Do not use QSECOFR for Transform Services (5770TS1) jobs or functions at V7R5

Per the IBM i 7.5 Security Planning and setting up system security manual: https://www.ibm.com/docs/en/ssw_ibm_i_75/pdf/rzamvpdf.pdf, the use of QSECOFR user profile on the system is discouraged. However Transform Services (5770TS1) jobs, QCTXMGR and QCTXDMON, use QSECOFR user profile at V7R5. The product also does a profile swap to QSECOFR for certain functions, such as creating a PDF instead of a spooled file using OVRPRTF WSCST(*PDF). External audits, such as Sarbanes Oxley, audit the use of QSECOFR and it's usage must explained.

In addition, using QSECOFR when creating a PDF instead of a spooled file to the /QNTC or /QFileSvr.400 file systems, the process fails because there is not a corresponding Windows QSECOFR user ID and password. This has resulted in Permanent Restriction APAR SE79244: OSP-MSGCPFCE06 TRANSFORM SERVICES IS UNABLE TO CREATE A PDF IN QNTC FILE SYSTEM USING OVRPRTF AT V7R5: https://www.ibm.com/mysupport/s/defect/aCI3p0000008nfg/dt284058?language=en_US

The request is that Transform Services use a different user profile than QSECOFR for the QCTXMGR and QCTXDMON jobs and swapping to a different user profile when creating PDFs instead of spooled files using the OVRPRTF command.

Create a new user profile with the necessary authorities to run the jobs and perform the necessary tasks. The user profile can be *DISABLED and the initial menu as *SIGNOFF so no one can actually use the profile. Or, provide a method to change what user profile is used for the jobs and functions.