Display event – POWERCast: Malware on Power Servers: Breaking Down the Myth

Even with today’s advanced malware, many IT pros don’t believe their Power servers are at risk. The truth is malicious programs affect every OS.

To keep your data secure and your systems up and running, it’s critical to grasp the true impact malware can have on Power servers and the network that connects to them.

Join this live webinar to learn where the danger lies and how you can protect your systems. Power security expert Sandi Moore will discuss real-world examples of malware attacks on IBM i, and provide effective tactics for avoiding infections. She’ll cover:

How malware and viruses have successfully infiltrated Power systems
Why some of the most common malware solutions often leave Power servers vulnerable
Expert tips for securing your systems

Sandi Moore, Lead Solutions Engineer, Fortra

Sandi has been working with Fortra customers for over 15 years supporting systems monitoring and security software. With experience on IBM i, AIX, and Linux, she has been involved in product demonstrations, implementation, support, training, research, and product testing.

In her time at Fortra, Sandi has helped customers understand how to effectively address the threats they face. Her goal is to help people achieve the best solution to their IT problems, no matter how many servers are in their environment or where in the world they’re located.

Organizations throughout the public and private sectors have relied on Sandi’s expertise, whether they’re seeking to proactively protect their systems or improve security controls after a malware attack. Sandi has shared her knowledge at multiple user group conferences, including COMMON.

Have a story you want to share with the #COMMONug community? We want to hear from you! We have a blog, e-magazine, newsletter, and YouTube channel waiting to house your content. To inquire about submitting, email Manzoor at [email protected]! #IBMiEducation #TechWriting

Have a story you want to share with the #COMMONug community? We want to hear from you! We have a blog, e-magazine, newsletter, and YouTube channel waiting to house your content. To inquire about submitting, email Manzoor at [email protected]! #IBMiEducation #TechWriting pic.twitter.com/u4vJEry6ZO

– COMMON – A Users Group (@COMMONug)14:00 – Jan 26, 2023

Why I Learned RPGLE

When I told my friends  I was learning RPGLE, they thought I had gone a bit crazy. Why would I want to learn that “old” programming language?

My quest stemmed from a common issue that I experienced first-hand. As a web developer, I would often hear, “The business logic is located in RPG code and we don’t know what it does. We will have to wait and ask the RPG programmer to explain it to us before we can continue with the project, but that person is too busy now.”

Or worse yet, “We are completely redoing our ERP system because we can’t find RPG programmers.”

From a business continuity standpoint, that’s frightening. All the investment in customizing your business logic to work perfectly with your particular business, and your intellectual property is understood by only 1 or 2 people in the organization? That’s like owning a wildly successful donut shop that serves thousands of people a day, but only one person knows the secret recipe for the donuts.

If we have learned anything from the pandemic, it’s that IT must become more flexible, cross train, and build up our own people.  The pandemic caused us to look for new ways to innovate so business could continue. To do that on the tech side of business, we need to educate, enhance and support the current IT staff we have. Yet too often web programmers receive little help in learning RPG due to budget restrictions and overloaded RPG programmers who have little time to mentor web programmers.

So what can a programmer do?

Accept the challenge

Coming from a background in design and front-end development, my very first time logging onto the “green screen” was daunting.  What was this black and green lettered screen? Did I just go back in time? It felt scary and old. It wasn’t like any IDE I was used to.

However, I quickly learned how powerful the IBM i system is.

As a PHP programmer, I often had to work with IBM i data sent to me from an RPG program. Or I would be asked to rebuild an RPG report in a web-based format and make sure the logic worked the same as the report on the ”i-Series”. However, I couldn’t even read the RPG code, let alone navigate my way through it.  I wanted to be able to understand its concepts and be able to make sense of it myself.

So, when the offer to learn RPGLE came to me, I took a deep breath and dived in. I bought a book, started reading the first couple of chapters, and wondered what I got myself into!

Find your community

But then I found my saving grace—RPG class meetups with Impower Technologies. Not only could I take the classes on my own time schedule and watch the videos as many times as I needed, but once a week we would have meetups to discuss any issues or questions we had. Jim Buck, Michelle Lyons, and their current and former students would help each other work through the problems.

I quickly found these sessions invaluable. When learning something difficult, it’s nice to have others there with you, people who have the same issues and questions you do. You are not alone. This is a great feeling, especially for those who come from small IT departments.

Best of all, even after you complete the course, you can continue to attend the meetups. Free of charge!

Use a familiar IDE

The other key factor in my success learning RPG came in the form of a familiar IDE. Liam Allan’s Code for IBM i extension to Visual Studio allowed me to bring RPG code into VS Code so I could use some of the same tools for editing, searching, and commenting. The familiarity of the IDE gave me more of a comfort level and helped ease anxiety.

The payoff

Even though I’m not programming in RPG every day, taking the RPG class has allowed me to fast forward PHP projects by minimizing time spent waiting on language barriers. I now understand how RPG works with the system, how to debug issues, and so on. I can build test environments. It has even exposed me to other programming languages such as Cobol.

The main thing, though, is that I now understand where the RPGLE source lives, how it calls files and programs, and how the programs are compiled.

I can now read the secret recipe. And that is a great feeling.

2023 IBM i Marketplace Survey Results Revealed

IBM i continues to offer reliable computing power and remains business-critical for many organizations. Fortra’s annual IBM i Marketplace Survey provides a close look at how organizations running IBM i are using the IBM Power hardware and the operating system.

Now in the ninth year, this survey has become a benchmark revealing the trends shaping the industry and providing insight into what the future may bring to the platform. 400 IBM i users from all over the world completed this year’s survey and it’s time to share the results.

Watch this webinar and hear exclusive insights from a panel of IBM i technology experts. Some of the topics include:

Power10 adoption and future plans.
– How organizations continue to support remote workforces.
– The trend towards higher adoption of Rational Developer for i (RDi).
– The shift from hybrid, to more cloud-based environments.
– Top concerns when planning IT environments with IBM i.

Our expert panel includes IBM Power Champion Tom Huntington from Fortra, IBMers Steve Will, Dan Sundt, Brandon Pederson, and Timothy Prickett-Morgan from IT Jungle.

View the full report: https://www.fortra.com/resources/guides/ibm-i-marketplace-survey-results

Am I using encryption for fix downloads?

Answer

FixCentral uses Encrypted downloads.
Customers using FixCentral to download fixes are unaffected, because as the announcement states, Fix Central uses encrypted downloads already.

SNDPTFORD is the primary concern.
Customers that use SNDPTFORD may be affected, depending on their version of IBM i. This document is intended so that you may easily verify that your system is using encryption with SNDPTFORD.

IBM i 7.1
IBM i 7.1 is no longer supported and no further PTFs are being created for it. SNDPTFORD at IBM i 7.1 will not work with encryption and customers need to use FixCentral instead.

IBM i 7.2
At IBM i 7.2, you must both update your Electronic Service Agent (ESA) and Electronic Customer Support (ECS) configuration to use the new EDGE servers and enable encrypted communications over port 443. The steps to make this configuration change are provided in the document Electronic Service Agent (ESA) and Electronic Customer Support (ECS) VPN and HTTP Firewall Settings under the section Resolving the Problem > V7R2. Once this change has been made, apply the fixing PTF SI79293 or its supersede. APAR SE69832 explains that this PTF was needed to include the latest ECC Common Client release (2.3.2).

IBM i 7.3
For IBM i 7.3, APAR SE69832 explains that new PTFs were needed to include the latest ECC Common Client release (2.3.2). This new release “provides high speed download support using port 443. This will eliminate the need for port 80 for SNDPTFORD and all other ECC electronic support.” The PTF that provides this updated ECC version for 7.3 is SI68172. Once it or a superseding PTF are applied, SNDPTFORD will use encryption during downloads.

IBM i 7.4 and 7.5
IBM i 7.4 and 7.5 already ship with an updated version of the ECC Common Client, so no PTFs for SNDPTFORD are necessary.

The only other area of concern are users using custom APIs
The only other area of concern regarding this situation were a small number of customers that are known to be using APIs to directly download fixes from IBM and bypass FixCentral. Some of those systems were using unencrypted file transfer, and that will not be supported.

[{“Type”:”MASTER”,”Line of Business”:{“code”:”LOB57″,”label”:”Power”},”Business Unit”:{“code”:”BU058″,”label”:”IBM Infrastructure w/TPS”},”Product”:{“code”:”SWG60″,”label”:”IBM i – SWG60″},”ARM Category”:[{“code”:”a8m0z000000cwp6AAA”,”label”:”Save Restore”}],”ARM Case Number”:”TS011956161″,”Platform”:[{“code”:”PF012″,”label”:”IBM i”}],”Version”:”7.1.0;7.2.0;7.3.0;7.4.0;7.5.0″}]

Verified by MonsterInsights