1/24/19

IBM i Access Client Solutions

Administration Secrets

Tim Rowe – [email protected]

Business Architect for Systems
Management

© 2018 IBM Corporation

Agenda ™

• IBM i Access Client Solutions Administration Secrets

– Meet IBM i Access Client Solutions
– Java Changes
– Deployment
– User Settings Location
– Auto Import Configurations
– Manual Settings
– Application Administration
– Summary
– Backup
• Migration
• Windows Application Package
• Connection Configuration
• Console Configuration
© 2018 IBM Corporation

1
 1/24/19

Deployment

© 2018 IBM Corporation

Product Availability ™

• IBM i Access Client Solutions is identified as LPP 5733-XJ1

– Not an IBM i installable LPP

• The GA version of the product is available to customers with valid

SWMA for IBM i 6.1, 7.1, 7.2 or 7.3 and is downloaded from the IBM i
Access Client Solutions or IBM Entitled Software Support (ESS)
websites
– Technote with example instructions
• http://www-01.ibm.com/support/docview.wss?uid=nas8N1010355

• Product distributed in zip files

– Platform Independent Core Java product
• From IBM i ACS website: IBMiAccess_v1r1.zip
• On ESS: IBM_i_Access_Client_Solutions_LCD#_*.zip
• Contains product jar and other©supporting
2018 IBM Corporation files

2
 1/24/19

Documentation ™

• Main User Interface provides an

easy to use launch point for
features

• Product contains Documentation

folder containing
"QuickStartGuide" and
"GettingStarted" documents

• "GettingStarted" can also be

launched from Main User
Interface

© 2018 IBM Corporation

Deployment ™

• IBM i Access Client Solutions is not installed - it is deployed

– There is no Windows Based Installer (setup.exe)

• Access Client Solutions Deployment

– Place client bundle in desired location
– Determine location for other product settings
• 5250 Session Files
• KeyBoard files
• Data Transfer Files

© 2018 IBM Corporation

3
 1/24/19

Deployment ™

• Client Bundle
– Contains the Java executable Jar, properties file, platform specific start
executables and javascript start samples, product documentation, and licensing
notices
– All that is required to be deployed is the Java executable Jar
– The rest is optional

• No JRE distributed
– IBM i Access Client Solutions does not deploy a specific JRE
– Relies on a Java 8 or JRE to be accessible on the client OS

© 2018 IBM Corporation

Deployment: Initial Questions ™

• When thinking about deployment, ask yourself where you want to put:

1. the product image? (jar file)

2. the user’s settings?

(system configurations,
5250 sessions, etc.)

© 2018 IBM Corporation

4
 1/24/19

Deployment: Options ™

USB Thumb Drive

Computer (local)

ACS Client User Config

Network Share Intranet (http:// URL)

© 2018 IBM Corporation

Deployment: Options ™

USB Thumb Drive

Computer (local)

Network Share Intranet (http:// URL)

© 2018 IBM Corporation

5
 1/24/19

Deployment: Options ™

USB Thumb Drive

Computer (local)

Network Share Intranet (http:// URL)

© 2018 IBM Corporation

Deployment: Options ™

USB Thumb Drive

Computer (local)

Network Share Intranet (http:// URL)

© 2018 IBM Corporation

6
 1/24/19

Deployment: Options ™

USB Thumb Drive

Computer (local)

Network Share Intranet (http:// URL)

© 2018 IBM Corporation

Deployment: Options ™

USB Thumb Drive

Computer (local)

Network Share Intranet (http:// URL)

© 2018 IBM Corporation

7
 1/24/19

Deployment: Options ™

USB Thumb Drive

Computer (local)

Oracle has deprecated Java webstart

capability in Java 9 and later

Network Share Intranet (http:// URL)

© 2018 IBM Corporation

Deployment ™

What you get in the package

© 2018 IBM Corporation

8
 1/24/19

Deployment ™

• Start Programs – Operating System specific launch executables

• The bitness of the

of the launcher
should match the
bitness of Java
installed on the
workstation. It is
recommended
that bitness also
match the client
OS bitness.

© 2018 IBM Corporation

Deployment ™

• Start Programs – Operating System specific launch executables

© 2018 IBM Corporation

9
 1/24/19

Deployment/Install Scripts ™

• IBM i Access Client Solutions provides Operating System specific Application

deployment scripts to make deployment easier for an user
• Javascript will copy the IBM i Access Client Solutions deployment to a specific
location that makes sense for the Operating System being used

© 2018 IBM Corporation

Deployment/Install Scripts ™

• Provided install_acs script on Windows will copy the IBM i Access Client Solutions
deployment to C:\Users\<WindowsUser>\IBM\ClientSolutions
• Provided install_acs_*_allusers script will copy the IBM i Access Client Solutions
deployment to C:\Users\Public\IBM\ClientSolutions
• Deployment will ask the user which functions they want to use, if it should create
shortcuts on the Desktop for the Main User Interface and 5250 Session Manager. It
will also create file associations for the .hod, .bchx, .dttx & .dtfx if they haven’t already
been created
• The bitness of the of the install script should match the bitness of Java installed on the
workstation. It is recommended that bitness also match the client OS bitness

© 2018 IBM Corporation

10
 1/24/19

Deployment/Install Scripts ™

• Deployment Prompts

© 2018 IBM Corporation

Deployment/Install Scripts – Administrator ™

• IBM i Access Client Solutions v1r1m4 Update 3 (October 2015) provided an update to
these deployment scripts for Windows to allow an Administrator to control some of the
deployment behavior and how the client behaves for the user

– An Administrator runs the script passing a parameter of /AdminConfig

• The Administrator is then presented with a series of questions about the
deployment, like if ACS should be ran locally or remotely, what functions will the
user have, and if desktop icons should be created
– The IBM i Access Client Solutions product files are placed in a central location
– Users run the deployment script and IBM i Access Client Solutions is deployed to
their Windows workstation

• More Details
– https://www.ibm.com/developerworks/ibmi/library/i-ibmi-access-client-solutions-
customization-trs/
– http://www-01.ibm.com/support/docview.wss?uid=nas8N1020967
© 2018 IBM Corporation

11
 1/24/19

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

© 2018 IBM Corporation

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

© 2018 IBM Corporation

12
 1/24/19

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

© 2018 IBM Corporation

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

© 2018 IBM Corporation

13
 1/24/19

Deployment/Install Scripts – Administrator ™

• Where should the product be run from?

• No => Copy the IBM i ACS deployment to the client workstation directory
appropriate for the install type, current user or all user
– To update the product, update the central location and re-run install script

• Yes => Run the product from the location the install script is being ran from
– May be a Network or Local location
– To update the product just update the deployment location via file copy

© 2018 IBM Corporation

Deployment/Install Scripts – Administrator ™

• Would be the Option used for a Network deployment.

– The install script would be ran from the pre-setup deployment image on a
network server
– IBM i ACS will not be copied down to the individual client workstation
• File Associations and Desktop icons will point to the network location
• Client’s path to the network location needs to be persistent
• Works the best with Unix/Linux/Posix type file systems hosting the network
share

• Can also be used to copy the IBM i ACS Image to a chosen location on each
workstation and then run the install script from there
– File Associations and Desktop icons will point to this location
31
© 2018 IBM Corporation

14
 1/24/19

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

© 2018 IBM Corporation

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

Following this will be the same set of questions about what functions to allow

© 2018 IBM Corporation

15
 1/24/19

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

© 2018 IBM Corporation

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

• User running the Deployment

• Deployment scripts supports a /Q option to be passed to the script to silently deploy

the client. Automatically accepting the End User License Agreement and not
showing this completion message.

© 2018 IBM Corporation

16
 1/24/19

Deployment/Install Scripts – Administrator ™

• Administrator Preparing Deployment

– /AdminConfig capability to customize the IBM i ACS deployment image is only
available with the Windows deployment scripts

– An IBM i ACS deployment image that has been customized via /AdminConfig on
Windows can be used to deploy on Mac and Linux and the functions that are allowed
or not will be followed on those platforms as well

• Custom Configuration Location

– User can all have a unique location for their configuration files
– com.ibm.iaccess.AcsBaseDirectory=Z:\SomePath\Developer_Configuration

© 2018 IBM Corporation

Mac Deployment/Install Scripts ™

• Provided install_acs Javascript on Mac will copy the IBM i Access Client Solutions
deployment to the Mac OS Applications folder.
– IBM i ACS on Mac requires Java JDK

© 2018 IBM Corporation

17
 1/24/19

Linux Deployment/Install Scripts ™

• Provided install_acs Javascript on Linux will copy the IBM i Access Client Solutions
deployment to the locations of
– /usr/share/applications/
– /opt/ibm/iAccessClientSolutions/
• The bitness of the of the install script should match the bitness of Java installed on the
workstation. It is recommended that bitness also match the client OS bitness.

© 2018 IBM Corporation

Uninstall – Start over ™

To remove.. Or Start over, run the Corresponding uninstall script

© 2018 IBM Corporation

18
 1/24/19

Other links for information… ™

• Config DevWorks Article

https://www.ibm.com/developerworks/ibmi/library/i-ibmi-access-client-solutions-
customization-trs/index.html

© 2018 IBM Corporation

Manual Settings

© 2018 IBM Corporation

19
 1/24/19

Limiting Function ™

• There are two approaches to limiting the functions that the user has
access to when running IBM i Access Client Solutions

– List of Excluded Components tied to the product deployment

– Runtime restrictions stored on the client workstation

© 2018 IBM Corporation

Excluding Components ™

• What the IBM i ACS install_acs* scripts use to determine functions available to the user
• Deployed via AcsConfig.properties file next to or within acsbundle.jar
– Property must be set:
• com.ibm.iaccess.ExcludeComps
– Set this property to a comma-separated list of function keywords

• Example function keywords which may be specified are:

– DATAXFER - Data Transfer to/from IBM I
– EMULATOR - 5250 Display/Print emulation and 5250 Session Manager
– KEYMAN - SSL certificate management
– OPCONSOLE - Operations console and Virtual Control Panel
– SPLF - Printer Output
– HWCONSOLE - Hardware management interface
– L1CPLUGIN - Navigator for i
© 2018 IBM Corporation

20
 1/24/19

Runtime Restrictions ™

• Can be set via the IBM i

Access Client Solutions
application when ran with
Administrator or Root level
authority.
• GUI interface from Edit ->
Preferences

© 2018 IBM Corporation

Runtime Restrictions ™

• Can be set via the IBM i Access Client Solutions application when ran
with Administrator or Root level authority.
• Command Line option to restrict, unrestrict, list, export/import

© 2018 IBM Corporation

21
 1/24/19

Creating File Associations ™

• Easy GUI option!

– Only supported on Windows
– Must launch via acslaunch*.exe Start Program or acsbundle.jar from default
product file structure

© 2018 IBM Corporation

Creating File Associations ™

• Can also be done by the command line

acslaunch_win-32.exe /plugin=fileassoc

© 2018 IBM Corporation

22
 1/24/19

Other AcsConfig.properties Settings ™

© 2018 IBM Corporation

Other /PLUGIN= functions ™

• GettingStarted Sections 9.1.# documents many functions that IBM i

ACS can do from a command prompt/file/script by passing the
acslaunch.exe the /PLUGIN= parameters

© 2018 IBM Corporation

23
 1/24/19

Application Administration

© 2018 IBM Corporation

Application Administration ™

• Administration tool that allows an IBM i OS System Admin to set some

of what functions of Navigator and IBM i Access are available based
on IBM i User Profile
– IBM Navigator for i -> System -> Application Administration

• Articles by Dawn May in her “i Can” Blog for IBM Systems Magazine
– Application Administration with Navigator for i
• http://www.ibmsystemsmag.com/Blogs/i-Can/February-2017/Application-Administration-with-Navigator-for-i/

– Application Administration with Access Client Solutions

• http://www.ibmsystemsmag.com/Blogs/i-Can/February-2017/Application-Administration-with-Access-Client-Solu/

© 2018 IBM Corporation

24
 1/24/19

Application Administration ™

© 2018 IBM Corporation

Application Administration ™

© 2018 IBM Corporation

25
 1/24/19

Application Administration ™

© 2018 IBM Corporation

Agenda ™

• IBM i Access Client Solutions Administration Secrets

– Meet IBM i Access Client Solutions
– Java Changes
– Deployment
– User Settings Location
– Auto Import Configurations
– Manual Settings
– Application Administration
– Summary
– Backup
• Migration
• Windows Application Package
• Connection Configuration
• Console Configuration
© 2018 IBM Corporation

26
 1/24/19

User Settings Location

© 2018 IBM Corporation

AcsConfig.properties ™

• IBM i Access Client Solutions uses a product configuration file,

named “AcsConfig.properties”

• AcsConfig.properties is simply a list of configuration properties and

values.

• These properties may also be specified on the command line

-D<property>=<value>

• One such property is

com.ibm.iaccess.AcsBaseDirectory

© 2018 IBM Corporation

27
 1/24/19

AcsBaseDirectory ™

• The value of this property determines:

– The location of user settings
– The location of service logs/dumps/etc
– The default directory used by the 5250 session manager (this can be configured
separately if desired)

• The value is expected, therefore, to be a directory name on a filesystem. It can be

– Left blank (which leaves behavior at the default location)
– The path of a hardcoded directory name (fully-qualified is highly recommended)
– A constructed path using special keywords (next slide)
Tip: use forward slashes
(‘/’), not backslashes (‘\’)

© 2018 IBM Corporation

AcsBaseDirectory: Special Keywords ™

• {USER} : would be the current username (valid anywhere in the path)

• {PRODUCTDIR} : would mean the product’s location in the file system
(valid only at the beginning)
• {TEMPDIR} : would be the temporary directory (valid only at the
beginning)
• {ROOT} : the root of the file system where the product is located (valid
only at the beginning)
• {CWD} : the current working directory (valid only at the beginning)
• {HOME} : the user's home directory (valid only at the beginning)
• {DEFAULT} : the default place the product normally puts its settings
(valid only at the beginning)

© 2018 IBM Corporation

28
 1/24/19

Verifying Location ™

© 2018 IBM Corporation

Cheat notes… Common Configurations ™

Default (“My Documents” on Windows, home dir otherwise)

com.ibm.iaccess.AcsBaseDirectory=

Network share
com.ibm.iaccess.AcsBaseDirectory=
com.ibm.iaccess.AcsBaseDirectory={PRODUCTDIR}/config_directory/{USER}

Thumb drive!
com.ibm.iaccess.AcsBaseDirectory={PRODUCTDIR}/config_directory

© 2018 IBM Corporation

29
 1/24/19

Auto Import Configurations

© 2018 IBM Corporation

Export/Import ™

• IBM i Access Client Solutions has a mechanism for saving (exporting) and restoring
(importing) a user’s settings and preferences
• When a configuration is exported, all information is stored in an export file
• Stored data includes emulator session profiles

© 2018 IBM Corporation

30
 1/24/19

Export/Import ™

• An export file can therefore be used to

– Back up settings
– migrate settings from one PC to another
– Propagate settings to multiple PC’s

• Importing an export file will only

add new configuration items
– It will not delete or change
existing configuration items

© 2018 IBM Corporation

Auto Import ™

• So what is “autoimport”?
– Allows an export file to be automatically imported when the product starts up
– Useful for an administrator to automatically roll out settings

• Deployed via AcsConfig.properties

– Two properties must be set:
• com.ibm.iaccess.autoimport
• com.ibm.iaccess.autoimport.version

© 2018 IBM Corporation

31
 1/24/19

Auto Import ™

• com.ibm.iaccess.autoimport
– Can contain special config keywords

• com.ibm.iaccess.autoimport.version
– Typically set to a numeric value
– Dictates whether the file (specified by com.ibm.iaccess.autoimport) is imported. The
import happens if this value differs from the last file imported via the “autoimport”
feature.
– A value of ‘*’ can be used for the version and the import will be performed on every
launch. Could lead to consistently slower launch times.

© 2018 IBM Corporation

Questions

© 2018 IBM Corporation

32
 1/24/19

Backup Information

© 2018 IBM Corporation 68

Migration

© 2018 IBM Corporation

33
 1/24/19

Migration ™

• IBM i Access Client Solutions provide several tools to assist with migrating from the
IBM i Access for Windows client environment to IBM i Access Client Solutions

– 5250 Migration Tools

• Workstation file and keyboard map migration
• Macro migration
• Legacy File Associations

– Data Transfer
• Saved Data Transfer migration

– System Connections

© 2018 IBM Corporation

5250 Migration ™

Migration – 5250 session profiles

© 2018 IBM Corporation

34
 1/24/19

5250 Migration ™

Migration – 5250 session profiles

© 2018 IBM Corporation

5250 Migration ™

Migration – 5250 session profiles

• Key mappings are also converted. A

converted .kmp file will be saved in the
same location that the new .hod file is
created and will be referenced by that .hod
file

© 2018 IBM Corporation

35
 1/24/19

5250 Migration ™

What about my old macros?

• File->Convert Macro
• VBScript capabilities NOT converted

© 2018 IBM Corporation

5250 Migration ™

• Create File Association for IBM i Access for Windows saved .ws or .bch file to be opened
with IBM i Access Client Solutions

© 2018 IBM Corporation

36
 1/24/19

5250 Migration ™

• Create File Association for IBM i Access for Windows saved .ws or .bch file to be opened with IBM i Access Client
Solutions
• Can be set during IBM i ACS deployment script on Windows

© 2018 IBM Corporation

Data Transfer Migration ™

© 2018 IBM Corporation

37
 1/24/19

Data Transfer Migration ™

© 2018 IBM Corporation

Data Transfer Migration ™

• Migrates saved .dtt and .dtf files to IBM i Access Client Solutions .dttx and .dtfx files

© 2018 IBM Corporation

38
 1/24/19

Data Transfer Migration ™

• Results of Migration
– Green check indicates success
– Red x indicates failure and there are more details

© 2018 IBM Corporation

Migration – System Connections ™

• IBM i Access Client Solutions Copy Connections can be used to move System
Configurations

© 2018 IBM Corporation

39
 1/24/19

ACS Insert from Examples for Run SQL Scripts ™

1) Add the following comments to your Run SQL Script

-- category: Demo Scripts
-- description: Demonstrate Guardium Database Activity Monitor
2) Save the script to the following path
C:\Users\<your-user>\Documents\IBM\iAccessClient\RunSQLScripts\Examples
3) Find your script with Search or via the Examples pane

© 2018 IBM Corporation

Windows Application Package

© 2018 IBM Corporation 83

40
 1/24/19

Windows Application Package ™

• Base Package (Platform Independent)

• 5250 display and printer emulator
• Data transfer
• Printer Output
• Console consolidation
• Other misc features

• Windows Application Package

• Windows Installer MSI Package
• Data drivers (ODBC, OLEDB, .Net)
• Printer drivers

© 2018 IBM Corporation

Create or Edit a Connection ™

Create

Edit

© 2018 IBM Corporation

41
 1/24/19

Create or Edit a Connection ™

• Two non-Navigator ways to do this:

1. Use command line tool

2. Use IBM i ACS Base Package

© 2018 IBM Corporation

Create or Edit a Connection ™

• Command-line tool: cwbcfg.exe

© 2018 IBM Corporation

42
 1/24/19

Create or Edit a Connection ™

• Create a connection for "common2.idevcloud.com that uses Windows logon and ssl

© 2018 IBM Corporation

Create or Edit a Connection ™

• Edit a connection for "common2.idevcloud.com that uses Windows logon and ssl
(the key here is /r)

© 2018 IBM Corporation

43
 1/24/19

Create or Edit a Connection ™

If you have ACS Base Package handy……

1) Create/edit a system configuration ("connection") in core ACS

Create/Edit

© 2018 IBM Corporation

Migration – System Connections ™

• IBM i Access Client Solutions Copy Connections can be used to move System Configurations

© 2018 IBM Corporation

44
 1/24/19

Copy Connections note ™

• What about "Use Windows user name and password, no prompting"?

• ACS has "Use shared credentials." This maps to the "Use Windows user name and
password" option in Windows

© 2018 IBM Corporation

Trust an SSL certificate ™

Edit

© 2018 IBM Corporation

45
 1/24/19

Trust an SSL certificate ™

© 2018 IBM Corporation

• Two non-Navigator ways to do this:

1. cwbcossl.exe utility
2. Use IBM i ACS Base Package

© 2018 IBM Corporation

46
 1/24/19

Trust an SSL certificate ™

• cwbcossl utility

© 2018 IBM Corporation

Trust an SSL certificate ™

© 2018 IBM Corporation

47
 1/24/19

Trust an SSL certificate ™

© 2018 IBM Corporation

Trust an SSL certificate ™

Default password:
ca400
© 2018 IBM Corporation

48
 1/24/19

Trust an SSL certificate ™

If you have IBM I ACS Base Package handy……

1) Go to create/edit a system configuration ("connection") in ACS Base Package

© 2018 IBM Corporation

Trust an SSL certificate ™

2) Enable SSL and verify connection

© 2018 IBM Corporation

49
 1/24/19

Trust an SSL certificate ™

3) Accept the certificate

© 2018 IBM Corporation

Trust an SSL certificate ™

3) Accept the certificate

© 2018 IBM Corporation

50
 1/24/19

Trust an SSL certificate ™

4) "Tools->Key Management"

© 2018 IBM Corporation

Trust an SSL certificate ™

5) Select the certificate and click the "Push to Windows" button

© 2018 IBM Corporation

51
 1/24/19

Trust an SSL certificate ™

5) Select the certificate and click the "Push to Windows" button

Default password:
ca400
© 2018 IBM Corporation

Trust an SSL certificate ™

5) Select the certificate and click the "Push to Windows" button

© 2018 IBM Corporation

52
 1/24/19

Incoming Remote Command ™

• IBM i OS CL command - RUNRMTCMD

– Send workstation command and workstation credentials to REXEC daemon running
on the workstation TCP/IP Port 512

– IBM i Access for Windows Incoming Remote Command service was such a REXEC
daemon
– Windows Server OS also provided an REXEC daemon
– REXEC spec has significant issues, key being that it does not provide for SSL
communications so credentials and command are passed in clear text
– Microsoft last provided their REXEC daemon in the
Windows Server 2003 SDK, and documents that it is deprecated and not
guaranteed to work in newer Windows OS environments
– IBM does not include it’s Incoming Remote Command with
IBM i Access Client Solutions Windows Application Package
© 2018 IBM Corporation

Incoming Remote Command - Options ™

• IBM i OS CL commands - STRPCO and STRPCCMD

– Also sends workstation command
– Uses active 5250 Telnet connection from compatible 5250 emulator

– If 5250 Telnet connection is SSL Enabled, command is sent encrypted

– No credentials provided or required as 5250 Telnet connection is already
authenticated and runs under account that launched 5250 emulator

– IBM i OS CL commands STRPCO and STRPCCMD must be ran from the

interactive job that was started from the 5250 emulator on the workstation that the
command will be ran on

– Supported by the IBM i Access Client Solutions Base Package

5250 emulator

© 2018 IBM Corporation

53
 1/24/19

Incoming Remote Command - Options ™

• IBM i Access For Windows r7.1 is still supported on Windows Server 2012 R2 and
Windows 8.1 and earlier Windows OS versions

• Still includes now deprecated Incoming Remote Command REXEC daemon

• Install and use the Microsoft Windows Server 2003 SDK provided REXEC daemon

• OpenSSH also possible

– Run OpenSSH daemon on PC
– "Desktop" not available

© 2018 IBM Corporation

Connection Configuration

© 2018 IBM Corporation

54
 1/24/19

System Configurations ™

• Use the System Configurations panel to store connection information on the IBM i
Systems that will be used

© 2018 IBM Corporation

System Configurations ™

• Create, Edit or Delete connection information for IBM i Systems

– System Name: What is entered by the user to connect to this host
– IP Address: What the PC’s DNS environment last returned when connecting to
the System Name
– Service Host Name: The System’s Console host name or IP address as
configured
– Description

© 2018 IBM Corporation

55
 1/24/19

System Configurations ™

• OK - Saves the information

entered and closes the
panel

• Save/New - Saves the

information entered and
clears the panel

• Cancel - Closes the panel

without saving anything

© 2018 IBM Corporation

System Configurations - SSL ™

• Use SSL specifies that the connection will be secured

• If the Certificate Authority negotiated is not trusted, the user will be prompted to add to
trusted list
• There still is a Key Management utility if© 2018
needed
IBM Corporation

56
 1/24/19

System Configurations - Authentication ™

• Use default user name to prompt once for each

system
– Caches credentials for duration of desktop session

• Prompt for user name and password every time

• Use Shared credentials

– Only the first time the user is prompted to provide
User name & Password
– These credentials will be cached for use by all
System configurations set to this option

• Use Kerberos authentication; do not prompt

– No further IBM i Access Client Solutions
configuration needed

© 2018 IBM Corporation

System Configurations – Using a Custom/Alias Name ™

Use your own custom name

Performance
• IP Address Lookup Frequency
• Never – Specify IP Address
• IP Address
• Use the IP Address vs the System
name

© 2018 IBM Corporation

57
 1/24/19

Console Configuration

© 2018 IBM Corporation

Console ™

• 5250 Console – Opens a interactive console to the current System

• Virtual Control Panel – Opens a Virtual Control Panel

© 2018 IBM Corporation

58
 1/24/19

5250 Console ™

• 5250 HMC Console

© 2018 IBM Corporation

Virtual Control Panel ™

• Virtual Control Panel

• Service Functions
– Providing options for service
commands instead of providing
the up and down arrows and enter

• Supported with
LAN and HMC console types

© 2018 IBM Corporation

59
 1/24/19

Console Configuration – LAN Console ™

• Service host name – Network Host

Name or IP address of the Service
Tools LAN Adapter port on the IBM i
Operating System

© 2018 IBM Corporation

Console Configuration – HMC Console ™

• Host name / IP address of the HMC managing this IBM i OS System

• Use SSL for connection – Between client and HMC – Requires HMC setup

• Advanced
– Optional configuration
pointing to specific System
and Partition

© 2018 IBM Corporation

60
 1/24/19

Console Configuration – HMC Console ™

• Can be done directly from 5250 Session Manager

© 2018 IBM Corporation

Shortcuts to other interfaces ™

Create quick links to other management

interfaces
- Web Admin GUI
- iAccess Mobile
- HMC
- Storage server

© 2018 IBM Corporation

61
 1/24/19

Questions

© 2018 IBM Corporation

Power Systems Social Media ™

IBM Power Systems Official Channels:

https://facebook.com/IBMPowerSystems

https://twitter.com/IBMPowerSystems

https://www.linkedin.com/company/ibm-power-systems

http://www.youtube.com/c/ibmpowersystems

https://www.ibm.com/blogs/systems/topics/servers/power-
systems/
© 2018 IBM Corporation

62
 1/24/19

More to Follow: ™

Blogs to Follow More to Follow Hashtags To Use

@IBMSystems #PowerSystems
@COMMONug #IBMi
• IBM Systems Magazine You and I (Steve Will) @IBMChampions #IBMAIX
• IBM Systems Magazine i-Can (Dawn May) @IBMSystemsISVs #POWER8
• IBM Systems Magazine: iDevelop (Jon Paris and @LinuxIBMMag #LinuxonPower
@OpenPOWERorg
Susan Gantner) @AIXMag #OpenPOWER
• IBM Systems Magazine: iTalk with Tuohy @IBMiMag #HANAonPower
• IBM DB2 for i (Mike Cain) @SAPonIBMi #ITinfrastructure
• IBM DB2 Web Query for i (Doug Mack) @SiDforIBMi #OpenSource
@IBMAIXeSupp #HybridCloud
@IBMAIXdoc #BigData

128
© 2018 IBM Corporation

63