Determining the Actual Security Level of System

To determine the actual security level of a system, do one of the following:

At R370 or later:
Running the DSPSECA command shows the following screen:

User ID number . . . . . . . . . . . . . . : 2840

Group ID number . . . . . . . . . . . . : 177
Security level . . . . . . . . . . . . . . : 40
Pending security level . . . . . . . . . : 50
Password level . . . . . . . . . . . . . . : 0
Allow change of security related system
values . . . . . . . . . . . . . . . . . : *YES
Allow add of digital certificates . . . . : *YES
Allow service tools user ID with default
and expired password to change its own
password . . . . . . . . . . . . . . . . : *YES
If the actual security level is the same as the QSECURITY system value, the 'Pending security level' is not displayed.


At any release:

On the operating system command line, type the following:

DMPSYSOBJ QSYUPTBL QSYS TYPE(0E) SUBTYPE(C5)
Press the Enter key. Then, type the following:
WRKSPLF
Press the Enter key. In the index entries:

QSECURITY entry at offset '21'X,
'0032'X = level 50
'0028'X = level 40
'001E'X = level 30
'0014'X = level 20
'000A'X = level 10