SECOPT (Security Options)

On systems that have Secure Access Control Module security-enhancement software, the SECOPT (Security Options) command displays or sets system security options.

On systems that do not have Secure Access Control Module software, the SECOPT command can be used only for the following purposes:

  • Assign a value to the following options:

    • AUTHENTICATION

    • CLIENTENCRYPTION

    • CLIENTSIGNING

    • CODEVERIFYCHECK

    • CODEVERIFYGEN

    • ENCRYPTION

    • GSSAPI

    • HOSTSRESTRICTED

    • LANMANLEVEL

    • LOGONATTEMPTS

    • MFA

    • NOLMHASH

    • OLDBKUPSECURITY

    • OLDDMSSECURITY

    • RESTRICTUNWRAP

    • SECURECOMM

    • SERVERENCRYPTION

    • SERVERSIGNING

    • SHARELOGGING

    • SUSPENDDELAY

  • Interrogate the settings of the system security options

The SECOPT command is to be used only by the system security administrator or by those acting for the security administrator. See the MCP Security Overview and Implementation Guide for more information.