Detecting change to Manual mode

[Glenn Robinson]

V5R2M0

My customer's audit department is requesting that any changes to Manual mode
are logged. Is there anywhere in the system that detects and logs a change
from normal mode to manual mode?

Thanks

Glenn

[Bryan Dietz]

I don't think a manual change to the keylock can be detected but the
following CL can tell you what it is set to:

pgm
DCL VAR(&RETURNDATA) TYPE(*CHAR) LEN(22)
CALL QWCRIPLA PARM( &RETURNDATA +
X'16' +
'IPLA0100' +
X'00000000' )
IF COND(%SST(&RETURNDATA 10 1) *EQ '0') +
THEN(SNDPGMMSG MSG('The keylock position +
is set to auto.'))
IF COND(%SST(&RETURNDATA 10 1) *EQ '1') +
THEN(SNDPGMMSG MSG('The keylock position +
is set to manual.'))
IF COND(%SST(&RETURNDATA 10 1) *EQ '2') +
THEN(SNDPGMMSG MSG('The keylock position +
is set to normal.'))
IF COND(%SST(&RETURNDATA 10 1) *EQ '3') +
THEN(SNDPGMMSG MSG('The keylock position +
is set to secure.'))
END:
ENDPGM

http://as400bks.rochester.ibm.com/iseries/v5r2/ic2924/index.htm?info/apis/qwcripla.htm

Bryan Dietz

"Glenn Robinson" <Gl...@Flying-Fields.co.uk> wrote in message news:<bqq9dt$snb$1$8300...@news.demon.co.uk>...

[John]

Actually, I posted a question to this group a while ago regarding determing
keylock positions. The QWCRIPLA API doesn't actually tell you the current
keylock position. It just returns the value as shown in the DSPIPLA command
which does not reflect the true nature of the key position. If it's still
available, check out the previous thread for keylock posiitons.
I received an example RPG proggy from Carsten Flensburg using a MI API to
retrieve this. I can send it to you if you think it would be useful.

As far as I'm aware, there is no system logging to changes in the key
position. Not sure what use there is in that as apart from being able to
force the console into DST and IPLs, I can't think of any other extras it
would allow... Under normal circumstances, our systems are in secure mode
with the key removed. This prevents the mode from being changed and IPLs
from the panel which your auditors may find acceptable.

"Bryan Dietz" <bryan...@yahoo.com> wrote in message
news:b4d82b43.03120...@posting.google.com...