IBM i 7.6 Upgrade: Features, Requirements, and When to Move
Should you upgrade to IBM i 7.6 now?
IBM i 7.6, generally available since April 18, 2025 per IBM's support page, runs only on Power10 (minimum firmware FW1060) and Power11 servers, so the hardware question comes before the OS question. If you are on IBM i 7.4, IBM's lifecycle page puts end of standard support at September 30, 2026, which argues for moving soon; direct upgrades from both 7.4 and 7.5 are supported. If you are on Power8 or Power9 hardware, 7.6 cannot run there at all, so the real decision is a refresh to Power10 or Power11, or a move to Power in the cloud, before any OS upgrade happens.
Practical decision support
Sequence the hardware decision before the OS upgrade
Use this guide to work out whether your hardware can run 7.6 at all, what the upgrade actually requires from 7.4 or 7.5, and how the September 2026 support deadline for 7.4 should shape your timing.
- Confirm your processor generation first: Power10 with FW1060 or Power11 is the floor, and nothing older qualifies.
- Treat native MFA enablement (password level 4, security level 40 or 50) as its own project, not an upgrade-weekend task.
- If you are on 7.4, plan against September 30, 2026; Service Extension is a paid bridge, not a strategy.
At a glance
Key takeaways
Power10 or Power11 only
IBM's hardware planning page states 7.6 is not supported on Power9 or earlier. Power10 requires firmware FW1060 at minimum. This is the single biggest gating fact for most shops.
Direct from 7.4 is supported
IBM lists 7.4 and 7.5 as valid source releases, so a two-release jump works. Coming from 7.4, review the discontinued-products lists for both 7.5 and 7.6.
Native MFA has prerequisites
The headline TOTP MFA needs QSECURITY 40 or 50 and password level 4, plus the Additional sign-on factor attribute. Password level 4 migration is its own effort.
The 7.4 clock is the forcing function
IBM i 7.4 standard support ends September 30, 2026, and 7.4 was withdrawn from marketing April 30, 2026. Paid Service Extension runs to September 30, 2029, fixes only.
Where IBM i 7.6 Stands in August 2026
IBM announced IBM i 7.6 on April 8, 2025, alongside IBM i 7.5 TR6, and IBM's support page lists general availability as April 18, 2025. It is the current flagship release of the operating system, and its positioning was unambiguous from day one: security. IT Jungle's announcement-day headline called the built-in multi-factor authentication a massive security improvement, quoting IBM's own framing of the release.
The release has stayed current since. IBM i 7.6 TR1 was announced October 7, 2025 and became available November 21, 2025. TR2 was announced July 15, 2026, with TR PTFs available July 24, 2026, shipping alongside IBM i 7.5 TR8. As of this writing, 7.6 TR2 is the current level. Two process changes are worth knowing: beginning in 2025, IBM splits a Technology Refresh into a hardware TR and a software TR that can be announced and delivered separately, per IBM's support pages, and IT Jungle reported that IBM timed the first 2026 refreshes to the readiness of the entry Power11 machine, the Power S1112. Verify current TR levels with IBM when you build your plan.
The Hardware Floor: Power10 and Power11 Only
IBM's hardware planning page for 7.6 states the requirement plainly: IBM i 7.6 is supported only on Power11 and Power10 technology-based servers, with Power10 machines needing firmware FW1060 at minimum, and it is not supported on any server with Power9 or earlier processor technology. That makes 7.6 the first IBM i release many shops cannot install on the hardware they own today. Confirm the exact firmware and HMC levels for your configuration against IBM's planning page before scheduling anything, since minimums can change with later service packs.
For Power8 and Power9 shops, this turns the OS upgrade into a hardware decision first. The support math sharpens the point: per IBM's planning notice, end of standard service for the small Power9 servers (S914, S922, and S924) was January 31, 2026, with IBM Extended Service available after that. The refresh targets exist at every size. Power11 was announced July 8, 2025 with general availability July 25, 2025, including day-one availability in IBM Power Virtual Server, and IBM announced the entry-level Power S1112 on July 15, 2026 with US availability July 24, 2026, positioning it at twice the core performance of the S914 per IBM's launch materials. Whether a refresh or a move to hosted Power makes more sense is a separate analysis; our guide to hardware refresh versus cloud walks that trade-off, and our Power10 versus Power11 comparison covers which generation to buy if you stay on premises.
What You Get: MFA in the Operating System, and More
The headline feature is multi-factor authentication built natively into the operating system. Per IBM's MFA guide for 7.6, the system validates a TOTP (time-based one-time password) code alongside the password, stores the TOTP key in the user profile, works without a network connection between the authenticating device and IBM i, and applies across sign-on points including green-screen sessions and FTP. Coverage across every interface is worth checking rather than assuming: confirm against IBM's MFA guide which authentication points are included for interfaces such as SSH before treating the rollout as complete.
Native MFA has real prerequisites. Per Fortra's compatibility overview and IBM's documentation, it requires security level (QSECURITY) 40 or 50 and password level (QPWDLVL) 4, plus enabling the Additional sign-on factor attribute. Shops running at lower password levels face a migration project before they can switch it on. Third-party tools, including Fortra Powertech MFA and Kisco MFA, do not require those settings, per the vendors, which is one reason some shops will adopt 7.6 first and native MFA later. Kisco also reports that new 7.6 installations default to password level 3, which allows passphrases up to 128 characters, and that upgrades leave the existing value unchanged.
Beyond MFA, Fortra's overview lists PBKDF2 added to the Cryptographic Services APIs for password hashing and MFA management in Navigator for i, including SST and DST MFA configuration through user profile management. IBM's base enhancements page lists Db2 for i SQL additions, with FINAL TABLE support on UPDATE and DELETE statements the most cited item. Java 21 support arrived with 7.6 at launch and was extended to 7.5 with TR7, per IT Jungle. None of these alone justifies an upgrade project, but together with the security posture they make 7.6 the release IBM clearly intends current shops to standardize on.
Upgrade Paths and Planning Steps
IBM lists IBM i 7.4 and 7.5 as the valid source releases for an upgrade to 7.6, so the direct two-release jump from 7.4 is supported. Anything older must step through a supported release first. Coming from 7.4, plan to review the discontinued-products lists for both 7.5 and 7.6, since you absorb two releases of removals in one hop. IBM's software planning page gives the flavor: 7.6 drops the BOOTP server, replaced by the ISC Kea DHCP server, and that is one example among several. Read the IBM i 7.6 Memo to Users for upgrade-impact changes as well; nothing on the scale of the 6.1-era object conversion is documented for 7.4 and 7.5 sources as far as we can tell, but verify that against the Memo rather than assuming zero conversion work.
Two mechanical prerequisites deserve early attention. First, storage: IBM states that the 7.6 Licensed Internal Code needs more load-source space than 7.5, and all models with 7.5 or earlier installed require an additional 2 GB of reserved storage before 7.6 can be installed. Second, verification: IBM recommends running the Pre-Upgrade Verification (PRUV) tool, which runs on a Windows client, to confirm required pre-upgrade steps are complete before you start. Add ISV certification checks to the same list. Fortra, for example, published a 7.6 compatibility statement for its products; do the same diligence for every vendor in your stack, and confirm current 7.6 licensing terms with IBM or your business partner while you budget, since IBM's licensing models have been shifting toward subscription.
Finally, treat native MFA enablement as its own mini-project. The move to password level 4 touches every profile and every interface that authenticates, and it does not have to happen on upgrade weekend. Sequencing it separately keeps the OS upgrade itself boring, which is what you want.
The Support Clock Around 7.6
The urgency of a 7.6 project depends almost entirely on which release and hardware generation you run today. IBM i 7.4 reaches end of standard support on September 30, 2026, per IBM's lifecycle page, and IBM withdrew the 7.4 portfolio from marketing effective April 30, 2026 in announcement letter AD25-0894. After September, 7.4 moves to paid Service Extension through September 30, 2029, which covers fixes only. Our IBM i 7.4 end-of-support guide covers that deadline in depth. IBM i 7.5, generally available since May 10, 2022, had no announced end of standard support as of this writing; recheck IBM's lifecycle page when you plan, since that can change with a single announcement.
| Option | Key dates | What it means for planning |
|---|---|---|
| IBM i 7.4 | Withdrawn from marketing April 30, 2026; end of standard support September 30, 2026; paid Service Extension to September 30, 2029 (fixes only) | The clock driving most 7.6 projects; after September 2026 you pay more for less coverage and get no enhancements |
| IBM i 7.5 | GA May 10, 2022; no end of standard support announced as of this writing | Breathing room for now; verify IBM's lifecycle page at planning time since an announcement can land at any point |
| IBM i 7.6 | Announced April 8, 2025; GA April 18, 2025; current level TR2 with PTFs available July 24, 2026 | The current flagship release; requires Power10 at firmware FW1060 minimum, or Power11 |
| Power9 scale-out servers (S914, S922, S924) | End of standard service January 31, 2026 per IBM's planning notice; IBM Extended Service available after | These machines cannot run 7.6 at all, and their hardware support is already past the standard window |
Upgrade Now or Wait: The Forcing Function
For 7.4 shops, the question mostly answers itself. Standard support ends September 30, 2026, new 7.4 licenses stopped being sold in April 2026, and the direct upgrade to 7.6 is supported. Waiting buys you Service Extension invoices, not options. For 7.5 shops on Power10 or Power11, the calculus is calmer: with no announced 7.5 end date as of this writing, you can schedule 7.6 around ISV certifications, the password level 4 migration for MFA, and your normal maintenance windows rather than a deadline.
For Power8 and Power9 shops, the OS question is premature. 7.6 cannot run on that hardware, so the real decision is the platform: refresh to Power10 or Power11 on premises, or move the workload to a cloud or hosted Power provider where current hardware is someone else's capital plan. Power11 has been available in IBM Power Virtual Server since its July 2025 launch, per IBM's announcement, and managed hosting providers run current Power generations as well; our provider directory profiles the main options independently. Either way, sequencing matters: shops that combine the hardware move and the OS upgrade into one planned project tend to pay for one round of testing instead of two. If you want an independent read on that sequencing before you commit capital, start with our free infrastructure assessment.
Four Common Scenarios
IBM i 7.4 on Power9. The most urgent combination: the OS loses standard support September 30, 2026, the hardware cannot run 7.6, and Power9 scale-out standard service already ended in January 2026. Run hardware and OS as one project, or take Service Extension deliberately as a priced bridge while you decide between a refresh and a cloud move. Do not let it become the default by inaction.
IBM i 7.5 on Power10. The most straightforward path. Confirm firmware FW1060 or later, run PRUV, check ISV certifications, and schedule the upgrade at your convenience. Plan the MFA prerequisites as a follow-on phase.
IBM i 7.4 on Power10. The hardware is ready and the direct upgrade is supported, so the September 2026 date is your milestone. Budget extra time for the two-release delta: discontinued products from both 7.5 and 7.6, the Memo to Users, and a fuller regression pass.
Power8 or older. Hardware first, full stop. Weigh a Power10 or Power11 purchase against hosted and cloud Power options, and treat the 7.6 upgrade as the second step of whichever platform you land on.
Risks and Common Mistakes
Use caution
Planning the OS upgrade before the hardware decision
7.6 runs only on Power10 (FW1060 minimum) and Power11, per IBM. If you are on Power8 or Power9, any 7.6 timeline that does not start with a refresh-or-cloud decision is fiction, and the two decisions should be costed together.
Use caution
Underestimating the password level 4 migration
Native MFA requires QPWDLVL 4 and QSECURITY 40 or 50. Password level changes touch every profile and authenticating interface, so treat this as its own project with its own testing, separate from the upgrade weekend.
Use caution
Assuming your software stack is certified on day one
ISV support for 7.6 arrives vendor by vendor. Fortra published a compatibility statement for its products; confirm every vendor in your stack in writing, and verify current IBM licensing terms before you budget.
Frequently Asked Questions
Can IBM i 7.6 run on Power9?
No. IBM's hardware planning page states that IBM i 7.6 is supported only on Power11 and Power10 technology-based servers, with Power10 requiring a minimum firmware level of FW1060, and that it is not supported on any server with Power9 or earlier processor technology. Power9 and Power8 shops must refresh to Power10 or Power11, or move to a cloud or hosted Power provider, before 7.6 becomes an option at all.
Can I upgrade straight from IBM i 7.4 to 7.6?
Yes. IBM lists IBM i 7.4 and 7.5 as the valid source releases for an upgrade to 7.6, so the two-release jump is supported. Coming from 7.4, review both the 7.5 and 7.6 discontinued-products lists, read the IBM i 7.6 Memo to Users for upgrade-impact changes, and expect a larger delta in system behavior and ISV certifications than a single-release move.
What is the current IBM i 7.6 Technology Refresh level?
As of this writing, IBM i 7.6 TR2. IBM announced TR2 on July 15, 2026, with the TR PTFs available July 24, 2026, alongside IBM i 7.5 TR8. TR1 became available November 21, 2025. Note that beginning in 2025 IBM splits a Technology Refresh into a hardware TR and a software TR that can ship separately, so verify the current levels with IBM when you plan.
What are the prerequisites for the new built-in MFA?
Per IBM's MFA guide and Fortra's compatibility overview, native TOTP multi-factor authentication requires security level (QSECURITY) 40 or 50 and password level (QPWDLVL) 4, plus enabling the Additional sign-on factor attribute. Moving to password level 4 is its own migration project for many shops. Third-party MFA products such as Fortra Powertech MFA and Kisco MFA work without those settings, per the vendors.
When does IBM i 7.4 support end?
IBM's lifecycle page puts end of standard support for IBM i 7.4 at September 30, 2026, with a paid Service Extension available through September 30, 2029 that covers fixes only, no enhancements. IBM also withdrew 7.4 from marketing effective April 30, 2026, per announcement letter AD25-0894, so new 7.4 licenses can no longer be bought. End of support is not end of life, but staying means paying more for less coverage.
Should I wait for a later TR or the next release instead of upgrading now?
It depends on where you sit. On 7.4, the September 30, 2026 end of standard support argues against waiting. On 7.5 on Power10 or Power11, no 7.5 end date had been announced as of this writing, so you can schedule 7.6 around ISV certifications and MFA planning. On Power8 or Power9, hardware comes first: 7.6 cannot run there, and IBM's planning notice put end of standard service for the small Power9 servers at January 31, 2026.
How much extra disk does the 7.6 upgrade need?
IBM's software planning page states that the 7.6 Licensed Internal Code needs more load-source storage than 7.5: all models with 7.5 or earlier installed require an additional 2 GB of reserved storage before 7.6 can be installed. Run IBM's Pre-Upgrade Verification (PRUV) tool, which runs on a Windows client, to catch this and other prerequisites early.
Sources
- IBM Support: IBM i 7.6.0 (GA date, resave and TR levels)
- IBM Support: Planning to upgrade to IBM i 7.6 (Hardware)
- IBM Support: Planning to upgrade to IBM i 7.6 (Software)
- IBM Support: Upgrade IBM i Operating System to 7.6 (valid source releases)
- IBM Support: Pre-Upgrade Verification Tool for IBM i
- IBM Support: IBM i 7.6 Base Enhancements (Db2, security, Navigator)
- IBM i 7.6 Multi-factor Authentication guide (PDF)
- IBM i 7.6 Memo to Users (PDF, upgrade-impact changes)
- IBM announcement: IBM i 7.6 Technology Refresh 2
- IBM announcement: IBM i 7.4 withdrawal from marketing and change in service level (AD25-0894)
- IBM Support: IBM i 7.4.x lifecycle
- IBM Support: IBM i 7.5.x lifecycle
- IBM planning notice: Power9 maintenance changes, end of standard service Jan 31, 2026 (PDF)
- IBM Newsroom: New Power systems including Power S1112 (Jul 15, 2026)
- IT Jungle: IBM i 7.6 Delivers Massive Security Improvement With Built-In MFA (Apr 8, 2025)
- IT Jungle: Big Blue Finally Unveils First IBM i Tech Refreshes Of 2026 (Jul 20, 2026)
- Fortra: What You Need to Know: IBM i 7.6 Overview and Fortra Compatibility
- Kisco U: New Security Features in IBM i 7.6
Facing a Hardware Decision Before You Can Even Touch 7.6?
Get an independent, directional read on whether a Power10 or Power11 refresh, managed hosting, or Power in the cloud should come first, and how to time the OS upgrade behind it.