Uninstalling Bsafe/Enterprise Security
(updated 04/09/2006)
Planning for the Uninstall
The restarting of TCP/IP is an essential step in the uninstall process described below and so it is recommended to plan the uninstall prior to system IPL. If you choose to restart TCP/IP without IPL, remember that terminating TCP/IP results in stopping most networked activity including 5250 emulation.
Deactivation and Uninstalling
1. If you have used the Field Masking module, click on the Field Masking icon. Any files defined under the Select Files for Masking heading which have a status of Active must be made inactive. Click on active file followed by clicking on End Masking for each.
2. For version 4.1 or later. Go to Central Audit and press the Central Audit Policy icon. Click on the File Audit – Read Operations tab. If any jobs are show with a Status of "Active", they are to be ended by clicking on End Monitoring for all of the Active jobs.
3. For version 4.1 or later. Execute the following command form the iSeries command prompt:
ENDJOB JOB(BSFFMTRG) OPTION(*IMMED)
4. The product must be deactivated. Proceed as follows:
5. Sign on to the iSeries with user BSAFE. On the Bsafe/Enterprise Security screen select the SYSTEM menu, then select the Bsafe/Enterprise Security Activation option. Insert N in every field and press F16 to apply. This will inactivate the Bsafe/Enterprise Security system and it will no longer protect your iSeries.

6. Go to the System IDS Collector. Select and run option, Uninstall Alert Collector.

7. Go to the IDS Collector. Select and run option, Uninstall Alert Collector.

8. Press F3 in order to exit from Bsafe/Enterprise Security.
9. At the iSeries command line type:
WRKREGINF
10. Find the following exit points by paging through the list. If there are more than one occurrence of these then check each one.
QIBM_QSY_CHG_PROFILE
QIBM_ QSY_CRT_ PROFILE
QIBM_QSY_DLT_PROFILE
QIBM_QSY_RST_PROFILE
Enter an ‘8’ by each exit item to display its exit point programs, then remove each exit point program using option ‘4’.
11. If you don’t want system auditing to continue then do the following:
a. Run the Bsafe/Enterprise Security GUI. Select Audit Policy and clear the "Active Audit Control" check-box. This action will stop system audit data collection.
b. If the System Auditing Journal did not exist at installation time, and a new system journal and receiver were created in library RMTFIL, delete these objects by executing the following 2 commands from the iSeries command line:
DLTJRN JRN(QSYS/QAUDJRN)
DLTJRNRCV JRNRCV(RMTFIL/AUD*) DLTOPT(*IGNINQMSG)
12. Execute the commands:
ENDTCPSVR SERVER(*HTTP) HTTPSVR(BSAFEINST)
ENDTCPSVR SERVER(*HTTP) HTTPSVR(BSFAPCH)
13. The following objects may or may not exist on your system, depending on which functions you have used. Remove any job queues and their subsystem entries which exist, by executing the following commands:
CLRJOBQ JOBQ(RMTOBJ/BSFLOGJQ)
RMVJOBQE SBSD(QSYSWRK) JOBQ(RMTOBJ/BSFLOGJQ)
CLRJOBQ JOBQ(RMTSMP/BSFIRCVJQ)
RMVJOBQE SBSD(QSYSWRK) JOBQ(RMTSMP/BSFIRCVJQ)
CLRJOBQ JOBQ(RMTSMP/BSFICOLJQ)
RMVJOBQE SBSD(QSYSWRK) JOBQ(RMTSMP/BSFICOLJQ)
CLRJOBQ JOBQ(RMTSMP/BSFISNDJQ)
RMVJOBQE SBSD(QSYSWRK) JOBQ(RMTSMP/BSFISNDJQ)
CLRJOBQ JOBQ(RMTFIL/BSFJOBQON)
RMVJOBQE SBSD(QSYSWRK) JOBQ(RMTFIL/BSFJOBQON)
14. If you planned to perform an IPL, do so now. If not, restart TCP/IP. This must be done before removing the Bsafe/Enterprise Security libraries.
15. Remove the following libraries (after IPL or restarting TCP/IP):
§ RMTDBCS (this library will only exist if you have been using the DBCS version of the product)
16. Check to see if there are any scheduled entries in the iSeries scheduler. If any Bsafe reports or the Bsafe log purge have been placed on the scheduler, these should be remove manually. Firstly, display the jobs currently placed on the scheduler by entering the following command:
WRKJOBSCDE SCDBY(BSAFE)
Then, enter ‘4’ (remove) for all entries displayed and press Enter.
Uninstalling the Product on the PC Client
17. Exit all active Windows programs.
18. Stop the alert collector. To do this right-click the Bsafe/Enterprise Security alert collect icon in the system tray and select the option Stop Alert Collector.
19. Uninstall the Bsafe/Enterprise Security GUI client by opening the Windows control panel, selecting ‘Add/Remove programs’, then selecting ‘Remove’ for Bsafe/Enterprise Security.
20. Upon receiving a message that all the components have been removed, press OK.
* * * Bsafe/Enterprise Security has now been removed from your system * * *