OSINSES - QUESTIONS AND ANSWERS ABOUT INSTALLING SECURITY ENABLING
          SERVICES IN OS/2 2.11
01/12/96

=======================================================================
       Questions and Answers about Installing Security Enabling
                      Services in OS/2 2.11
=======================================================================

Please Read Entire Document for Full Explanation of Procedures
--------------------------------------------------------------

DESCRIPTION

Security Enabling Services (SES) allows independent software vendors 
(ISVs) to create security applications for OS/2 2.11. SES is provided 
by IBM; however, all security applications are provided by ISVs.  

Note: SES alone does not secure a system. You need an additional
      Security Application to do so.

Following are questions and answers that will assist you in  setting up 
SES in OS/2 2.11. 

RESOLUTION

What happens if I...
 
...install SES, but do not install a security product?

   Security is not enabled. You should see no difference in function or
   performance. The initial SES files and directories will be
   installed, but there will be no CONFIG.SYS file changes.
 
...restart from SES Boot Diskette 1 and run A:SERVICE rather than 
   A:SECURITY?

   No Security files will be installed. The README.SES file states that
   A:SECURITY must be entered from the A: prompt.
 
...apply FixPak 100 before OS2SES, or vice versa?
 
   You can apply OS2SES and FixPak 100 in any order.
 
   If you plan to establish a Security system and will also be
   installing a FixPak later than 100, you must FIRST apply OS2SES.
 
   If your system is at a service level later than FixPak 100, you must
   apply any security updates included in that FixPak level AFTER
   installing OS2SES. (You should review the README.1ST file that comes
   with the FixPaks to check for security updates. If updates are
   included, reapply the FixPak, which will update only security.)
 
...use the SES Corrective Service Facility (CSF) Boot Diskettes to 
   install FixPak 100?

   Service and FService are the same on the SES CSF and Fixtool2B CSF
   Boot Diskettes, so they can be used to install FixPak 100.

   Important: SES CSF Boot Diskettes must be used to install
              Security, because they contain the files,
              SECURITY.EXE and SESSERV.EXE.

______________________________________________________________________
IBM disclaims all warranties, whether express or implied, including 
without limitation, warranties of fitness and merchantability with 
respect to the information in this document. By furnishing this 
document, IBM grants no licenses to any related patents or copyrights.  
Copyright (c) 1994, 1995 IBM Corporation. Any trademarks and product 
or brand names referenced in this document are the property of their 
respective owners. Consult your product manuals for complete trademark 
information.