WMCPA Spring Conference 2023

Gone are the days of managing IBM i Security using green-screen commands! IBM has provided mechanisms to allow us to manage security
using IBM i Services (SQL) and Navigator for i. During this session Carol will describe the fundamentals of security using these modern
interfaces. She will also show how to use Function Usage, Auditing and Authority Collection to help you manage the security on your IBM i
partitions.
Learning objectives:
• The basics of IBM i Security – security-relevant system values, user profiles and permissions using Navigator for i and IBM i Services
• The basics of IBM i Auditing and how to use IBM i table functions as well as how audit entries are manifested in Navigator for i
• Authority Collection: what it is and how you can use it to reduce permissions
• Using Function Usage (Application Administration) to reduce access to IBM i features

IBM I security can be a huge hill to conquer. Steve will present a marathon three-hour session to leave no stone unturned, no door
unlocked and help you plan for the future. We will leave the platitudes at the door and get down to the business of locking our
systems down properly and effectively.

Have you thought about the passwords you use on your systems? What rules or restrictions do you have in place? But more importantly, why?! Have you ever thought about what those rules actually do to your passwords? Do you think they are making you more secure or less secure? In this presentation, we will cover passwords in depth, in theory, and specific to IBM i. Can your IBM i password be hacked? Come and find out at this inquisitive session! Updated with the latest IBM i 7.5 information.

As more IBM i clients start to use SSH, it is important to understand how to properly secure it on the platform. This session will cover recommended ways to harden SSH on your IBM i including authentication with passwords and public/private key pairs. A discussion of the various file transfer options will also be included.

Best practices recommend using more than one factor to secure logins and other critical processes. Using industry standard algorithms, two factor authentication now comes to IBM i. This session covers four of the latest tools to help secure your IBM i! (COMMON Gold medal session)