Systems and Technology Group. z/os : Update. Réunion Guide. 29 Septembre IBM Corporation

Transcription

1 z/os : Update Réunion Guide 29 Septembre 2005 flaunay@fr.ibm.com

2 z/os IBM s flagship mainframe operating system Providing the difference for On Demand Business z/os the mainframe operating system designed to deliver A highly available and security-rich base for integrating applications Resources optimized to meet business priorities Scalability for data and transaction growth Robust and resilient networking Business resiliency With new directions Simplifying z/os management Etending z/os capabilities to help manage your mied environment Heterogeneous enterprise Heterogeneous Single platform Business resiliency & security Workload management Integration IT simplification Virtualization

3 Platform readiness Be ready for the net business opportunity! Be positioned for a competitive edge Business resiliency Security Business process integration Rapid deployment of enterprise-wide solutions Reuse of skills and resources Leverage, etend and integrate core applications IMS v9 Platform Readiness (Technology, Sub-capacity pricing (WLC)) DB2 v8 Integrated Tool Set CICS v3 NetView v5.2 WebSphere v6 z/os 1.7 Operating System System z9 or zseries servers & zaap WebSphere MQ v6 zossum070

4 z/os Support for z9-109 Advances in I/O scale and performance Improved FICON performance Modified Indirect Data Address Word (MIDAWs) (z/os 1.6 and z/os 1.7) New system architecture designed to improve FICON performance Can improve FICON performance for etended format data sets including DB2 queries, utilities and logs VSAM, HFS, zfs, PDSE, IMS Fast Path, SAM-E Can improve channel utilization Can improve I/O response times Relief for 64K device limit Multiple Subchannel Sets (MSS) (z/os 1.7) Up to two-times increase in the number of logical volumes for typical z/os images Each z/os image can use a second set of subchannels for defining Parallel Access Volumes (PAV) aliases Provide an additional 64K subchannels z/os 1.4 and compatibility support 60 logical partitions 1 OSA-Epress2 CDLC support K subchannel 1 OSA-Epress2 1000BASE-T Ethernet 1 z/os 1.6 eploitation Modified Indirect Addressing (MIDAWs) Hipersockets support of IPv6 Large send for IPv4 traffic 2 zaap 2 CPACF enhancements Crypto Epress2 Single system image up to 32 engines 3 z/os 1.7 further eploitation Multiple subchannel sets z/os 1.7 is planned to support Server Timer Protocol* FICON link incident reporting Wild branch diagnosis support 1 Requires the z/os V1.4 z990 Eploitation Support Feature or z/os V1.4 z990 Compatibility Feature see z/os 1.7 Migration for more info 2 Also available on z990 and z890 3 Also available on z990 * All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represents goals and objectives only.

5 z/os 1.7 Simplifying z/os management for new IT professionals while etending z/os robust capabilities Planned to be available September 2005 Simplifying z/os management Easier to configure with best practices Simplified networking and network security New user interface for z/os management Statement of Direction* planned for 4Q2005 Etending z/os capabilities and qualities of service Etending z/os resiliency and security Further performance optimization for TCP/IP networking Improved scale with support for large I/O configurations Requires System z9-109 Enhancements for business integration and application security And more World-class computing for On Demand Business * All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represents goals and objectives only.

6 z/os Support Summary z9-109 z990 z890 z900 z800 G5/G5 Multiprise 3000 End of Service Coeists with Ship Date 1.4 3/ / /07* 1.8 3/ /07* 1.8 9/ /08* 1.9 9/05* 1.8* 9/09* /06* *Planned z/os.e Available for z890 and z800 only

7 Simplifying z/os management for the new generation of IT professionals Continue to etend the robustness and fleibility of z/os Designed to automate, eliminate and simplify management tasks z/os management portal that is easy to use and more familiar Can integrate with IBM Tivoli and other systems management products Task-based approach for operations and configuration z/os learning center for new users Introduces fundamental z/os concepts and tasks Includes tutorials and hands-on eercises A community project spanning the z/os platform Design teams from z/os, IBM middleware and system management products Allowing for integration of non-ibm middleware and system management products Partnering with more than 40 z/os customers - and growing

8 Simplifying z/os management Planned for 2005* Systems management tasks Operations: Management console for system health monitoring (Planned for 4Q 2005) Configuration: z/os Health Checker to help configure with best practices New in z/os 1.7: More checks, integrated in z/os, and new user interface Maintenance: SMP/E Internet Service Delivery Can simplify and automate service acquisition Security: RACF based products to help administer security & monitor compliance Working with Vanguard Integrity Professionals, Inc. IBM Tivoli Administration for RACF lower function alternative Networking: z/os Network Security Configuration Assistant (Planned for Sept via Web) z/os learning center for new users New publication: z/os Basics Go to ibm.com/zseries/zos, see Library * All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.

9 Simplifying operations New z/os management console* (Planned for 4Q 2005) Value Simplify z/os management for the new generation of IT professionals Automating, eliminating, and streamlining tasks Easily upgradeable to OMEGAMON solutions Planned Capabilities Task-oriented approach with GUI front end z/os Health Checker data plus Tivoli Monitoring Services base capabilities Epert Advice Take Action Configuration status metrics for z/os resources displayed using Tivoli Enterprise Portal Improved ease-of-use of z/os management Value-add upgrades to comprehensive Tivoli Monitoring Services products New product planned to be available in 4Q 2005 for no charge to z/os customers * All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.

10 Simplifying configuration IBM Health Checker for z/os Value Configuring for best practices Helping to reduce the skill level Helping to avoid outages Checks against active settings Notifies when eceptions found Runs on all supported releases of z/os Latest enhancements Integrated as new base function in z/os 1.7 New SDSF panel to display and control the active checks Simplifies working with checks SDSF provides scroll, search, sort, filtering and other customization functions Browse check output More checking of z/os components Over 50 checks available 1 New checks available in RRS, RACF, Consoles, GRS, RSM, UNIX System Services Framework to support IBM, ISV, and user-written checks Checks can be added dynamically User-overrides for check defaults 1 Majority of these checks are available on prior releases

11 Simplifying software maintenance SMP/E Internet Service Delivery Value Can simplify and automate service acquisition Can help eliminate manual tasks currently required for ordering and delivery of IBM software maintenance Can improve availability by helping to ensure current service and service information is readily available Latest enhancements Allows you to automate ordering and delivery of PTFs and HOLDDATA PTFs and HOLDDATA can be processed in the same job step Can be triggered with a batch scheduling system (such as IBM Tivoli Workload Scheduler for z/os) to retrieve service on a regular basis

12 Simplifying network security management Value Define TLS and SSL secure connections without anticipated application changes Easier to configure the latest networking security technologies Help ensure secure access to z/os applications and data Easier to develop and maintain secure Web applications Latest enhancements TLS and SSL support designed to be transparent to applications Application Transparent TLS for TLS (Transport Layer Security) and SSL (Secure Sockets Layer) A new function in z/os 1.7 Communications Server Support for C/C++, HL ASM, COBOL, PL/I, REXX, CICS C socket, and CICS and IMS CALL instructions z/os Network Security Configuration Assistant (z/os 1.7) GUI for simpler and consistent configuration of IPSec and TLS technologies Planned to be available Sept via Web

13 Simplifying security management and compliance IBM is a reseller of Vanguard Integrity Professionals, Inc. products Value Complete z/os RACF security management solution, including administration, integrity auditing, and intrusion detection and management Helps organizations comply with security rules and regulations Helps reduce the compleities of RACF administration, eliminates user errors, and enforces best practices IBM Reseller of Vanguard Solutions Vanguard Administrator can help simplifies and enhances RACF security management Vanguard Analyzer is designed to assist with security system snapshots or full-scale mainframe security audits Vanguard Enforcer is designed to manage and enforce security policy in z/os and RACF Vanguard Advisor is designed to provide Event Detection, Analysis and Reporting capabilities for z/os and RACF Vanguard Security Center offers browser-based RACF and DB2 security administration on z/os Vanguard Security Center IBM Tivoli IBM Tivoli Security Administrator for RACF provides low cost, rapidly deployable RACF management solution

14 SecurityCenter* SecurityCenter is a product of Vanguard Integrity Professionals, Inc. IBM is a reseller of Vanguard Integrity Professionals, Inc. products Get user security information with an easy to use display and interface. This includes enterprise systems using Vanguard s Integrated Enterprise products.

15 Other z/os System Management Offerings What s New! IBM Tivoli OMEGAMON enhancements Combined ple and non ple into single package Added IBM TotalStorage DS6000 and DS8000 support Application correlation to track transactions across systems NetView for z/os v5 enhancements Real-time capture and formatting of packet traces to help debug IP problems Automatic intrusion detection TCP/IP connection management System Automation for z/os v2.3 enhancements Automated Operations from OMEGAMON GDPS interoperation Integrated SA/Netview setup, SA fencing WAS V5 precanned support and automation setup IBM Tivoli Decision Support for z/os v1.7 Improved reporting performance, such as service level commitment and charge back reports Accounting Workstation option added IBM DB2 V8 and z/os 1.5 support IBM as a reseller of Vanguard Integrity Professionals, Inc. products for simplifying RACF security management and compliance Designed to: Improve service levels Decrease problem to resolution time Help reduce cost of operations

16 Enhanced IP Networking A reduced need for SNA connections JES2 NJE support for TCP/IP Planned for 1Q2006 JES3 support is planned for a future z/os release* Can also improve availability with NJE in a separate address space Can easily add TLS encryption using Application Transparent TLS z/os 1.7 High availability and optimized performance Sysple enhancements Better interaction with network-based load balancers z/os Load Balancing Advisor Helping direct traffic to systems that are meeting response time goals Improved management with WLM and Sysple Distributor Simplified configuration of TCP/IP in a sysple with improved operator commands Data transfer enhancements Can improve performance for outbound TCP/IP traffic (Rollback to 1.6) Supports processing offload to OSA-Epress2 Requires z9-109, z990 or z890 Large send for IPv4 packets Confidence level checking for data transfer (FTP) Can report on transfers that have completed successfully IPv6 support etended to HiperSockets and Advanced Socket API (1.7) Sysple (1.6) * All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.

17 Enterprise Network Security Helping to keep your data more secure z/os 1.7 Networking security designed to be transparent to applications (z/os 1.7) Can help reduce development compleity and costs Define a TLS or SSL secured connection with no anticipated changes to eisting applications For both TLS (Transport Layer Security) and SSL (Secure Sockets Layer) Support for C/C++, HL ASM, COBOL, PL/I, REXX, CICS sockets, and CICS and IMS CALL instructions Improved IP Security Designed to Improve scale and performance Simplify configuration and monitoring Integrated in z/os Communications Server IP filtering Internet Key Echange (IKE) Virtual Private Network (VPN) Available for z/os 1.4, 1.5, 1.6 via SPE NAT Traversal support (z/os 1.7) Designed to allow IPSec protected data to traverse a NAT device (Uses IETF standard) Simplified configuration for networking security (z/os 1.7) z/os Network Security Configuration Assistant (Web deliverable planned for Sept. 2005) GUI for simpler and consistent configuration of the above technologies

18 Security leadership continues Secure encryption facility for z/os to help protect data shared with partners, suppliers, and customers ** Designed to leverage z/os key management and high performance hardware encryption Etending user authentication management Support for mied-case passwords in RACF, TSO/E, FTP, CONSOLES, and z/os UNIX System Services RACF pass ticket support Learn more about IBM mainframe security: ibm.com/zseries/security z/os 1.7 Innovative new technologies Digital Certificate life-cycle management Improvements to z/os PKI services Cryptography 64-bit cryptography support in ICSF AES support for TLS and SSL applications Can simplifying RACF administration and compliance management Products from Vanguard Integrity Professionals, Inc. CERTIFICATIONS: COMMON CRITERIA z/os 1.6 with RACF is certified at EAL3+ for - Controlled Access Protection Profile (CAPP) - Labeled Security Protection Profile (LSPP) z/os 1.7 with RACF is under evaluation for certification at EAL4 IDENTRUS Public Key Infrastructure (PKI) Services provided by z/os 1.5 has achieved Identrus compliance. * All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represents goals and objectives only.

19 Etending Scale and Fleibility z/os 1.7 z/os IMAGE 32-way single z/os image Up to 32 processors in a single logical partition (z/os 1.6 and above) 32 = central processors + zaaps Statement of direction* for >32 way in future z/os release Largest single z/os image 32 logical processors 128 GB Real Memory 256 Channels Scale with higher availability Up to 32 z/os images in a Parallel Sysple cluster Scale out up to 60 partitions on z9-109 (z/os 1.4 and above) I/O CONFIGURATION z9-109 enhancements MIDAW - Designed to improve FICON performance (z/os 1.6,1.7) Multiple Subchannel Sets - Relief for 64 K device limit (z/os 1.7) Up to two-times increase in the number of logical volumes for z/os images IBM TotalStorage DS6000 & DS8000 enhancements Support for 64 K cylinder volumes (z/os 1.4 and above) FILE SYSTEMS Support for larger sequential and EXCP data sets (>64K tracks) Larger JES spool, and DFSMShsm and DFSMSrmm journal data sets Also used by: ISPF, SADMP, IPCS, AMASPZAP, DFSMSdss, and DFSORT More than 255 etents per VSAM component Can help reduce out-ofspace failures Can allow you to reorganize data sets less often * All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. zossum_240

20 z/os availability Etending z/os leadership z/os 1.7 Today s Capabilities: Up to % availability* for System z9 and zseries to help avoid planned and unplanned outages TCP/IP high availability in a sysple z/os Load Balancing Advisor - better interaction with network-based load balancers (1.7) Improved management with WLM and Sysple Distributor (1.7) Designed for IP Automatic Takeover when IP stack is not healthy (1.6) Help reduce the need to IPL z/os UNIX System Services dynamic service activation may reduce the need to IPL PDSE restartable address space (1.6) May reduce the need to re-ipl a system due to a hang, deadlock condition, or out of storage condition Recovery assistance for catalogs, UNICODE and JES2 Integrated Catalog Forward Recovery Utility (formerly 5798-DXQ), now incorporated into z/os Unicode control block recovery for certain conditions Etensions to JES2 Checkpoint data recovery Business resilience Improve GDPS options for high volume applications with Etended Remote Copy Plus (XRC+) (1.7) Better support for remote mirroring of high volume logging applications (e.g., IMS and CICS) * Note : Based on Parallel Sysple implementation

21 Integrating applications on z/os z/os 1.7 Leveraging, etending and integrating core applications Network Security Define a TLS or SSL secured connection with no anticipated changes to eisting applications 1.7 New function: Application Transparent TLS CICS Sockets enhancements Easier to specify options for Language Environment (LE) System-level defaults can be set in parmlib 1.7 Application options can be specified in a data set or file 1.7 UNIX file system for z/os: zseries File System (zfs) zfs can be used as file system root 1.7 HFS function has been stabilized Supported by RMF to help tune zfs 1.7 Can provide improved performance and availability 1.6 C/C++ support XL C/C++ designed for ISO C99 Standard 1.7 New C/C++ compiler options to eploit z9-109, z990 and z z/os UNIX System Services - Easier management Enhancements to AUTOMOUNT, ConfigHFS, and ISHELL 1.6 New commands supported (clear, uptime) 1.6 Enhancements to superkill command 1.6

22 z/os 1.7 Configuration Considerations: z/os 1.7 zseries File System (zfs) can now be used as the root zfs is the strategic z/os UNIX Systems Services file system. The Hierarchical File System (HFS) has been stabilized. Eamine JES2 eit routines and modify if needed Changes have been made to JES2 eit routines due to JES2 structure changes Support for the following has been removed: ISAM data sets JOBCAT and STEPCAT JES2 compatibility mode OS/ C/C++ (ISO C/C++ compiler is still supported) 1-byte Console IDs and eternal interfaces supporting migration console IDs have been removed from the WTO, WTOR, and MCSOPER macros; and from operator commands Programs compiled using older versions of the macros will continue to work More fleible ways to specify Language Environment options A new parmlib member, CEEPRM, can be used to specify Language Environment run-time options for the system Can simplify the management of Language Environment options and release to release migration The optional source materials feature will not be offered Reminder: Effective January 15, 2006 the S/390 Service Update Facility (SUF) will be discontinued. See z/os 1.7 Migration guide for more information.

23 z/os Statements of Direction* Encryption facility z/os 1.7 IBM intends to Deliver an encryption facility for z/os to help protect data shared with partners, suppliers, and customers Designed to leverage z/os key management and high performance hardware encryption. Targeted for availability in 2005 Simplify z/os management Increase z/os scale Improve price/ performance Optimize new workloads Provide a new user interface for z/os management that is planned to help the new generation of IT professionals Planned for 4Q 2005 Support more than 32 processors in a single logical partition on the z9-109 in the future Announce a version of New Application License Charges (NALC) intended to help improve the price/performance of z/os in certain new workload environments by delivering subcapacity pricing Targeted for availability in 2H2006 Introduce a new system component called z/os XML System Services (z/os XML). This component will be designed to provide an optimized set of services for parsing XML documents. Planned for a future release of z/os * All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.