Important Updates to Cybersecurity Software 

HelpSystems is updating the names of our cybersecurity software, including the Powertech product line. Don’t worry—the functionality of your products won’t change.

See the new names here.

INSITELIB

HelpSystems Insite 2.5 introduces a number of changes that improve security.

A library named INSITELIB will be added to the IBM i systems that Insite connects to through a Product Connection. When Insite connects to the IBM i for the first time, you will be prompted to provide a user profile with Security Administrator (*SECADM) and All Object (*ALLOBJ) special authorities. These credentials are only used once to allow the INSITELIB library to be installed and to create two new user profiles. The credentials are not saved.

The new user profiles that are added are INSITEUSR and INSITEADM. These profiles function similarly to how RBTADMIN, PTADMIN, PLABADM and RBTUSER, PTUSER behave upon installation of Robot and Powertech products. With these user profiles, the requirements on Product Connections are relaxed. Before Insite 2.5, user profiles specified on Insite Product Connections had to possess special authorities. Insite 2.5 and higher versions allow you to specify user profiles that do not need to have special authorities.

All Insite product objects on IBM i systems are now owned by either INSITEADM or INSITEUSR. INSITEADM is a member of the user class *SECOFR and has All Object (*ALLOBJ) authority. INSITEUSR is a member of the user class *USER and has Job Control (*JOBCTL) and Save System (*SAVSYS) special authorities. Both profiles are shipped with passwords set to *NONE, so the profiles cannot be used to sign on to your system. This increases the security of those profiles.

The INSITEADM and INSITEUSR profiles were created for the following reasons:

  • For all products that require IBM i connections, you are no longer required to create Product Connection profiles with (*SECOFR) permissions.
  • The profiles allow us to build a secure product for your environment.
  • The profiles isolate the Insite products from IBM changes to the QPGMR and QSECOFR user profiles.

Note that if you decide to change any attributes on the INSITEADM or INSITEUSR profiles, HelpSystems cannot guarantee the stability of our products and unexpected results may occur. Do not change the user profiles to have a password other than *NONE.

Important Notes

  • If necessary, you can fix the installation of INSITELIB through the Product Connections view or the Alerts view.
  • For Powertech Exit Point Manager for IBM i users, in order to have a *USER type profile on the product connection and use Powertech products, the profile with the connection MUST be added to the PTADMIN authorization list.
  • IBM i systems that will be connecting to your Insite Server must be at V7R2 or higher. 

Still have questions? We can help. Submit a case to Technical Support.

Last Modified On: April 09, 2019