5.11 Securing the System

1. If you are performing a Distributing Staging Area, or Modify Remote System task, log on from the remote system console.

   If you are performing a Manage Patch, Add-on, Update, or Re-Install task, log on from the local system console.

     :HELLO MANAGER.SYS,PUB;HIPRI
     :SPOOLER LP;START
     :STREAMS streams_device
   

   A common streams_device value is 10. An LP device must be configured in SYSGEN. Already spooled and streamed messages might display.

2. If you are performing an Add-on, Update, or Remote CD-ROM task, go to Step 3.

   If you are performing a Manage Patch, Staging Area, or Add-on tape task, go to Step 4.

CD-ROM Tasks

3. Remove and reinsert CSLT tape.

   1. If you are on the remote system, insert the CSLT tape for the first time.

      If you are using DDS tape and you are modifying the system on which you created the CSLT, be sure to remove the CSLT tape from the tape drive before performing the modification. Reinsert the CSLT tape.

   2. Go to Step 4.

4. If you are performing an Update task, go to Step 5.

   If you are performing an Add-on, Manage Patch, Staging Area, or Remote system task, go to Step 6.

Update Tasks

5. Run HP Predictive Support and turn it off.

   If you are using the HP Predictive Support software as part of your Hewlett-Packard hardware support contract, ensure that an HP Predictive Support run completes successfully.

   1. Issue the HP Predictive Support command:

        :RUN PSCONFIG.PRED.SYS

      This run of HP Predictive Support may include a transfer of files to the Hewlett-Packard Response Center. If a transfer is needed, be sure it completes because the system update overwrites the information in the file PSDCFILE.PRED.SYS.

   2. Select item 4, Configuration, from the Main menu.

   3. Select item 5, Schedule, from the Configuration Options menu.

   4. Select item 1, Schedule (on/off), from the Schedule menu.

   5. Set the preference, at the prompt, type OFF:

        Type schedule preference (on/off) or // to cancel: __

   6. Exit the program, at the prompt, type EXIT:

        Type an item number, an item key, or a command: __

   7. Save the values, at the prompt, type YES:

        Do you wish to save these values (Y/N)? __

   8. Go to Step 6.

6. Lower session and job limits.

     :LIMIT 0,0

7. Warn, then log users off.

     :WARN@ PLEASE LOG OFF! SYSTEM UPDATE ABOUT TO BEGIN

   Wait approximately five minutes, make sure users have saved their work and logged off, then abort job or sessions still executing. Use the SHOWJOB command to determine session and job numbers. Then, for each job and session still executing (except yours), type:

     :ABORTJOB #Jnn
     :ABORTJOB #Snnn
   

   where:

   Jnn

   the ID number for each job to be aborted.

   Snnn

   the ID number for each session to be aborted.

8. Deactivate NS 3000/iX, if applicable.

     :NSCONTROL STOP
     :NSCONTROL ABORT
     :NETCONTROL STOP
   

9. Terminate logging processes.

   1. Enter the following command to determine if user logging processes are running:

        :SHOWLOGSTATUS

   2. If logging processes are running on your system, a message similar to the following will be displayed:

        LOGID   CHANGE AUTO USERS STATE CUR REC MAX REC % USED CUR FSET
        SHPLOGID  YES   YES  1    ACTIVE  120   10016    1%     1
        ORBLOGID  YES   YES  9    ACTIVE  3812  10016   38%     1
      

      If no logging processes are running, go to Step 10.

   3. Terminate logging processes as shown below.

        :LOG logid,STOP

      where logid — the ID number for each logging process to be stopped.

      Record the names of the logging processes, if you want to restart them later. Record the names on your checklist.

10. Prepare additional manually installed products.

    1. If you have ALLBASE/SQL already installed on your system, issue starts for each DBEnvironment before you back up the system. Refer to the ALLBASE/SQL Database Administration Guide for more information. Briefly, you need to:

       • Identify all your ALLBASE/SQL databases, type:

           :STORE @.@.@;;FCRANGE=-491/-491;SHOW

       • Run ISQL.PUB.SYS and issue a STARTDBE command. This ensures that the DBEnvironment is logically consistent in the event that it has not been accessed since a system failure occurred.

       • Run SQLUTIL.PUB.SYS and issue the STORE command to backup each DBEnvironment.

       • Log files are not stored using this command. In addition, you should use the SHOWDBE command to ensure that all parameters are OK.

    2. If you have ALLBASE/4GL already on your system, unload all existing ALLBASE/4GL applications. For information on unloading ALLBASE/4GL applications, refer to the HP ALLBASE/4GL Developer Administration Manual.

    3. If you are installing AutoRestart/iX for the first time, install AutoRestart/iX before you run AUTOINST. Refer to the AutoRestart/iX Reference Manual for installation instructions.

11. If you have a current full backup, you may proceed to Step 13.

    If you do not already have a current full backup, proceed to Step 12.

Backup the System

12. Backup the system using STORE with the DIRECTORY parameter.

    1. Specify a class name.

         :FILE SYSGTAPE;DEV=dev_number

       where device_number is the DAT class name or LDEV number of the tape device. Specify this value if you are using a DAT or any device that has a class name other than TAPE.

    2. Mount a write-enabled tape and create an SLT.

         :SYSGEN
         sysgen>TAPE
         sysgen>EXIT
       

    3. If you are prompted for lockwords on system files, record the names of each system file as prompted, then type the lockword and continue with the backup. You will need to restore these lockwords later in "Setting Passwords and Lockwords." Record the names on your checklist.

    4. Dismount the tape, label as SLT with date, time and system version.

    5. Mount another blank tape and backup your user files.

         :FILE T;DEV=TAPE
         :STORE @.@.SYS,@.@.@-@.@.SYS;*T;DIRECTORY;SHOW
       

       or

         :STORE /SYS/, / - /SYS/;*T;DIRECTORY;SHOW; &
           ONVS=volume_set_name1, volume_set_name2, ...
       

       where volume_set_name is the name for each user volume set you want to backup.

    6. Dismount the tape, label as backup with date, time and system version.

13. Purge spool files.

      :SPOOLF @;DELETE

14. Purge staging groups if they exist.

      :PURGEGROUP UNL
      :PURGEGROUP USL
      :PURGEGROUP UXL
    

    Verify each purge, type Y, at the prompt.

    Do not purge the group install.sys or the file supacct.pub.sys, they are needed for future patch and add-on processes.

15. If you are performing an Update, go to Step 16.

    If you are performing an Add-on, Manage Patch, Staging Area, or Remote system task, go to Step 17.

Update Tasks

16. Purge specified files and groups, if you are moving from one MPE/iX version to another.

    1. Purge the PSIDNLD.DIAG.SYS file.

         :PURGE PSIDNLD.DIAG.SYS

       This file may have been purged already. This file is used for diagnostic purposes and is overwritten by the new PSIDNLD.DIAG.SYS file. If you do not purge the existing file, and the new file is larger, you will receive errors.

    2. Purge each OSxnn and XPTnnnn group in the telesup account, if they exist.

         :REPORT @.TELESUP
         :PURGEGROUP OSxnn.TELESUP
         :PURGEGROUP XPT@.TELESUP
       

       where:

       x

       an alphabetic character

       nn

       the numeric release number (for example, OSA10.TELESUP and 0SB23.TELESUP).

       Go to Step 17.

17. Rename the COMMAND.PUB.SYS file, except checklists L and M which included this step in section 5.7

      :RENAME COMMAND.PUB.SYS,command_name

    where command_name is a temporary name you are assigning the file. This preserves your UDC information for later use. Record the temporary name on your checklist.

18. If you are performing a Remote system task or CD-ROM task, go to Step 19.

    If you are performing an Add-on, Manage Patch, or Staging Area task with tape or disk on a local system, go to Step 20.

Remote Tasks CD-ROM Tasks

19. If you are preparing a CSLT tape on a central system for distribution to a remote system or if you are modifying the remote system:

    1. Purge the HPINSTFL file.

         :PURGE HPINSTFL.INSTALL.SYS

       It removes old audit trails, if they exist.

       CAUTION: Do not purge HPINSTFL if you are updating the local system (the system your are currently logged on to). Also do not purge the HPINSTFL if you are installing additional SUBSYS products.

    2. Go to Step 20.

20. If you are performing a PowerPatch task, go to Step 21.

    If you are not performing a PowerPatch task, go to the next section on your checklist.

PowerPatch Tasks

21. Restore the AUTOINST file set and its dependencies, except for checklists L and M which included this step in section 5.7.

    1. Log onto the INSTALL group, and enter the following at the system prompt:

         :HELLO MANAGER.SYS,INSTALL;HIPRI
         :FILE PPT;DEV=TAPE
       

    2. Mount the PowerPatch tape and put the tape drive online. Issue the following command to restore the files:

         :RUN STORE.PUB.SYS;INFO="RESTORE *PPT;A@,F@;SHOW;DEV=1"

    3. Dismount the tape when the restore is complete.

• Securing the System completed.
  Go to the next section on your checklist.