Managing service tools user ID

You can manage service tool user IDs by using dedicated service tools (DST), system service tools (SST), IBM Navigator for i, Start of changeor the Create Service Tools User ID (CRTSSTUSR), Change Service Tools User ID (CHGSSTUSR), or Delete Service Tools User ID (DLTSSTUSR) CL commandsEnd of change.

Service tools are used to configure, manage, and service your system. Service tools can be accessed from DST or SST. Service tools user IDs are required to access DST and SST, and to use IBM Navigator for i functions for disk unit management. DST is available when the Licensed Internal Code has been started, even if IBM i operating system has not been loaded. SST is available from the IBM i platform.

The following table outlines the basic differences between DST and SST.

Characteristic DST SST
How to access Physical access through console during a manual IPL or by selecting option 21 on the control panel Access through interactive job with the ability to sign on with QSRV or these authorizations:
  • Authorized to STRSST (Start SST) CL command
  • Service special authority (*SERVICE) or all object special authority (*ALLOBJ)
  • Functional privilege to use SST
When available Available even when the server has limited capabilities. IBM i operating system is not required to access DST Available when IBM i operating system has been started. IBM i operating system is required to access SST
How to authenticate Requires service tools user ID and password Requires service tools user ID and password
See the IBM i Information Center > Security > Service tools for information about using the Service tools to perform the following tasks:
  • Access service tools with DST
  • Access service tools with SST
  • Access service tools with IBM Navigator for i
  • Change service tools user IDs and passwords
  • Change the functional privileges for a service tools user ID
  • Change the description for a service tools user ID
  • Change your service tools user IDs and password
  • Configure the service tools server for DST
  • Configure the service tools server for IBM i
  • Create a service tools user ID
  • Delete a service tools user ID
  • Disable a service tools user ID
  • Display a service tools user ID
  • Enable a service tools user ID
  • Monitor service function use
  • Monitor service tools use through IBM i security audit log
  • Reset or recover the QSECOFR user profile password
  • Reset the QSECOFR service tools user ID and password
  • Save and restore service tools security data