Scheduling moving logical partition resources

You can schedule the movement of memory, processors, interactive performance, and I/O processors. You have the option of choosing to perform a task immediately or choosing a later time. The logical partition scheduling functions provide you with the flexibility to accommodate changing workloads and demands on resources.

To ensure that the scheduled logical partition resources move successfully, you must meet dedicated service tools (DST) and IBM® i security requirements.

The primary partition for the system where the resource move will occur must have the DST password level set to use password support. To change the DST password level, follow these steps:

  1. From DST, select option 5 (Work with DST environment).
  2. Select option 6 (Service tools security data).
  3. Select option 6 (Password level).
  4. Press Enter to confirm the password level change.

The DST user ID password must be changed AFTER the DST password level is set to apply the new encryption level to the DST user ID. This ID is the uppercase equivalent of the same user profile. For example, OS/400user/password= 'BOB'/'mypass' needs DST user='BOB'/'MYPASS'. The DST user profile needs the following authority:

  1. System Partitions - Operations

    or

  2. System Partitions - Administration

User profile needs the following special authorities:

  1. *ALLOBJ - All object authority
  2. *SERVICE - Service

A user profile must exist on the central system and the system where the resource move operation occurs. By default, Management Central requires the user profile used to sign on to the central system to have the same password as the endpoint system. For more information, see the System i® Navigator help for the Require password on endpoint systems field on the Security tab of the Management Central Properties page.

LPAR resource moves are scheduled and run with the user profile used to access the central system.

The service tools server must be enabled on the target server. To enable the service tools server, follow these steps:

  1. From a command line, type ADDSRVTBLE (Add Service Table Entry) and press Enter. The Service Table Entry display appears.
  2. Enter the following information:
    Note: The following information is case sensitive.
    • Service: 'as-sts'
    • PORT: 3000
    • PROTOCOL: 'tcp'
    • TEXT: 'Service Tools Server'

      This field is optional, but you are strongly recommended to enter a description of the table entry.

    • Press F10 (Additional Parameters).
    • ALIAS: 'AS-STS'

      The Alias must be capitalized because some table searches are case sensitive.

  3. Press Enter to add the table entry.
  4. Press F3 to Exit the Add Service Table Entry display.
  5. Enter ENDTCP (End TCP).
  6. Enter STRTCP (Start TCP)
  7. Once active, the service tool server starts when TCP/IP starts until the service table entry is removed.
Note: This server was disabled when shipped for security reasons. You should not enable this service on a machine which still has default DST User IDs and passwords (QSECOFR, QSRV, 11111111, or 22222222). These DST profiles are well known and can create a possible security vulnerability since this network service uses DST security for authentication.

Scheduling support uses the QYHCHCOP API.

Parent topic: Managing logical partitions