What do you do when the QSECOFR user profile is disabled or you have forgotten the password? What about the service tools user ID QSECOFR? If you're like me, you've seen the message more than once that the Service Tools User ID QSECOFR is disabled.

There are two QSECOFR user IDs on your System i: the i/OS operating system user ID QSECOFR and the service tools user ID QSECOFR.

There is a great IBM manual available as a downloadable pdf that explains how to manage the resources and User IDs of Dedicated Service Tools (DST) and System Service Tools (SST).

You can download the Service Tools User IDs and Passwords Manual in pdf form here.

The topics covered include:

• Resetting the operating system QSECOFR password.
• Resetting the service tools QSECOFR password.
• Creating new service tools user IDs.
• Changing service tools security policies, including password expiration, maximum failed logon attempts, and duplicate password control.

Also, there is a nice step-by-step troubleshooting guide for any DST and SST problems you may encounter.

The manual also discusses some of the main differences in functionality between DST and SST. For example, if the QSECOFR service tools user ID becomes disabled due to excessive bad passwords, you can still sign-on using DST.