IBM z/os Operating System

Transcription

1 Mary I. Hubley, MaryAnn Richardson Product Report 27 August 2003 IBM z/os Operating System Summary IBM z/os, which supports the zseries 990 server, provides high-level availability, scalability and quality of service to meet the unpredictable workload demands of today s computing environments. Table of Contents Overview Analysis Pricing Competitors Strengths Limitations Insight List Of Tables Gartner Reproduction of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The reader assumes sole responsibility for the selection of these materials to achieve its intended results. The opinions expressed herein are subject to change without notice.

2 Corporate Headquarters IBM Old Orchard Road Armonk, NY 10504, U.S.A. Tel: Fax: Internet: Overview z/os is the flagship operating system for IBM s zseries mainframe servers, which also support z/os.e, Linux, z/vm, VSE/ESA and TPF. z/os is also the upgrade to OS/390 v The current version of z/os, v.1.4, runs on the following IBM servers: zseries z990 zseries z900 zseries z800 G5 and G6 models of S/390 Parallel Enterprise Servers All models of the Multiprise 3000 Enterprise Server Enhancements added to z/os 1.4 include self-optimizing improvements, such as better dynamic balancing of batch workloads across a sysplex and better self-tuning. Specifically, version 1.4 provides: Improved operator messaging architecture Concurrent access to Virtual Storage Access Method (VSAM) datasets for both batch and Customer Information Control System (CICS) online transactions IBM Health Checker for z/os and Sysplex in the msys for Operations Enterprise Identity Mapping (EIM) for managing multiple user registries across an enterprise Updates to Data Facility Storage Management Subsystem (DFSMS) Removable Media to help improve usability, availability and security New versions of the optional Open Systems Adapter Support Facility (OSA/SF) and Device Support Facilities (ICKDSF) 27 August

3 Base Control Program (BCP) Bulk Data Transfer (BDT) BookManager BookServer C/C++ IBM Open Class Library Communications Server (CS z/os) Cryptographic Services Distributed Computing Environment Clients (DCE) Application Support DCE Base Services (The Open Group [OSF] DCE Level 1.1) Provides essential operating system services: Input/output (I/O) configuration program (IOCP) Workload manager (WLM) System management facilities (SMF) Z/OS Unix System Services (z/os Unix) kernel Unicode support Program management binder Provides base services for data transfer between computer systems; required for optional BDT features. Converts BookManager documents to HTML for display through a Web browser. Provides a set of C++ class libraries that can be used by applications at runtime. No license for C/C++ with Debug Tool or C/C++ without Debug Tool is required. Includes: Systems Network Architecture (SNA) Services includes AnyNet function; uses Data Encryption Standard (DES) algorithm for encryption IP Services uses the firewall Commercial Data Masking Facility (CDMF) DES 40-bit, Simple Network Management Protocol version 3 (SNMPv3) DES 56-bit and IPsec DES 56-bit algorithm for encryption HiperSockets 16 Internal LANs Support support for up to 16 internal LANs on all z990 servers HiperSockets Internal-Queued-Direct (IQD) Channel Path Identifier (CHPID) Spanning Support allows z990 TCP/IP stacks to communicate using HiperSockets channels configured to multiple Channel Subsystems and transparently shared by any or all configured logical partitions (LPARs) without regard to the Logical Channel Subsystem (LCSS) to which the LPAR is configured Base cryptographic functions: Datasecrecy Data integrity Personal identification Digital signatures Management of cryptographic keys Includes: Integrated Cryptographic Service Facility (ICSF) Open Cryptographic Services Facility (OCSF) System Secure Sockets Layer (SSL) Facilitates the interaction between DCE and CICS or Information Management System (IMS) regions. Provides services for developing and running client/server applications: Remote procedure call Directory Security Distributed time services Limited DES algorithm for encryption 27 August

4 DFSMS Data Facility product (DFSMSdfp) Distributed File Service (DFS) Encina Toolkit Executive Environmental Record Editing and Printing Program (EREP) Enterprise Systems Connection (ESCON) Director Support First Failure Support Technology (FFST) Graphical Data Display Manager (GDDM) Hardware Configuration Definition (HCD) High Level Assembler (HLASM) IBM HTTP Server Device Support Facility (ICKDSF) IBM License Manager (ILM) Job Entry Subsystem 2 (JES2) Language Environment Magnetic Ink Character Recognition/Optical Character Recognition (MICR/OCR) Provides storage, data, program and device management functions. Supports: OSF DFS Level (uses 56-bit DES encryption) zseries File System (zfs) Server Message Block (SMB version 2) file/print services (uses 56-bit DES encryption) Toolset for developing client components of distributed transactional applications. Edits and prints reports for records placed in the error recording dataset (ERDS). Reports on ESCON director device errors. Provides immediate notification and first fail data capture for software events. Provides presentation services and device-driving capability; includes PC Link (PCLK) and Restructured Extended Executor Language (REXX) code. Defines a system s operating system configuration and processor hardware configuration. Integrates earlier assembler version functions, adding extensions and improvements. Web server; supports SSL, Fast Response Cache Accelerator, multiple IP addresses, proxy authentication and double-byte character sets. Provides functions for installation and use of IBM direct-access storage device (DASD). X/Open Software License Management (XSLM)-based software license management tool. Accepts submission of work for the BCP; exercises independent control over its job processing functions. Runtime environment for programs generated with C, C++, COBOL, FORTRAN and PL/1; uses limited DES algorithm. Provides device support code to support a range of magnetic and optical devices. 27 August

5 Managed System Infrastructure for Operations (msys for Operations) Managed System Infrastructure for Setup (msys Setup) Network File System Interactive System Productivity Facility (ISPF) Open Systems Adapter/Support Facility (OSA/SF) System Modification Product/Extended (SMP/E) Text Search Terminal Input/Output Controller (TIOC) TSO/E z/os Unix System Services (z/os Unix) 3270 PC File Transfer Program Optional Features BDT File-to-File BDT SNA Network Job Entry (NJE) BookManager BUILD BookManager READ Automates operator tasks and events for Parallel Sysplex configuration. Features: IBM Health Checker for z/os and Sysplex Hardware policy validation Critical ENQ resources detection Ability to remove failed systems from a Parallel Sysplex Provides graphical user interface (GUI) for defining and customizing configuration parameters. TCP/IP network file server. Consists of Network File System Client and Network File Server. Supports Berkeley sockets. Full-screen editor and dialogue manager. Provides user interface for monitoring and controlling the zseries Open Systems Adapter feature for connecting zseries networks to LANs and WANs that support IP and SNA protocols. Software installation, maintenance and inventory management tool. Includes: IBM Text Search Engine database search engine NetQuestion Solution Web server search engine Allows console services and Time Sharing Option/Extensions (TSO/E) to communicate with terminal hardware. Interactive terminal interface; includes command lists (CLISTS) and REXX. Standard command interface for interactive Unix users. Includes: Applications services Shell, Utilities, Debugger and Parallel Environment Connection Manager Integrated Call Level Interface (ICLI) Process Manager Transfers files from the host to the workstation for offline data manipulation, updating or correction or for the transfer and storage of local data in the host system. Allows datasets to be copied to and from two z/os systems in a SNA network. Allows JES3 users to transmit jobs, output, commands and messages from one computer system to another within a SNA network. Creates softcopy documents that can be used by any of the BookManager products, such as BookManager READ or BookManager BookServer. Displays, searches and manages online documents and bookshelves. 27 August

6 C/C++ with Debug Tool C/C++ Without Debug Tool Communications Server Security Level 3 DFSMS Data Set Services (DFSMSdss) DFSMS Hierarchical Storage Manager (DFSMShsm) DFSMS Removable Media Manager DFSMSrmm) Data Facility Sort (DFSORT) GDDM-Presentation Graphics Feature (PGF) GDDM-REXX Hardware Configuration Manager (HCM) HLASM Toolkit IBM HTTP Server NA Secure InfoPrint Server JES3 OCSF Security Level 3 Resource Management Facility (RMF) Includes: Two C compilers: one at z/os v.1r.2 level and one at OS/390 r.10 level (for migration purposes only) Two C++ compilers: one at z/os v.1r.2 level (supports International Organization for Standardization [ISO] 198 Standard level C++) and one at OS/390 R10 level (for migrations purposes only) Debug tool C/C++ application development utilities Same as C/C++ with Debug Tool but without Debug tool. Works in conjunction with CS z/os to provide greater than 64-bit encryption using the Triple DES (TDES) algorithm. Copies and moves data for backup and recovery and to reduce free-space fragmentation. Provides automated DASD storage management, including space management for low inactive data, and availability management for accidental data loss caused by local and site disasters; also supports tape media. Requires DFMSdss. Manages removable media as one enterprisewide library across systems that can share DASD. Sorts, merges and copies data. Set of programs for creating presentation material in a variety of styles. Used to prototype GDDM applications and create small routines and utility programs. Personal workstation-client/server interface to the HCD. Provides application development, debugging and recovery tools. Adds support for 128-bit SSL encryption to IBM HTTP Server. Allows any TCP/IP-connected workstation to send files to any z/os printer. Includes IP PrintWay, NetSpool, Print Interface, Printer Inventory Manager and Transform Manager. Accepts the submission of work for the BCP; exercises centralized control over its job processing functions. Adds support for TDES, DES and Rivest code 2 (RC2) RC4/RC5 algorithms for encryption to base OCSF Cryptographic Services. Collects resource use data and provides reports at any system in a sysplex. 27 August

7 System Display and Search Facility (SDSF) Security Server Security Server Network Authentication Service Level 3 System SSL Security Level 3 Provides information for monitoring, managing and controlling the operating system. Components: DCE Security Server Firewall Technologies (supports DES algorithms for encryption) LDAPServer Network Authentication Service Open Cryptographic Enhanced Plug-ins Resource Access Control Facility (RACF) (supports DES and Dynamic Channel Path Management (DCM) algorithm and RC2 40-bit algorithm Public Key Infrastructure (PKI) Services Together with Net Authentication Service of Security Server, provides greater than 64-bit encryption. Supports TDES encryption algorithm. Together with System SSL base Cryptographic Services, provides greater than 64- bit encryption. Supports RC2/RC4, TDES and Advanced Encryption Standard (AES) encryption algorithms. Analysis To take advantage of the z/990 z/architecture and still support the older ESA/390 architecture, z/os v.1.4 and the next version v.1.5 (projected to be released in early 2004) will provide simulations or dual paths. As of release v.1.6 (projected release date: September 2004), IBM will no longer support the ESA/390 architecture. As of September 2004, IBM will no longer support OS/390 v For the short term, users who are on OS/390 version 2.10 can choose to move to z/os 1.4 and continue running the operating system and all applications in 31-bit mode on their established 31-bit System 390 hardware. IBM has extended the endof-service date for z/os v.1.4 (and v.1.5) to March However, to avoid the risk of working with unsupported systems, OS/390 users will eventually need to migrate from a 31-bit environment to full 64- bit functionality before support ceases for the older hardware. Migrating code and applications that work well in 31-bit mode can be difficult and typically will involve extensive testing. IBM provides migration programs to ease the transition from 31- to 64-bit mode; these programs allow applications that don t run in 64-bit mode to be moved back to 31-bit mode while they are being fixed. Thus, users running OS/390 version 2.10 on S/390 hardware have two routes to the 64-bit z/os: Move to 31-bit z/os version 1.4 on their established hardware, then move to either z/800 or z/900 hardware and run z/os in full 64-bit mode, with the option of switching back to 31-bit mode for the first six months. Move OS/390 version 2.10 in 31-bit mode to z/800 or z/900 hardware, then switch to 64-bit OS/390 version 2.10 and upgrade to full 64-bit z/os. To take full advantage of z/os enhancements, users should consider migrating to z990. For example, while the built-in workload manager (WLM) has been available for OS/390 for some time, its resource management capability was limited to a single image. When z/os is deployed together with the z990 Intelligent Recourse Director (IRD), users can group logical partitions that are resident on the same 27 August

8 physical server into an LPAR cluster and use WLM to manage processor and I/O resources across an entire cluster of logical partitions. Version 1.4 security enhancements also rely on built-in security features of z990 for their implementation. ICSF uses the Peripheral Component Interconnect Extended Cryptographic Coprocessor (PCIXCC) feature of z990 to support Secure Key data encryption and decryption. Likewise, it supports Clear Key data encryption and decryption through the use of the Control Program Assist feature on z990 and SSL acceleration via the Peripheral Component Interconnect Cryptographic Accelerator (PCICA) feature. Pricing Software charges for a z/os system are determined by the choice of pricing model. For example, z/os running on a 2,500-million instructions per second (MIPS) system is approximately $1,130,000 per year. This price is based on a Workload License Charge for a 15-way , 2,490 MIPS and 426 million service units (MSUs). The equivalent Parallel Sysplex License Charge is $1,374,000 per year. Under the Workload License Charge (WLC) pricing model, z/os software charges can be based on workload capacity requirements, not the full capacity of the machine if the customer chooses to use the LPAR Use Model (known as subcapacity WLC ). With this option, capacity added for new workloads in a new LPAR will have no affect on charges for established or stable workloads. When capacity is added to an existing workload, charges are increased for that workload s LPAR only. This allows users to reserve hardware capacity for future increases in capacity while only paying for what is currently being used. Users can license as little as three MSUs of software capacity, yet reserve additional without an additional license. Full z/architecture and using the Subcapacity Reporting Tool (SCRT) are prerequisites for the LPAR Use Model under WLC. For its zseries servers, IBM provides, at no charge, the SCRT that analyzes a month of data for zseries central processor complexes (CPCs). From this analysis, SCRT produces a subcapacity report that is used to determine the required license capacity (in MSUs) of each eligible Variable WLC product running on a zseries CPC. Under subcapacity WLC, users can be charged for less than the full capacity of the CPC on which the products run. For example, the charge for z/os is based on the highest observed fourhour rolling average use of LPARS, as measured by SCRT. IBM also offers z/os.e, a specially priced version of the operating system, specifically designed to accommodate new e-business applications on z800 machines. Internally, z/os.e 1.4 has all of the base elements of z/os v.1.4, but not all those elements are functional or licensed for use or both. Additionally, some optional features available for z/os are not available to z/os.e. Priced at about 10 percent of the cost of a full-function z/os, z/os.e makes deploying new enterprise or e-business applications on a zseries server a viable alternative to high-end Unix/Windows systems. GSA Pricing Yes. Competitors Other mainframe operating system providers include Unisys in the United States and European vendors Fujitsu Siemens Computers (FSC) and Bull. In the low-to-midrange mainframe market (less than 1,000 MIPS), z/os competes with high-end Unix and Wintel-based systems from Sun, Hewlett-Packard and Dell. Mainframe outsourcing is another alternative that mainframe customers are choosing for the long term or as an interim step in migrating off the mainframe altogether. 27 August

9 Strengths 64-bit addressing support for workloads with large memory requirements HiperSockets for interpartition communications Dynamic Virtual Internet Protocol Addressing (VIPA) for intelligent load balancing of TCP/IP traffic across a Parallel Sysplex cluster Z/OS Workload pricing, which bases software charges on the use of one or more LPARs, not the total capacity installed in the server Self-configuring via wizards, msys for Setup and Health Checker Self-healing via msys for Operations; fast data recovery with System-Managed Coupling Facility (CF) Structure Duplexing Support for Advanced cryptography for SSL, PKI and Enterprise Identity Mapping Limitations OS/390 users risk running an unsupported system if migration to z/os is delayed support for release v.2.10 of OS/390 ends September Support for all earlier releases of OS/390 has already been discontinued. Fallback/coexistence support only z/os v.1.4 provides fallback and coexistence support for OS/390, and this support is limited to OS390 v z/os 1.4 is the last release of z/os that OS/390 users will be able to migrate to in a single step. ISVs shrinking application mainframe portfolio few new applications are being developed for z/os, and many older ISV programs are not being upgraded. Shrinking pool of skilled mainframe systems personnel majority of current workforce is nearing retirement age, while the majority of new IT workers are being trained in Windows and Unix. To address some of these issues, z/os provides a step-by-step installation guide and automated system updates. z/os s Managed Systems Infrastructure for Setup provides a GUI for establishing a Parallel Sysplex cluster that transparently creates the policies, parmlib specifications and initialization parameters necessary to configure a basic Parallel Sysplex environment. Also provided are Security Planner and SystemPac. Security Planner is a Web-based network security policy-planning tool for IBM eserver platforms. It includes recommendations for network architecture, firewall technologies, TCP/IP security and intrusion detection. SystemPac is designed to help users with limited skill to install or upgrade a z/os system. Insight IBM mainframe users must weigh the costs of delaying full deployment to 64-bit z/os against the benefits of migration. To get the full benefit of their investment, users committed to the zseries hardware should plan a migration to 64-bit z/os in the near term. G5/G6 users should plan their migration to 64-bit before support for OS/390 v.2.10 is scheduled to end in September August