Important Notes for users of Bsafe/Enterprise Security 5.5.2 or later
1. Before every system backup (SAVSYS) deactivate the Bsafe exit programs by running the command RMTOBJ/BSFINAC. No parameters are necessary and it may be run interactively or as part of a batch job. If you run the SAVSYS via a CL program, you can hardcode the command into it. This is not a one-time action but something that is required every time the SAVSYS system backup is performed.
2. After the system backup (SAVSYS) you must reactivate the Bsafe exit programs which were inactivated in the previous step, by running the command RMTOBJ/BSFACTV. Exit programs which were already deactivated will not be reactivated when using this command. No parameters are necessary and it may be run interactively or as part of batch job. If you run the SAVSYS via a CL program, you can hardcode the command into it. Alternatively, you can activate the exit programs manually.
3. Users of Bsafe/Enterprise Security version 5.5.2 must download and install PTF AP55236. If you downloaded the earlier PTF AP55232 you should replace it with AP55236.
4. Users of Bsafe/Enterprise Security version 5.6 must download and install the latest cumulative PTF available.
5. All product PTFs can be downloaded from the Customer Center on the Bsafe website.
If you use HA software, see also High Availability Software Requirements
If you are planning to move Bsafe/Enterprise Security from one System i box to another, see Moving Bsafe from one iSeries to Another
Contents of This Document
· Backup
· Restore
· Removal of all Exit Programs
Backup
Bsafe/Enterprise Security uses 3 libraries: RMTOBJ, RMTSMP and RMTFIL.
RMTOBJ and RMTSMP contain the objects required to run the product whereas RMTFIL contains both your definitions and the logged event information.
Therefore, RMTOBJ and RMTSMP should be backed up at least once after installation or upgrade.
Save these two libraries by executing the following command on the command line:
SAVLIB LIB(RMTOBJ RMTSMP) DEV(TAP01) OMITOBJ(RMTSMP/DB2WWW)
(or use a device other than TAP01, defined on your System i)
This should be repeated following the installation of any Bsafe product PTFs or upgrades. Additional backups of these libraries are not necessary.
RMTFIL, however, should be backup up regularly - we suggest the same backup strategy as for other critical data in your organization.
Certain objects in the Bsafe libraries are accessed when network activity, for example Telnet login or FTP, is taking place. We therefore suggest Specifying the SAVACT(*SYSDFN) keyword on the SAVLIB command. This allows the saving of objects in use by other jobs.
You should run or schedule the following commands to run before the daily backup:
Stop system alert collector
CALL PGM(RMTSMP/BSYSALRMNT) PARM('3')
Stop application alert collector
CALL PGM(RMTSMP/BSFIINSCL) PARM('ST')
You should run or schedule the following commands to run after the daily backup:
Start system alert collector
CALL PGM(RMTSMP/BSYSALRMNT) PARM('2')
Start application alert collector:
SBMJOB CMD(CALL PGM(RMTSMP/BSFICOLCL)) JOB(BSFICOL) JOBD(BSFISTRCOL) INLLIBL(*JOBD)
Restore
In the event of a contingency, the following actions will restore Bsafe/Enterprise Security to operation as at the point of the previous backup.
1. Restore libraries RMTOBJ, RMTSMP and RMTFIL as follows:
RSTLIB SAVLIB(RMTSMP) DEV(TAP01) MBROPT(*ALL) ALWOBJDIF(*ALL)
RSTLIB SAVLIB(RMTFIL) DEV(TAP01) MBROPT(*ALL) ALWOBJDIF(*ALL)
RSTLIB SAVLIB(RMTOBJ) DEV(TAP01) MBROPT(*ALL) ALWOBJDIF(*ALL)
(or use a device other than TAP01, defined on your System i)
2. Follow the Bsafe/Enterprise Security full installation instructions from the calling of the installation program:
CALL RMTOBJ/ SATKNAC,
thru to the end of the System i server installation.
Removal of all Exit Programs
In rare cases, you may have a need to deregister all the exit programs in your system and the Bsafe/Enterprise Security menu is not available to do this in the normal way.
For this purpose, two objects are included in the product installation library RMTOBJ - a command called BSFREMOVE and a program called BSFREMOVE1. It is recommended to copy these two objects to a general purpose library on your system following product installation, in case they are needed when library RMTOBJ is not available.
If these objects are not available when you need them, they can be downloaded from the Bsafe website.
To execute the deregistration, run the command from the command line as follows.
BSFREMOVE
Make sure the library containing the command and the program BSFREMOVE1 are in the library list.