IBM Tivoli Security Administrator for RACF provides full management of RACF data

Transcription

1 Software Announcement April 12, 2005 IBM Tivoli Security Administrator for RACF provides full management of RACF data Overview IBM Tivoli Security Administrator for RACF R1 provides a GUI to the powerful security management functions of Resource Access Control Facility (RACF), providing a variety of views of the RACF database and making specific information easy to find and update. Since Tivoli Security Administrator for RACF does not require the knowledge of RACF commands, new administrators are empowered to manage RACF using their existing skills. Meanwhile, experienced administrators can be much more productive, and help-desk personnel can quickly research and solve security-related problems. In addition, the standards-based API provides access to RACF data from applications running on other platforms. Tivoli Security Administrator for RACF R1 can help you: Query and view the entire RACF database. Every field for every type of RACF profile is visible, searchable, and sortable (except for very sensitive fields, such as passwords). This includes not just users and groups, but datasets, resources, access permissions, and system options. Numerous security administration views of the RACF database are provided as well as the ability to customize and create your own. The data is always current, and you can search on any combination of fields. Maintain the entire RACF database. Most RACF fields are modifiable via an easy-to-use Java -based GUI or new Interactive Structured Programming Facility (ISPF) panels. All updates are done under the authority of the authenticated RACF administrator. Detailed, comprehensive pop-up help explains every RACF field. Field validation routines check the format and content of every field before sending the change to RACF. Manage multiple RACF databases. Consolidated searches across multiple RACF databases and copying users between databases are all part of its multiple database capabilities. Access and update RACF data from applications running on non-z/os platforms via standards-based application programming interfaces. Tivoli Security Administrator for RACF provides a modern, flexible, and powerful interface to view and maintain all types of profiles in the RACF database. Whether the administrator uses traditional interfaces to RACF or the new interfaces provided by Tivoli Security Administrator for RACF, the underlying security features and controls of RACF are maintained. For more information on Tivoli Security Administrator for RACF, visit /tivoli/products /security-admin-racf/ Key prerequisites Server: z/os V1.4, or later, RACF, UNIX System Services, and TCP/IP Client: Microsoft Windows 2000, Windows XP, or Windows 2003 At a glance Tivoli Security Administrator for RACF R1 helps: Improve RACF administrator productivity with new tools and views Reduce training costs via an easy-to-use Java-based GUI or new ISPF panels Improve audit readiness and troubleshooting capabilities with flexible queries against the RACF database Minimize repetitive tasks by providing one interface to multiple RACF databases Increase flexibility by enabling delegated security administration Improve application access to RACF data For ordering, contact: Your IBM representative, an IBM Business Partner, or the Americas Call Centers at 800-IBM-CALL Reference: LE001 Planned availability date April 22, 2005 This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

2 Description Tivoli Security Administrator for RACF R1 can make RACF administration more efficient and more effective with an easy-to-use Java-based interface to one or more RACF databases. An ISPF interface is also provided for experienced administrators who prefer a more traditional interface. Finding and maintaining RACF data can be done using any of the following methods provided by Tivoli Security Administrator for RACF: Administrators can use a tree view of the RACF database, drilling down through user IDs, groups, datasets, and resources to find the information they need. For example, an administrator can quickly navigate the tree to find which segments belong to a specific user. A variety of customizable views or interactive reports allow administrators to find and view RACF data, based upon any combination of RACF fields. When the list of matching entries is displayed, administrators can then view or modify entries, based on their RACF authorizations. For example, an administrator can search for users by fields in the installation data, find groups based on the OMVS group ID, search for resources based on owner, or search for discrete datasets based on volume. Tools are provided to perform specific tasks that previously required multiple steps or commands to complete. This includes the ability to copy profiles, both within a single RACF database and from one RACF database to another. Other examples include tools to copy users (including segments, group connects, and permissions), copy groups, copy resources, and copy datasets. Tivoli Security Administrator for RACF consists of three components: Server: Running as a started task under UNIX System Services under z/os, the Security Administrator server makes the entire RACF database available to the ISPF and Windows clients. ISPF client: Running under TSO on z/os, this ISPF interface simplifies RACF administration. Windows client: Running on Windows, this Java-based interface simplifies RACF administration under Windows. The server provided with Tivoli Security Administrator for RACF R1 runs under UNIX System Services of z/os. One Security Administrator server is required for each RACF database maintained by a client. Both the Java-based Windows client and the ISPF client included with Tivoli Security Administrator for RACF can interact with multiple Security Administrator servers, providing administrators the ability to manage multiple RACF databases from one client session. In addition to supporting standard TCP/IP communication between the Windows client and the Security Administrator server, Tivoli Security Administrator for RACF supports Secure Sockets Layer (SSL), delivering an additional level of security. TCP/IP and SSL access to the Security Administrator server is also available through a standards-based API. By using these APIs, applications in your network can access RACF data. For customers wanting to delegate portions of the RACF administration tasks outside the central IT staff, Tivoli Security Administrator for RACF provides granular control over delegated administration based on any RACF field or combination of fields. For example, it s possible to restrict password reset functionality to administrators in one particular group, or administrators owned by a specific user, or administrators with certain specific fields in their Installation Data. All users of Tivoli Security Administrator for RACF are authenticated using their RACF user ID and password. Since all updates to the RACF database are done under the signed on user s authority, Tivoli Security Administrator for RACF only allows users to do what they are authorized, using RACF s traditional interface. Tivoli Security Administrator for RACF offers RACF installations the ability to more effectively and efficiently manage their RACF databases from an easy-to-use Java-based Windows client or an ISPF interface on z/os. Section 508 of the U.S. Rehabilitation Act Tivoli Security Administrator for RACF R1 is capable as of April 22, 2005, when used in accordance with IBM s associated documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act, provided that any assistive technology used with the product properly interoperates with it. A U.S. Section 508 Voluntary Product Accessibility Template (VPAT) can be requested via IBM s Web site at /product_accessibility/index.html Unit-based pricing Unit pricing for eligible zseries IPLA programs enables a lower cost of incremental growth and enterprise aggregation. Each zseries IPLA product with Unit pricing has a single price per Unit and a conversion matrix, called Unit Exhibit, for converting from some designated measurement to Units. Most commonly, Millions of Service Units (MSUs) is the measurement designated by IBM to be converted to Units. Some other measurements are engines or messages. Since MSUs are the most common measurement, that measurement will be used for the remainder of this description. Unit pricing offers price benefits for customers. For each zseries IPLA program with Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity. Each of the various Unit Exhibits stipulate that the larger your required license capacity, the fewer Units per MSU you will need. Unit Exhibits are uniquely identified by a three digit code and referred to using the nomenclature VUExxx, where xxx is the three digit code. Subsequent acquisitions of Unit priced programs offers additional price benefits for customers. The quantity of each zseries IPLA program that you have acquired is referred to as entitled license capacity. If you wish to grow your entitled license capacity for a zseries IPLA program, the calculation to determine additional needed Units is based upon the number of Units already acquired. For each zseries IPLA program with Unit Pricing, you should: Determine the required license capacity, in MSUs Aggregate the MSUs across the enterprise Convert the total MSUs to Units, using the applicable Unit Exhibit, and

3 Multiply the price per Unit by the total number of Units to determine the total cost. To simplify conversion from the designated measurement to VUs or vice-versa, use the Unit Converter Tool. For additional information or to obtain a copy of the Unit Converter Tool, visit the Unit Converter Tool Web site Note that Units of a given product cannot be exchanged, interchanged, or aggregated with Units of another product. To determine the required license capacity for the zseries IPLA program you selected, refer to the Terms and conditions section. IPLA and Subscription and Support considerations IPLA licenses can be transferred from one machine to another within, but not limited to an enterprise. The customer may aggregate the capacity for all the processors the product is operated on to achieve a more economic price. This will result in a single Proof of. It is the customer s responsibility to manage the distribution of Units within the limits of the entitlement of the product license. Subscription and Support must cover the same capacity as the product license entitlement. Subscription and Support will be available in the country in which the agreement is made. Business Partner information If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld ID and password are required (use IBM ID). BP Attachment for Announcement Letter mem/sla.jsp?num= Trademarks RACF, Tivoli, z/os, and zseries are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Microsoft and Windows are trademarks of Microsoft Corporation. Java is a trademark of Sun Microsystems, Inc. UNIX is a registered trademark of the Open Company in the United States and other countries. Other company, product, and service names may be trademarks or service marks of others

4 IBM US Announcement Supplemental Information April 12, 2005 Offering Information Product information is available via the Offering Information Web site Publications Other than the Program Directory, no hardcopy publications are shipped with this program. Displayable softcopy publications: Tivoli Security Administrator for RACF R1 manuals are offered in displayable softcopy form as PDF files. The displayable manuals are available on the product Web site /security-admin-racf/ On the client machine One of the following: -- Windows XP Home -- Windows XP Professional with Service Pack 1 -- Windows 2000 Professional (with Service Pack 3) -- Windows Server 2003 (Web, Standard, Enterprise, or Datacenter Edition in 32-bit) JRE V1.4.2, or later. JRE V1.4.2 will be installed on the client machine as part of Tivoli Security Administrator for RACF. Limitations: Tivoli Security Administrator for RACF does not currently administer RACF digital certificates or RACF Remote Resource Sharing Facility (RRSF). In addition, Tivoli Security Administrator for RACF cannot be used to vary the RACF database (the RVARY command). Technical information Packaging Planning information Specified operating environment Hardware requirements: Tivoli Security Administrator for RACF R1 will operate on any hardware that supports the prerequisite software. In addition, the Tivoli Security Administrator for RACF client has the following disk requirements: 5 MB of disk space for the client application. 48 MB of disk space for the Java Runtime Environment (JRE) V JRE V1.4.2 is delivered and installed as part of Tivoli Security Administrator for RACF. Software requirements: All prerequisites and corequisites for these products apply. The products listed here are supported only while service is available for those products. Tivoli Security Administrator for RACF R1 requires the following: On the zseries or S/390 server z/os V1.4 (5694-A01), or later UNIX System Services, available as a base element of z/os Resource Access Control Facility (RACF) provided in z/os Security Server, a priced optional feature of z/os TCP/IP, available as part of Communications Server for z/os, available as a base element of z/os Tivoli Security Administrator for RACF R1 is distributed with: International Program License Agreement (Z ) Hardcopy License Information document An SMP/E installable tape containing the product code, including the workstation client code Hardcopy Program Directory Security, auditability, and control Tivoli Security Administrator for RACF uses the security and auditability features of the operating system software. In addition, all changes made to the RACF database via Tivoli Security Administrator for RACF occur under the RACF user ID of the administrator using this product. It is not possible for an administrator to use this product to perform changes that RACF would not normally allow that administrator to perform via other mechanisms, such as TSO. All changes made to the RACF database using Tivoli Security Administrator for RACF are subject to the current RACF auditing options in place at the customer site. Changes made via Tivoli Security Administrator for RACF cannot bypass existing RACF auditing requirements. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

5 IBM Tivoli Enhanced -Based Pricing Millions of Service Units (MSU) An MSU is defined as millions of Central Processing Unit (CPU) service units per hour; the measure of capacity used to describe the computing power of the hardware processors on which S/390 or zseries software runs. Processor MSU values are determined by the hardware vendor, IBM, or Software Compatible Vendors (SCVs). For more detailed information about zseries software pricing, go to /library/refguides/sw_pricing.html Standby or backup systems For programs running or resident on backup machines, IBM defines three types of situations: cold, warm, and hot. In the cold and warm situations, a separate entitlement for the copy on the backup machine is normally not required and typically no additional charge applies. In a hot backup situation, the customer needs to acquire another license or entitlements sufficient for that server. All programs running in backup mode must be solely under the customer s control, even if running at another enterprise s location. As a practice, the following are definitions and allowable actions concerning the copy of the program used for backup purposes: Cold A copy of the program may reside, for backup purposes, on a machine as long as the program is not started. There is no additional charge for this copy. Warm A copy of the program may reside for backup purposes on a machine and is started, but is idling, and is not doing any work of any kind. There is no additional charge for this copy. Hot A copy of the program may reside for backup purposes on a machine, is started, and is doing work. The customer must acquire a license or entitlements for this copy and there will generally be an additional charge. Doing work, includes, for example, production, development, program maintenance, and testing. It also could include other activities such as mirroring of transactions, updating of files, synchronization of programs, data or other resources (for example, active linking with another machine, program, database, or other resource, and so on), or any activity or configurations that would allow an active hot switch or other synchronized switch over between programs, databases, or other resources to occur. In the case of a program or system configuration that is designed to support a high availability environment by using various techniques (for example, duplexing, mirroring of files or transactions, maintaining a heartbeat, active linking with another machine, program, database, or other resource, and so on), the program is considered to be doing work in the hot situation and a license or entitlement must be purchased. Units A Unit is a metric used to compute license quantities, is program specific, and is typically only used on products managing zseries systems. Ordering information The programs in this announcement all have Unit-Based Pricing. Program unit number Program name exhibit 5698-A45 Tivoli Security Administrator VUE007 for RACF For each zseries International Program License Agreement (IPLA) program with Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity. Your required license capacity is based upon the following factors: The zseries IPLA program you select The applicable Unit Exhibit The applicable Terms Unit Exhibit VUE007 MSUs MSUs units/ minimum maximum MSU Base Tier A Tier B Tier C Tier D Units for mainframes without MSU ratings: Hardware MP3000 H30 6 MP3000 H50 8 MP3000 H70 12 ESL Models 2 units/ machine Ordering example: The total number of Units is calculated according to the following example. If your required license capacity is 1,500 MSUs for your selected zseries IPLA product, the applicable Units would be: Translation from MSUs to Units units/ MSUs * MSU = units Base 3 * 1.00 = 3.00 Tier A 42 *.45 = Tier B 130 *.36 = Tier C 140 *.27 = Tier D 1,185 *.20 = Total 1, When calculating the total number of Units, the sum is to be rounded up to the next integer. Ordering z/os through the Internet ShopzSeries provides an easy way to plan and order your z/os ServerPac or CBPDO. It will analyze your current

6 installation, determine the correct product migration, and present your new configuration based on z/os. Additional products can also be added to your order (including determination of whether all product requisites are satisfied). ShopzSeries is available in the U.S. and several countries in Europe. In countries where ShopzSeries is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order via the traditional IBM ordering process. For more details and availability, visit the ShopzSeries Web site at /ShopzSeries/ShopzSeries.jsp The products in this announcement have one charge unit: Units. Ordering information for 5698-A45 Basic license To order, specify the program product number and the appropriate license or charge option. Also, specify the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW. Program Name: Tivoli Security Administrator for RACF Program PID: 5698-A45 License option/ identifier Description pricing metric S011L47 Tivoli Security 1 Unit Administrator 250 Units for RACF Orderable supply ID: Language Distribution medium S011L5N English 3480 tape cartridge Single version charging: To elect single version charging, the customer must notify and identify to IBM the prior program and replacement program and the machine on which the programs are operating. New licensees Orders for new licenses will be accepted now. Shipment will begin on the planned availability date. Basic license On/Off Capacity on Demand Tivoli Security Administrator for RACF is eligible for On/Off Capacity on Demand (OOCoD) with a Temporary Use Charge calculated based on MSUs per day usage. Program name: Tivoli Security Administrator for RACF, one-time charge (OTC) Program PID 5698-A45 License option/ identifier Description pricing metric S011L47 Tivoli Security Basic OTC, Administrator Per 1 MSU-day for RACF TUC Tivoli Security Basic OTC, Administrator Per 250 MSU-day for RACF TUCs Subscription and Support To receive voice technical support via telephone during normal business hours, and future releases and versions at no additional charge, Subscription and Support must be ordered. The capacity of Subscription and Support ( Units) must be the same as the capacity ordered for the product licenses. To order, specify the support program number, media feature number, and the entitlement entity MMID number. IBM is providing Subscription and Support for this product via a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Support (IAAS). This offering: Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours. Entitles customers to future releases and versions at no additional charge. Note that customer is not entitled to new products. When Subscription and Support is ordered, the charges will renew automatically annually unless cancelled by the customer. To decline Subscription and Support, specify the program number and the Decline (no-charge) option listed below. Subscription and Support PID: 5698-S69 License option/ identifier Description pricing metric S011L5D Tivoli Security 1 Unit Administrator 250 Units for RACF S&S Tivoli Security 1 MSU Administrator 250 MSUs for RACF S&S Registration Orderable supply ID: Language Distribution medium S011L5L English Hardcopy memo Basic machine-readable material The distribution media features in the following table apply to program numbers 5698-A45 and 5698-S69. To order, select the distribution medium feature for the desired program number. Product number Language identifier Distribution medium 5698-A45 English S011L5N 3480 tape cartridge 5698-S69 English S011L5L Hardcopy memo Customization option for z/os Select the following feature number to customize your order if running on the z/os platform. This feature can be specified on the initial or MES orders. Feature number Description 3450 Satellite electronic delivery

7 Customized Offerings Product media is shipped only via Customized Offerings (for example, CBPDO, ServerPac, SystemPac ). Non-customized items (CDs, diskettes, source media, media kits) will continue to be shipped via the stand-alone product. Terms and conditions Licensing: IBM IPLA. Proofs of (PoE) are required for all authorized use. This product is licensed under the IBM IPLA, the associated Agreement for Acquisition of Support, and the Addendum for Support (Z ), which provides for support with ongoing access to releases and versions of the program. This program has a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours) as well as access to updates, releases, and versions of the program as long as support is in effect. S/390 and zseries IBM Operational Support Services SoftwareXcel is an option for those customers who desire added services. Limited warranty applies: Yes Warranty: This program has warranty for a minimum of one year from acquisition from IBM or authorized IBM Business Partner. The warranty provided to the customer, for at least one year from acquisition, is access to databases (read Web sites) for program information and FAQs, including any known fixes to defects, which the customer can download or obtain otherwise and install at leisure. Program support: Enhanced Support, called Subscription and Support, includes telephone assistance (voice support for defects during normal business hours) as well as access to updates, releases, and versions of the program as long as support is in effect. The customer will be notified of discontinuance of support with 12 months notice. Money-back guarantee: If for any reason you are dissatisfied with the program, return it within 30 days from the invoice date, to the party (either IBM or its reseller) from whom you acquired it, for a refund. This applies only to your first acquisition of the program. Copy and use on home/portable computer: No Volume orders (IVO): No Passport Advantage applies: No Software maintenance applies: No IBM operational support services SoftwareXcel: No iseries software maintenance applies: No Variable charges apply: No Educational allowance available: Yes, 15% education allowance applies to qualified education institution customers. Sub-capacity terms and conditions For each zseries IPLA program with Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity. Your required license capacity is based upon the following factors: The zseries IPLA program you select The applicable Unit Exhibit The applicable Terms For more information on the Unit Exhibit for the zseries IPLA program you selected, refer to the Ordering information section. Program number Program name Terms 5698-A45 Tivoli Security Full-machine-based Administrator for RACF Full-capacity mainframes In cases where full-capacity is applicable, the following terms apply: Execution-based, z/os-based, full-machine-based: The required capacity of a zseries IPLA program with these terms equals the MSU-rated capacity of the machines where the zseries IPLA program executes. For more information on mainframe MSU-rated capacities, refer to The System/370, System/390, and zseries Machine Exhibit (Z ) or visit the Mainframes section of the zseries Exhibits Web site Reference-based: The required license capacity of a zseries IPLA program with these terms equals the license capacity of the applicable monthly license charge (MLC) program. This MLC program is called the parent program. Sub-capacity mainframes In cases where sub-capacity is applicable, the following terms apply: Execution-based: The required capacity of a zseries IPLA sub-capacity program with these terms equals the capacity of the LPARs where the zseries IPLA program executes. z/os-based: The required license capacity of a zseries IPLA program with these terms equals the license capacity of z/os (and z/os.e) on the machines where the zseries IPLA program executes. Reference-based: The required license capacity of a zseries IPLA program with these terms equals the license capacity of the applicable monthly license charge (MLC) program. This MLC program is called the parent program. Full-machine-based: The required license capacity of a zseries IPLA program with full-machine-based terms equals the MSU-rated capacity of one or more of the machines where the zseries IPLA program executes. For more information on mainframe MSU rated capacities, refer to The System/370, System/390, and zseries Machine Exhibit (Z ) or visit the Mainframes section of the zseries Exhibits Web site

8 For more information on sub-capacity zseries IPLA terms and conditions, refer to Software Announcement , dated August 10, Additional information for Products with Reference-Based Terms zseries IPLA sub-capacity programs with reference-based terms adds value to the parent program across the environment, regardless of where in environment the zseries IPLA program executes. An environment is defined as either a single/stand-alone machine or a qualified Parallel Sysplex. Customers may have one or more different environments across their enterprise. To determine the required license capacity for each zseries IPLA program with referenced-based terms, each environment should be assessed separately. When a zseries IPLA sub-capacity program with reference-based terms is used in a qualified Parallel Sysplex environment the required license capacity of the zseries IPLA program must equal with the license capacity of the parent program across the Parallel Sysplex. Qualified Parallel Sysplex refers to one 1. That meets the criteria defined in Hardware Announcement , dated January 13, Where MLC pricing is aggregated across the Sysplex Sub-capacity eligibility: To be eligible for sub-capacity charging on select zseries IPLA programs, you must first implement and comply with all terms of either sub-capacity Workload License Charges (WLC) or sub-capacity Entry Workload License Charges (EWLC). To implement sub-capacity WLC or EWLC, a machine must be zseries (or equivalent). On that machine: All instances of the OS/390 operating system must be migrated to the z/os (or z/os.e) operating systems Any licenses for the OS/390 operating system must be discontinued All instances of the z/os operating (or z/os.e) systems must be running in z/architecture (64-bit) mode For that machine, you must create and submit a Sub-Capacity Report to IBM each month. Sub-Capacity Reports must be generated using the Sub-Capacity Reporting Tool (SCRT). For additional information or to obtain a copy of SCRT, visit the zseries Software Pricing Web site You must comply with all of the terms of the WLC or EWLC offering, whichever is applicable: The complete terms and conditions of sub-capacity WLC are defined in the IBM Customer Agreement Attachment for zseries Workload License Charges (Z ). The complete terms and conditions for sub-capacity EWLC are defined in the IBM Customer Agreement Attachment for z800 and z890 Software License Charges (Z ). Additionally, you must sign and comply with the terms and conditions specified in the amendment to the IPLA contract Amendment for zseries Platform Programs Sub-Capacity Pricing (Z or higher). Once the amendment is signed, the terms in the amendment replace any and all previous zseries IPLA sub-capacity terms and conditions. On/Off Capacity on Demand To be eligible for On/Off Capacity on Demand pricing, customers must be enabled for temporary capacity on the corresponding hardware, and the required contract Z , Attachment for Customer Initiated Upgrade and IBM On/Off Capacity on Demand Software must be signed prior to use. IBM Electronic Services IBM Global Services has transformed its delivery of hardware and software support services to put you on the road to higher systems availability. IBM Electronic Services is a Web-enabled solution that provides you with an exclusive, no-additional-charge enhancement to the service and support on the IBM. You should benefit from greater system availability due to faster problem resolution and preemptive monitoring. IBM Electronic Services is comprised of two separate, but complementary, elements: IBM Electronic Services news page and IBM Electronic Service Agent. IBM Electronic Services news page provides you with a single Internet entry point that replaces the multiple entry points traditionally used by customers to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems. The IBM Electronic Service Agent is a no-additional-charge software that resides on your IBM system. It is designed to proactively monitor events and transmit system inventory information to IBM on a periodic, customer-defined timetable. The IBM Electronic Service Agent tracks system inventory, hardware error logs, and performance information. If the server is under a current IBM maintenance service agreement or within the IBM warranty period, the Service Agent automatically reports hardware problems to IBM. Early knowledge about potential problems enables IBM to provide proactive service that maintains higher system availability and performance. In addition, information collected through the Service Agent will be made available to IBM service support representatives when they are helping answer your questions or diagnosing problems. To learn how IBM Electronic Services can work for you, visit

9 Prices Pricing for 5698-A45, an MSU-based z/os offering Program Description number entity MMID License option OTC Security 5698-A45 S011L47 1 Unit $ 1,600 Administrator 250 Units 40,000 for RACF 1 OOCoD 4 Temporary Use Charge 250 OOCoD 1,000 Temporary Use Charges Program Annual Description number entity MMID License option charge Security 5698-S69 S011L5D 1 Unit $ 240 Administrator 250 Units 60,000 for RACF Decline (no 0 One Year (charge) Subscription Per MSU S&S 0 and Support Registration Per 250 MSUs S&S 0 Registration Order now To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business Partner. To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU ( ). Phone: 800-IBM-CALL ( ) Fax: 800-2IBM-FAX ( ) Internet: ibm direct@vnet.ibm.com Mail: IBM Americas Call Centers Dept: IBM CALL, 11th Floor 105 Moatfield Drive North York, Ontario Canada M3B 3R1 Reference: LE001 The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products. Note: Shipments will begin after the planned availability date. Trademarks iseries, System/370, z/architecture, and Electronic Service Agent are trademarks of International Business Machines Corporation in the United States or other countries or both. RACF, Tivoli, S/390, the e-business logo zseries, z/os, eserver, SystemPac, Passport Advantage, System/390, Parallel Sysplex, and OS/390 are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Windows is a trademark of Microsoft Corporation. Java is a trademark of Sun Microsystems, Inc. UNIX is a registered trademark of the Open Company in the United States and other countries. Other company, product, and service names may be trademarks or service marks of others