Security,
or
◦
◦ They are new users whose password was encrypted in DES or not encrypted at all before
ALGORITHM was changed to HMAC256.
• If a user was added to the system after ALGORITHM was changed to HMAC256, they must
use a blank password to log onto the system.
H06.07
Code Profiling Utilities
The Code Profiling utilities, introduced in the H06.07 RVU, consist of two products: the Code Cover
Utility (codecov, T0746) and the Profile Merge Utility (profmrg, T0747). To use these tools,
applications must be compiled using the H06.07 or later versions of the TNS/E native compilers.
The SPR levels of these compilers are:
Minimum SPR LevelCompiler
T0356H01^AAITNS/E COBOL
T0549H01^AADTNS/E C/C++
T0561H01^AACTNS/E pTAL
T8164H01^ABENative c89 utility
H06.07 47