IBM Support

Security Concerns for IBM Supplied User Profiles and Passwords

Troubleshooting


Problem

This document describes the security setup IBM recommends for the supplied profiles

Resolving The Problem

IBM does not recommend disabling any IBM-supplied user profiles for security purposes. The recommended method for addressing security issues is to set the user password to *NONE. This will stop any signon usage of the profile itself while still making the profile accessible for any system use.

Appendix B of the Security Reference Manual has a table that has the standard default values for some of the IBM profiles. Following that table is a set of descriptions of what is different from the standard set of defaults for each of the various IBM profiles.
Here are a few other links that discuss IBM Supplied user profiles:
NOTE:  Most IBM shipped profiles are locked down and cannot be changed.  Message CPD680B will be encountered when trying to change the profile.  

[{"Type":"MASTER","Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CHyAAM","label":"Security"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"All Versions"}]

Historical Number

423444099

Document Information

Modified date:
22 April 2025

UID

nas8N1014831