IBM OS/2 Warp Update Kit Component
IBM OS/2 Warp Security Enabling Services (SES)           

Welcome.  This information describes IBM OS/2 Security
Enabling Services (OS/2 SES).  It also describes the changes
that are made to your system by the OS/2 SES package.
Important note:  This software installs the OS/2 SES
updates, but DOES NOT SECURE THE SYSTEM.  To secure the
system, you must install a separate security product.

IBM OS/2 SES
------------
IBM OS/2 Security Enabling Services (OS/2 SES) are a set of
extensions to the OS/2 operating system services.  These
extensions, in the form of APIs (application programming
interfaces) and KPIs (kernel programming interfaces),
enable application developers to create an external security
component, called an Installable Security Subsystem (ISS) to
provide the security features (access control, audit, etc.)
required by customers who need robust (C2 level) operating
system security, and standardized security administration
interfaces for applications.

The Installable Security System can provide operating system
security services such as user identification and
authentication (logon), resource access control and audit,
process security context and trusted program support, and
security policy administration tools.

BEFORE YOU BEGIN
----------------
Be aware of the following before beginning the installation
of the OS/2 Security Enabling Services from this package:

o To use IBM OS/2 SES you must also install the base FixPak
for OS/2 WARP.  A minimum of FixPak 16 (XR_W016) or newer if
available is required.

o If you are planning to install OS/2 SES for the first 
time, and your system is at a level below FixPak 16, you
must install FixPak 16 first, and then OS/2 SES.

o If you are installing OS/2 SES for the first time and 
you have already installed a FixPak level 16 on your system,
you can install OS/2 SES without reapplying FixPak 16.

o OS/2 SES only needs be applied once to your system.  All
maintenance for these files will be available through future
OS/2 Warp FixPaks.

******
NOTE FOR FUTURE OS/2 WARP FIXPAKS ABOVE FIXPAK LEVEL 16:

o If you are installing OS/2 SES for the first time and 
you are installing a FixPak above FixPak 16, for example
FixPak 17, that fixpack may contain fixes to the OS/2 SES 
package. To insure these OS/2 SES fixes are applied, you 
must install OS/2 SES first, and then install the FixPak 17.

o If you are installing OS/2 SES for the first time and 
you have already installed a FixPak level 17 or greater on
your system, you must install OS/2 SES first and reapply 
that FixPak.

SPACE REQUIREMENTS:
-------------------

The IBM OS/2 Security Enabling Services package is 1 MB in
size.  

IBM OS/2 SECURITY ENABLING SERVICES INSTALLATION
INSTRUCTIONS - FOR PACKED FILES OBTAINED FROM A BBS
--------------------------------------------------

Preparing for the Installation
------------------------------
NOTE:  The IBM OS/2 Security Enabling installation requires
that you first unpack the security file first. You need at
least 1.5 MB available to unpack the security.bbs file.

Unpacking the Security Files from a Packed File
----------------------------------------
If for example the packaged security files are on drive
d: in a file called security.bbs and you want to unpack the
files to drive e: to prepare for the installation, type the
following command at an OS/2 command prompt and then press
Enter:

      unpack2  d:\security.bbs  e:  /c

This creates an e:\secpack directory from where you can
start the installation.

Note: Unpack2 is a utility for unpacking files that comes 
with OS/2.

The /c option is required with the unpack2 command to create
the proper subdirectory structure.

Starting the Installation
--------------------

NOTE:  The files unpacked from the packed file are
transferred to the drive and directory you specify during
installation.

You need an additional 1.5 megabytes of free space on the
drive you specify to successfully install the IBM OS/2
Security Enabling package.

To begin the installation, type the following commands at an
OS/2 command prompt and press Enter after each:

        e:
        cd \secpack

Then type the following command and press Enter:

        instses



SECURITY CID-enablement
----------------------
To make the installation above CID-enabled, SECURITY Install
requires 2 steps:

  1. The Creation of a response file that contains the following keywords:
              ________________________
     FILE      = X:\OS2
     COMP      = Product Folder
     COMP      = Security Base
     CFGUPDATE = MANUAL
     OVERWRITE = YES
              ________________________

     where X is the target drive.

  2. Use the following command line parameters to invoke the CID 
capabilities.
     At the command line, type:
     EPFINSTS /A:I
              /C:<DRIVE:\PATH\SECURITY.ICF>
              /L1:<DRIVE:\PATH\ERROR LOG FILE NAME>
              /L2:<DRIVE:\PATH\HISTORY LOG FILE NAME>
              /O:DRIVE
              /P:"Security Enabling Systems for OS/2"
              /R:<DRIVE:\PATH\RESPONSE FILE NAME>
              /S:<DRIVE:\SOURCE PATH>
              /X

  3. To conduct an unattended installation from a redirected drive,
     Copy the files or CD ROM files to the drive, then run Install from
     the specified redirected drive.

  For more information on CID-enabled installation please refer to the
  SOFTWARE INSTALLER document Version 1.3  for OS/2.

INSTALLING OS/2 SECURITY ENABLING SERVICES DIRECTLY FROM
DISK (or CD ROM)
-------------------------------------------------------

Step1- At an OS/2 prompt, change to the drive letter and
path of the source where you are servicing or installing
products from

   For example    X: \pathname\secpack
   where x is letter representing the source drive

Step2- Type the following and then hit enter:

   instses

Before continuing, read the information displayed on your screen

Step3- Select components that you want to install by
clicking on it or by clicking on the "select all" button.
Before installing, make sure that there is enough disk space
on the target drive to install the product and then click on
Install.


IBM OS/2 SECURITY ENABLING SERVICES INSTALLATION
INSTRUCTIONS - FOR DEVCON VERSION OF OS/2 SES
------------------------------------------------
After selecting the IBM OS/2 Security Enabling Services Icon
this readme will be displayed.  Select continue to start 
install.  (Or change to the directory contained the security
feature and enter instses to start installation.

This file will be on the screen, select continue to start 
installation.

Select components that you want to install by clicking on it
or by clicking on the "select all" button.  Before
installing, make sure that there is enough disk space on the
target drive to install the product and then click on
Install.

CHANGES MADE TO THE SYSTEM WHEN OS/2 SES SETUP IS INSTALLED
-----------------------------------------------------------------

The following changes are completed when the OS/2 Security
Enabling Services setup files are installed on your system:

o The following subdirectories are created, and the security files copied
to them:

        X:\OS2\SECURITY
        X:\OS2\SECURITY\SES
        X:\OS2\SECURITY\SLA
        X:\OS2\SECURITY\SESDB
        X:\OS2\SECURITY\DEV

        SES32DD.SYS is placed in the \OS2 directory.

        ALTF1SEC.CM is placed in the \OS2\BOOT directory. Note: this file 
        is a special file created for OS/2 SES. During the boot process,
        the operating system looks for a file named ALTF1SEC.CMD. If this
        file is present, than the normal alt+f1 maintenance sequence that
        Warp provides is modified to behave the same as OS/2 2.11. If
        alt+f1 is depressed during boot the ALTF1SEC.CMD file is executed. 
        You can modify this file if required. The CMD file renames the 
        existing INI files in the \OS2 directory with an extension .bak.
        Existing .bak files are overwritten. The INI files from
        the \os2\install directory are then copied to the \os2
        directory. These files should be files that you have defined and
        control with your security applications. Rename ALTF1SEC.CM to
        ALTF1SEC.CMD if you want to enable this feature.

These and directories and the files contained in them must
be present before installing any security products that are
OS/2 SES enabled.

Depending on which security product you install, the above
directories and files may be modified by that product.

The erasure of the above files will remove OS/2 SES from the system.


DEFECT SUPPORT
----------------

All defects to this program should be reported to your
normal service channel for OS/2.  This program is serviced
under the OS/2 Warp service and defect support agreement.


For developers documentation please contact:

IBM
M. Galper
Internal Zip 1436
1000 N.W. 51'st Street
Boca Raton, Florida 33431

TERMS AND CONDITIONS
--------------------
Important - Please read the following terms and conditions.
Installing any component of the OS/2 Warp Update Kit indicates
your acceptance of the following terms and conditions:

a)  You may only use the OS/2 Warp Update Kit if you are a
    current licensee of OS/2;

b)  You may make copies of the OS/2 Warp Update Kit equal to
    the number of licensed copies of OS/2 you possess;

c)  You may only use the service fixes included with FixPak
    XR_W016 for maintenance purposes;

d)  You may only use the Win-OS/2 service fixes included with
    FixPak XR_W016 to maintain copies of OS/2 with Win-OS/2;

e)  If you use the OS/2 updates you agree to destroy all your
    copies of the code it replaces;

f)  All other terms and conditions of your OS/2 license
    agreements apply to the OS/2 Warp Update Kit; however,
    this does not extend and warranty and/or services
    including but not limited to the "Getting Started" period
    outlined in such agreements.


TRADEMARKS
----------
The following terms are trademarks of the IBM Corporation in
the United States or other countries:

   IBM
   OS/2
   OS/2 SES

THIS DOCUMENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY
KIND.  IBM DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS OR
IMPLIED, INCLUDING WITHOUT LIMITATION, THE IMPLIED
WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE AND
MERCHANTABILITY WITH RESPECT TO THE INFORMATION IN THIS
DOCUMENT.  BY FURNISHING THIS DOCUMENT, IBM GRANTS NO
LICENSES TO ANY PATENTS OR COPYRIGHTS.


OS/2 SES (c) Copyright International Business Machines
Corporation, 1995.  All Rights Reserved.
  
