Checklist: Creating central site distribution media
If you selected tape, DVD, or image catalog as the distribution media, complete the tasks in this checklist to create the distribution media.
Before you begin
- If you plan to distribute secondary language files, refer to Determining licensed programs installed in a secondary language to verify the secondary language is installed for the desired LPP and operating system option.
- If you selected tape or DVD as the distribution media, print a copy of the distribution media cover sheet for central site distribution media. You will need it when you create the distribution media.
- Ensure that you have a dedicated central system.
- Ensure that you have *SAVSYS and *JOBCTL special authorities. If you do not have these authorities, you will be unable to create the distribution media.
- Ensure that *JRNRCV objects are not in the QSYS library.
- Change the QALWOBJRST (Allow Object Restore) system value to *ALL on the central system. The Allow Object Restore (QALWOBJRST) system value specifies whether objects with security-sensitive attributes can be restored.
- Run the following Check Object Integrity (CHKOBJITG) command to verify the signatures of
operating system objects that will cause the SAVSYS operation to fail.
CHKOBJITG OBJ('/QSYS.LIB/*.*') OUTFILE(<lib_name>/<outfile>) CHKDMN(*NO) CHKPGMMOD(*NO) CHKCMD(*NO) CHKSIG(*SIGNED) CHKLIB(*NO) SCANFS(*NO) CHKLIC(*NO)Note: There is more functionality in the CHKOBJITG command besides verifying signatures that you can use before you create the distribution media. - Consider how you want Cryptographic Services master
keys to be distributed. Normally you would not want to share your
master keys with other parties. To prevent your master keys from being
recovered on other systems, it is recommended that you clear all master
keys before you create the distribution media.
If you do not want to clear your master keys, an alternative is to set the Save/Restore Master Key which is used to encrypt the master keys before they are saved to the distribution media. The encrypted master keys are restored on the target system but remain encrypted in a pending state. Users of target systems will need to clear out the pending master keys.
If you want to distribute master keys, you must share the source system Save/Restore Master Key with the target systems so that the encrypted master keys are decrypted after they are restored. For further information on Cryptographic Services master keys, see Managing master keys.
Creating the distribution media
- Rename or delete history logs on the central system:
- Type CHGMSGQ MSGQ(QHST) DLVRY(*DFT) to turn all message logging off.
- Type DSPLOG QHST (Display History Log) to make sure that all messages are written to the history log. Press Enter after the history log is shown.
- Type WRKOBJ OBJ(QSYS/QHST*) OBJTYPE(*FILE) (Work with Objects and Display All History Logs) to work with all of the history logs. PressEnter.
- Use the rename or delete option on each history log. The history logs must be deleted from QSYS or renamed to make sure the history logs will not be distributed to the target system.
- Select option 40 (Create a distribution media) from the GO
LICPGM menu and complete each task. Note: If you chose an optical image catalog as the distribution media, inquiry message OPT149F might appear during processing. If you are using a tape image catalog as the distribution media, inquiry message CPA6798 might appear. Either message means that the initialized volumes are full. To continue processing, select option A (for optical) or *GEN (for tape) and press Enter. Selecting option A or *GEN creates, loads, mounts, and initializes a new volume and processing will continue.
- After you complete option 40, complete the following tasks for
each secondary language to be saved to the distribution media. In
the library name of QSYS29xx, and the language parameter of
the SAVLICPGM command, xx represents the national language
version feature code for the secondary language.
- Save the QSYS29xx library. This library contains the secondary language files.
- Save each licensed program specifying the language parameter and
the object type parameter for each licensed program. The parameter
of OBJTYPE must be *LNG. For example:
SAVLICPGM LICPGM(5770WDS) DEV(device_name) LNG(29xx) OBJTYPE(*LNG) ENDOPT(*LEAVE) - Save the QIBM/PRODDATA/OS/MRI29xx directory using the Save (SAV) command.
- Save additional user libraries to the distribution media using the Save Library (SAVLIB) command.
- Save user directories and other objects to the distribution media using the Save (SAV) command.
- Save the license keys file at the end of the last distribution media.
- To set write protection for virtual images, see Changing the write protection for image catalog entries for virtual optical media.
- To add DVD media to an image catalog, go to Preparing to upgrade or replace software using an image catalog.
- To convert virtual images to DVD or CD-ROM, see Creating actual media from a virtual image.
The User Profiles (QFILEUPR) file and the Device Configuration (QFILEIOC) file do not appear on the list of file names that are supplied by IBM. However, these files appear on the distribution media you create using option 40 (Create a distribution media).
When you are finished
- Type the Change Message Queue (CHGMSGQ) command to set the delivery parameter for the QHST message queue to the previous value (before you create the distribution media). This turns all message logging on again.
- Duplicating and distributing tape or DVD distribution media
- Optional: Duplicating virtual images to physical media
- Optional: Duplicating DVD media to virtual images
- Optional: Distributing virtual images
Next topic: When you have completed the tasks in this checklist, go to Checklist: Installing central site distribution media on the target system.