Symantec ESM Agent for IBM AS/400 Installation Guide Version: 6.5
Symantec ESM Agent for IBM AS/400 Installation Guide The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Legal Notice Copyright 2010 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, ActiveAdmin, BindView, bv-control, and LiveUpdate are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This Symantec product may contain third party software for which Symantec is required to provide attribution to the third party ( Third Party Programs ). Some of the Third Party Programs are available under open source or free software licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those open source or free software licenses. Please see the Third Party Legal Notice Appendix to this Documentation or TPIP ReadMe File accompanying this Symantec product for more information on the Third Party Programs. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.
Symantec Corporation 350 Ellis Street Mountain View, CA 94043 http://www.symantec.com
Technical Support Contacting Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our Web site at the following URL: www.symantec.com/business/support/ All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Customers with a current support agreement may access Technical Support information at the following URL: www.symantec.com/business/support/ Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level
Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Licensing and registration Customer service Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: www.symantec.com/business/support/ Customer service information is available at the following URL: www.symantec.com/business/support/ Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals
Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America customercare_apac@symantec.com semea@symantec.com supportsolutions@symantec.com
Introducing Symantec ESM Agent for IBM AS/400 This document includes the following topics: About the Symantec ESM Agent for IBM AS/400 Installation Guide Planning for installation About the Symantec ESM Agent for IBM AS/400 Installation Guide The Installation Guide provides the instructions on how to install and register the Symantec ESM AS/400 Agent with the ESM Manager. Planning for installation This section contains the following: Before you install See Before you install on page 8. System requirements See System requirements on page 9. Installing the Symantec ESM agent See Installing the Symantec ESM agent on page 9. Registering the Symantec ESM agent with a Manager See Registering the Symantec ESM agent with a Manager on page 11. Uninstalling the Symantec ESM agent
8 Introducing Symantec ESM Agent for IBM AS/400 Planning for installation Before you install See Uninstalling the Symantec ESM agent on page 11. Before you install the ESM agent on an AS/400 computer, do the following: 1 Ensure that you have the ESM Agent software esmis.zip. If you do not have the ESM Agent software, then you can download the Agent from the ESM Tech Support Web site. Note: To install the agent, you must download the Agent file esmis.zip, unzip and FTP the contents to the AS/400 server. If the agent already exists, then FTP the software to AS/400 server. Do not install the Symantec ESM manager on a computer that has the IBM Operations Console software currently installed. 2 Select the AS/400 servers where you want to install the Symantec ESM agent. 3 Get access to the QSECOFR account on each selected system. 4 Select the Symantec ESM managers to which you want to register each Symantec ESM agents. 5 For each ESM manager, do the following: Enter the ESM manager to which the agent is registered. Usually, it is the name of the computer that the manager is installed on. Enter the ESM access name (login name) for the manager. Enter the ESM password that is used to log on to the ESM manager. Ensure that the ESM manager to where you plan to register the AS/400 agent uses a password that is no longer than eight characters in length. Enter the communication protocol that is used to contact the ESM manager. Enter the port that is used to contact the ESM manager. 6 Add the ESM managers to the AS/400 TCP/IP host table by typing 'CFGTCP' and selecting option 10.
Introducing Symantec ESM Agent for IBM AS/400 Planning for installation 9 System requirements 7 Edit the host file, add the AS/400 computer IP address and hostname. For example: 10.10.100.100 <tab> my_as/400. 8 Save the file on the Symantec ESM manager Server. The host file is located at the following path on your Windows Symantec ESM Manager: C:\WINNT (or Windows)\system32\drivers\etc\hosts. The computers that have AS/400 operating systems must meet the following requirements to install and run Symantec ESM software: 256 MB RAM memory 1600 MB of free disk space 30-MB pool size Note: A special user profile called 'ESM' is created by the agent installation procedure. This profile is SECOFR user class type with all the special authorities. This ESM profile accesses, analyzes, and reports all the user and system level objects. Symantec recommends that this profile must have special authorities to ensure that ESM is able to access all objects and have a complete report. You can install Symantec ESM agents on IBM iseries computers that have an AS/400 V5R3, V5R4, & V6R1 operating system. Installing the Symantec ESM agent To begin the installation of Symantec ESM agent start the Symantec ESM installer. To install the ESM agent 1 Copy the ESM agent from the Product disk to the AS/400 server. You can also download the ESM agent from the Symantec Web site to the desired location. See To download or copy the Agent to the AS/400 Server on page 10. 2 Start the Symantec ESM installer. See To start the Symantec ESM installer on page 10. 3 Select the type of installation. See To select the type of installation on page 10.
10 Introducing Symantec ESM Agent for IBM AS/400 Planning for installation 4 Start the installation program. See To install a Symantec ESM agent on page 10. 5 Register the agent to a manager. See Registering the Symantec ESM agent with a Manager on page 11. To download or copy the Agent to the AS/400 Server 1 Download the AS/400 agent (esmis.zip) to the computer from the Security Response site to the desired location. 2 Unzip esmis.zip into ESMIS file. 3 Create an ESMIS save file in QGPL on the AS/400 server. 4 FTP ESMIS file on the AS/400 server. 5 If the agent file, ESMIS.ZIP is in media, then unzip the file, create ESMIS file, save the file in QGPL, and FTP the ESMIS file on the AS/400 server as mentioned above. To start the Symantec ESM installer 1 Log on to the AS/400 system as QSECOFR. 2 Restore ESMIS by using RSTLIB SAVLIB(ESMIS) DEV(*SAVF) SAVF(QGPL/ESMIS). 3 Type CALL ESMIS/ESMINSTALL. To select the type of installation 1 Type a Y to select the New Install option. 2 Select Enter=Accept if you agree to the terms of the Software license agreement. Before you start the Agent installation process, you must ensure that there is no ESM library that is using DSPLIB or DSPLIBL command. To install a Symantec ESM agent 1 Type an N in the Transfer data field. 2 Type an N in the Submit to batch field. The above steps let you install the software interactively and lock the workstation until you finish the installation. Press Enter to execute the command. After the installation completes, the registration process starts. See Registering the Symantec ESM agent with a Manager on page 11.
Introducing Symantec ESM Agent for IBM AS/400 Planning for installation 11 Registering the Symantec ESM agent with a Manager Registering a Symantec ESM agent with a manager establishes secured communications between the agent and the manager. Each agent must register to at least one manager. Do not use more than one agent name to register a Symantec ESM agent to a manager, else ESM reports an error message when you run a policy on the agent. Do not register the Symantec ESM agent to a manager version earlier than Symantec ESM 6.0. This causes database errors on the manager. Instead, you must upgrade the managers to the latest Symantec ESM version before registering the agent. The manager must be running to register the agent. If the manager is not running, you can restart the manager and use the Register agent option in the Symantec ESM menu to register the agent. Symantec ESM agents that were registered to an ESM Manager before the upgrade of the Manager continue to function with the upgraded managers. To register the Symantec ESM agent to a manager 1 Log on to the AS/400 server through ESM as the profile that is created by the Agent Installation procedure. The default password is ESM001. You must change the default password after the first logon. 2 If you are registering the agent again, then select option 40 to start the ESM subsystem. 3 On the ESM Main menu, select option 6, Register with Manager. 4 Enter the TCP/IP port number. The default port number is 5600. 5 Enter the Symantec ESM manager user name. 6 Enter the Symantec ESM manager password. 7 Enter the Symantec ESM manager name. If you have not modified the host file on the Manager computer, you must use the IP address. 8 After the registration completes, press Enter to end the terminal session. 9 Restart the Symantec ESM Console if you want to register a new agent. Uninstalling the Symantec ESM agent Table 1-1 lists the uninstallation process of the Symantec ESM agent.
12 Introducing Symantec ESM Agent for IBM AS/400 Planning for installation Table 1-1 Steps Uninstallation process of the Symantec ESM agent How to do it Unregister or Delete this AS/400 agent from the ESM Manager END ESM Subsystem To unregister or delete this AS/400 agent from the ESM Manager, perform the following steps in the ESM Console: Expand the All Managers tree. Select the ESM manager that the AS/400 agent is registered to. Expand the Domain tree and then expand the AS/400 Agents tree. Right-click the agent that you want to delete and select Delete > Delete From Manager (Unregister). To end ESM Subsystem, login to the ESM profile in the Agent server and do the following: To ensure that no job is running under ESM Subsystem, select option 1 from the ESM menu. To END the ESM Subsystem, select option 50 from the ESM Main menu. De-allocate the ESM Subsystem resources and delete the ESM Agent Objects To de-allocate the ESM Subsystem resources and delete the ESM Agent Objects, do the following: Login to QSECOFR. CALL PGM(ESM/RMVESM). This command de-allocates the resources from the ESM Subsystem and deletes all the ESM objects. See Installing the Symantec ESM agent on page 9.