Registering IBM i Endpoints

You can use the functionality of Powertech Antivirus Server for IBM i Endpoints.

During registration, Powertech Antivirus Server’s address must be specified. It is recommended that user specify it as a full qualified domain name.

To register your Powertech Antivirus for IBM i 8.07 (and above) client with Powertech Antivirus Server, complete the steps in all sections below, in order:

On the IBM i

  1. Sign on to the IBM i with a user profile that has *IOSYSCFG special authority.

  2. Ensure the name used for Powertech Antivirus Server can be resolved to an IP address. Resolution can be achieved with DNS or a combination of a TCP host table entry and an entry in the /etc/hosts file.

    IMPORTANT: It is recommended that Powertech Antivirus Server parameter is specified as a fully qualified domain name rather than as a numerical IP address. If no DNS entry exists for Powertech Antivirus Server system, or if DNS is not configured on the IBM i endpoint, use these instructions:
    Setting-up Non-DNS name resolution on IBM i Endpoints before continuing.

  3. Run call qp2term.

  4. From the qp2term command line, run cd /standguard/webclient/integration.

  5. Run ./register.sh -k <API key copied from Powertech Antivirus Server - Settings > Endpoint Registration user interface> -s <Powertech Antivirus Server fully qualified host name> -c <your IBM i system name>.

    EXAMPLE: ./register.sh -k fb0229ee-1518-4bfa-8ff2-ec733a803c98 -s MY_PTAV_SERVER.ACME.COM -c MyIBMi
    Where:
    • API key from Powertech Antivirus Server is fb0229ee-1518-4bfa-8ff2-ec733a803c98
    • the fully qualified domain name of Powertech Antivirus Server system is "MY_PTAV_SERVER.ACME.COM"
    • IBM i Endpoint name is MyIBMi

    NOTE: You can find the API key on the Endpoint Registration page of the Powertech Antivirus application in Fortra Application Hub.

  6. Press F3 to exit the qp2term environment.

In Powertech Antivirus Server

Your IBM i Endpoint should now appear within Powertech Antivirus Server. To allow the connection to be made from the Endpoint, complete the following steps in the Powertech Antivirus application.

  1. Navigate to the Connection Settings page.

  2. If the IBM i system is not displayed, clear all filters.

  3. Click (Show Actions) next to the IBM i Endpoint.

  4. Select Allow.

After Registering

Start the job that connects the IBM i Endpoint to Powertech Antivirus Server by completing the following steps on the IBM i:

  1. Run ADDLIBLE STANDGUARD.

  2. Run AVINSITE *RESTART. The user profile running this command needs *USE authority to user profile STANDGUARD.

  3. Only for systems where Powertech Antivirus for IBM i has been updated from R08M06 to R08M07, do the following steps:

    1. Sign on to an interactive session on the IBM i.

    2. Run the command:
      edtf '/standguard/webclient/integration/config/server.toml'

    3. Insert the following lines at the end of the file:
      [ibmistatuscheck]
      interval = 5

    4. Press F3 twice.

    5. You can now start the AVINSITE job.

Managing the AVINSITE Job

If needed, you can manage the connection between the Endpoint and Powertech Antivirus Server by using the AVINSITE job that runs in subsystem QSYSWRK. The user profile running the AVINSITE command needs *USE authority to user profile STANDGUARD. Use STANDGUARD/AVINSITE on the IBM i with one of the following options:

*START Starts the job that connects to Powertech AntivirusServer.

*STOP Ends the job that connects to Powertech Antivirus Server.

*STATUS Displays the status of the connection to Powertech Antivirus Server.

*RESTART Restarts the connection to Powertech Antivirus Server.

*AUTOSTART Adds an autostart job entry to the QSYSWRK subsystem so AVINSITE starts automatically when the system IPLs. This option can also be used to remove the autostart entry. In the following example, the autostart entry is added:
AVINSITE OPTION(*AUTOSTART) VALUE(*YES)

To view the local Powertech Antivirus Server/IBM i Endpoint log, run the command:

dspf '/standguard/webclient/integration/log/avinsite.log'