Important Updates to Cybersecurity Software
HelpSystems is updating the names of our cybersecurity software, including the Powertech product line. Don’t worry—the functionality of your products won’t change.
See the new names here > New, Clearer Names for HelpSystems Security Software.
Before You Begin
Read this section before you install Powertech Antivirus for IBM i.
Note: When installing in an HA environment:
- Stop the replication of user profiles from production to HA system by either ending the replication software or ending the replication of the user profiles.
- Install Powertech Antivirus for IBM i on the HA and production systems.
- Setup Powertech Antivirus for IBM i replication per the HA Setup instructions (see Powertech Antivirus Setup in an HA Environment).
- Start replication (including the user profiles).
Planning Your Update to Version 8
Note the following if you are updating from a previous version of Powertech Antivirus:
- If you are updating from version 8.1 or earlier, and a scheduled job exists to perform PTF upgrades, remove the scheduled job. To do so:
- Run the command AVMENU.
- Select option 4 "Work with job schedule entries".
- If an entry named AVUPGRADE exists (not: AVUPDATE), remove the job.
If you have scheduled this job in Robot Scheduler or a third-party job scheduler, remove it from there.
See also Disabling Automatic PTF Updates.
- In versions prior to 8.0, Powertech Antivirus (formerly called Stand Guard Anti-Virus) used an FTP connection to download the most up-to-date virus definitions from McAfee, maker of the Antivirus scan engine. On June 30, 2019, McAfee officially stopped supporting their FTP site and virus definition files (DATs) are now available from their HTTP server. Powertech Antivirus 8.0 and later versions address these changes.
Please note: Your system must meet the updated system requirements for version 8 of Powertech Antivirus for IBM i in order to retrieve the DAT updates through HTTP.
- IBM i V7R2 or higher
- IBM i option 30 Qshell **
- IBM i option 33 Portable App Solutions Environment (PASE) **
- IBM i 5733SC1 option *BASE, IBM Portable Utilities for IBM i
- IBM i 5733SC1 option 1, IBM Portable Utilities for IBM i
- WGET package - see Getting started with Open Source Package Management in IBM i ACS
- Must be current on the latest Cumulative PTF Package, HIPER Group PTF, and Database Group PTF for your operating system release
** QSHELL, PASE, and Java are included with IBM i, but can be separately installed. You can determine if these options are installed by running command DSPSFWRSC (Display Software Resources). If a required option is not installed, you can install it using the GO LICPGM command and your IBM i installation media.
It is our goal not to change system values on customer systems because we recognize that security-conscious organizations have rigorous change control processes in place. Therefore, we ask you to make any system value changes that are needed. However, during this process, the following system values may be temporarily changed to the values shown below. After processing is complete, they are returned to current settings:
- QVFYOBJRST must equal 1, 2 or 3 or will be changed to 1.
- QFRCCVNRST will be changed to 0.
- QALWOBJRST must equal *ALL or *ALWPGMADP or will be changed to *ALL.
- QALWUSRDMN will be changed to *ALL.
In order to acquire McAfee virus definition updates, the system's firewall must be configured to allow them. Virus updates are acquired either directly from McAfee, or from a server configured to host the virus definitions for the local network. In either, you must configure the firewall of the system receiving the virus definitions from McAfee to allow HTTP downloads from http://update.nai.com. If this system previously had a firewall rule exclusion that allowed FTP to be used with update.nai.com, that rule should be removed from the firewall.
If you are unable to configure your security/firewall to allow Powertech Antivirus to retrieve the virus definitions from McAfee’s site, please see Acquiring Virus Definitions Using a Local Repository for an alternative method.
Installing Powertech Antivirus for IBM i
Ensure the following servers are available and running prior to installation:
- FTP Server
- Remote Command Server
Note: If FTP is restricted on your network, see Manual Installation of Powertech IBM i Products for information on installing the product manually.
Do the following to perform the installation or update:
- Download the Powertech Antivirus installer to your PC from the Powertech Antivirus download page. (The "Trial" download is the full product, which can be unlocked with a valid License Key).
- On the Choose Components panel, select which components you want to install. You can choose to install the Manuals and the Software for IBM i. Click Next.
- If you’re only installing the Manuals, the process completes and the installer closes. The Manuals have been installed. You can skip the rest of these steps.
- On the IBM i Details panel:
- Select or enter the IBM i where you want to load Powertech Antivirus.
- Enter a user profile and password that’s a member of the user class *SECOFR and has at least the following special authorities: *ALLOBJ, *SECADM, *JOBCTL, *IOSYSCFG, and *AUDIT. The user profile should have Limit capabilities set to *NO.
- (Optional) In the Advanced Settings section:
- Enter a port number or use the arrows if you want to change the FTP port number to something other than the default of 21.
- Select Secure File Transfer if you want to use FTPS (FTP over SSL) during the file transfer. The default FTPS secure port is 990, but it can be changed to the required secure port for your environment.
- In the Timeout (seconds) field, enter the number of seconds the session should be kept active during an FTP transfer. You can choose anywhere between 25 and 1800 seconds (30 minutes).
Note: If the transfer takes longer than the amount of time specified, the session will expire.
- Click Next.
- You have two options on the Product Load Options panel:
- Click Immediate Load if you’d like to load the product on the IBM i now.
Note: If you're doing an update, this ends Powertech Antivirus until the product load completes. After you are done, we’ll restart the product.
- Click Staged Load if you’d like to transfer the objects now and load them on the IBM i at a later time.
Note: See "Loading Staged Objects on the IBM i" (below) for instructions on how to load the staged objects on your selected IBM i system.
- The Product Load Progress panel for Powertech Antivirus installer launches.
If the Product Load Progress panel ends with an overall Failed message, the product upload could not complete properly. To find the reason the upload failed, click View Logs and review your logs. You can also use Download at the top of the logs to save the information for future review.
When the processing is complete, you have two choices:
- If this is the only installation or update of Powertech Antivirus installer that you're doing, click Finish.
- If you have installs or updates to do on other IBM i systems, click Restart. Then, return to step 4.
Loading Staged Objects on the IBM i
If you chose to stage your objects during step 5b of the installation or update process, do the following to manually load them on the IBM i you identified above.
- On the IBM i, execute the following command to display the Work with Loads panel:
- Enter option 1, Load, next to the Load Name for Powertech Antivirus and press Enter.
The installation program installs Powertech Antivirus, including the required user profiles and libraries (see table below for details).
The installation process displays the job log name, user, and job log number. Use the WRKSPLF command to display the job log for complete information on the install.
Domino Installation Instructions
If you are licensed for StandGuard Anti-Virus for Domino, follow the steps above, then complete the following to install the Domino module:
- Enter the following command:
RSTOBJ OBJ(*ALL) SAVLIB(QTEMP) DEV(*SAVF) SAVF(HSLOADMGR/PTAV800)
- Enter this command:
RSTLICPGM LICPGM(0AV2000) DEV(*SAVF) OPTION(3) SAVF(QTEMP/AVSAVF3)
- Enter AVMENU
- Choose option 52.
- Choose option 3.
- Enter the license key.
See the Powertech Antivirus for IBM i User Guide for additional information.
Starting and Updating Powertech Antivirus
- If applicable, enter the license keys according to the instructions in the email you received from Powertech Antivirus.
- Type AVMENU on a command line and press Enter to start Powertech Antivirus.
- Configure Powertech Antivirus to use HTTP using the DAT setup options:
- Go to the main menu AVMENU, then choose option 50, then option 2.
- Change the Transfer Method to *WGET.
- Press Enter and then change the WGET string to *DFT and save.
- Verify Powertech Antivirus can now successfully retrieve the DAT updates from McAfee’s HTTP site by running STANDGUARD/AVRUNUPD or monitoring your next scheduled DAT update job.