IBM Tivoli Identity Manager for z/os V4.6 marries leading identity management to a time-tested, secure, scalable, and reliable platform z/os

Transcription

1 IBM United States Announcement , dated November 28, 2006 IBM Tivoli Identity Manager for z/os V4.6 marries leading identity management to a time-tested, secure, scalable, and reliable platform z/os Description...3 Product positioning... 4 Offering Information...6 Publications... 6 Technical information...6 IBM Tivoli Value-Based Pricing... 7 Ordering information...10 Terms and conditions IBM Electronic Services...15 Prices...15 Order now...16 At a glance IBM Tivoli Identity Manager for z/os helps you: Increase user and IT efficiency Can cut elapsed turn-on time for new accounts and improve productivity by allowing end users to rapidly reset and synchronize their own passwords Can reduce error-prone manual entry by automating submission requests Reduce IT administration costs Can decrease help desk calls by providing Web self-care interfaces to perform password and personal information changes Can lower overhead costs by automatically managing accounts, credentials, and access rights throughout the user lifecycle Simulate policy changes with powerful "what if" scenarios Address policy compliance needs Produce centralized reports on security policy, access rights, and audit events to quickly respond to internal audits and regulatory mandates Centralize policy-based access control and audit trails across key systems Obtain intelligence and recommended actions on policy compliance issues, which can eliminate the need to manually review policies For ordering, contact: Your IBM representative, an IBM Business Partner, or the Americas Call Centers at 800-IBM-CALL Reference: LE001 Overview IBM Tivoli Identity Manager for z/os (TIM for z/os) V4.6 provides a secure, automated, and policy-based solution that helps you effectively manage user accounts, access permissions, and passwords from creation to termination across IT environments. It helps automate the processes of creating and provisioning/deprovisioning user privileges across heterogeneous IT resources throughout the entire user lifecycle. TIM for z/os V4.6 leverages the availability, scale, and performance of the IBM System z mainframe to provide a centralized hub for identity management on z/os. TIM for z/os V4.6 can help increase user efficiency, reduce IT administration costs, and manage compliance with your security policy IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 1

2 (policy compliance) with centralized user account maintenance (including self-service interfaces), delegated administration, automated approvals processing, documentation of controls, and other standard reports. TIM for z/os V4.6 helps accelerate deployment, enforce policy compliance, and provide extensions to capabilities such as policy automation and lifecycle management. The key new feature in TIM for z/os V4.6 is that it now leverages System z to provide centralized management and automation of user identities, credentials, accounts, access permissions, and audit information. Key prerequisites For details, refer to the Hardware requirements and Software requirements sections. Planned availability date December 1, 2006 IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 2

3 Description Key new feature of Tivoli Identity Manager family TIM for z/os leverages System z to provide centralized management and automation of user identities, credentials, accounts, access permissions, and audit information. Deploying Tivoli security for z/os allows an end-to-end security solution and underscores System z as the platform of choice for enterprise security management. Other features: Native z/os support for the Tivoli Identity Manager server, including using native DB2 and LDAP on z/os SMP/e installation ISPF configuration Overall features and benefits Dynamic policy management engine: Helps increase efficiency and speed of policy-based provisioning by defining policy-based privileges and quickly assigning users to their roles Helps free IT staff from access rights administration tasks through automation Allows an organization to enforce a consistent set of business rules for the creation of user access privileges, account IDs, and passwords on provisioned resources Applies role-based access control through association of user roles with policies, enabling them to be effectively applied to groups of users Dynamically detects the changes and automatically modifies user access privileges to help ensure that the latest policies are correctly enforced Access request management: Centralizes and controls internal and external user access rights in a unified repository Monitors enterprise-wide access rights across all platforms and business resources, constantly enforcing policy Password self-service: Allows new or existing users to synchronize and reset their own passwords Frees help desk to pursue other initiatives Intelligent approval routing: Creates streamlined, accurate, automated workflow Helps eliminate archaic paper trail methods Can quickly identify security breaches and unauthorized access Access rights reconciliation: Can automatically load and reconcile account data from existing sources; for example, Windows and Oracle Provides "closed loop" reconciliation which can automatically detect and repair access policy violations that occur due to erroneous changes made directly on a managed resource's administrative console Broad support for system adapters: IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 3

4 Delivers broad support of system adapters, which facilitates the provisioning of user accounts to computing resources Supports many system adapters, which provides the ability to add, delete, change, suspend, restore, and reconcile user accounts Promotes SSL-based, internet-friendly, adapter-server communications to help protect against "man in the middle" attacks on the system Audit and history tracking: Helps simplify auditing and reporting with automated report generation Maintains records of changes, deletions, additions, and other information related to access rights for auditing purposes Scalable, fault tolerant architecture: Based on application server technology that provides a highly scalable and fault-tolerant platform for IBM's enhanced provisioning technology Can be deployed on redundant servers in a software cluster that supports failover and load balancing for scalability Delivers scalability for large communities, extending the reach of Tivoli Identity Manager to the virtual enterprise, that can include not only employees, but also contractors and Business Partners Graphical workflow designer: Allows a graphical drag-and-drop workflow designer to quickly organize and easily develop workflow processes to support the organization's provisioning policies Supports the creation of both parallel and serial approval processes, and also checkpoints in a workflow process to allow the input of additional provisioning information Accessibility by people with disabilities You can request a U.S. Section 508 Voluntary Product Accessibility Template (VAPT) with details on accessibility compliance at Product positioning TIM for z/os V4.6 is based on IBM Tivoli Identity Manager V4.6 but leverages the performance and strength of the IBM System z middleware to provide a centralized hub for identity management on z/os. TIM for z/os is an integral part of IBM's identity management solution. It provides policy-based automation to manage user identities and their access to heterogeneous information resources throughout the user lifecycle, while supporting key policy compliance and audit readiness requirements. IBM Tivoli Identity Manager integrates with IBM Tivoli Access Manager, IBM Tivoli Federated Identity Manager, IBM Tivoli Directory Integrator, and IBM Tivoli Directory Server, which are the other key parts of the IBM identity management solution: Identity lifecycle management (user self-care, enrollment, and provisioning) IBM Tivoli Identity Manager Identity control (access and privacy control, single sign-on, and auditing) IBM Tivoli Access Manager and IBM Tivoli Access Manager for Enterprise Single Sign-on Identity federation (sharing user authentication and attribute information between trusted Web services applications) IBM Tivoli Federated Identity Manager Identity foundation (directory, directory integration, and workflow) IBM Tivoli Directory Integrator and IBM Tivoli Directory Server The above solutions support IBM's IT Service Management strategy to help customers automate and standardize the way they design and integrate information technology management IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 4

5 processes and the underlying management products that support them across separate departments within their enterprises. Adapters for Tivoli Identity Manager for z/os V4.6 To provision and maintain user accounts in systems, Tivoli Identity Manager for z/os relies on adapters. The adapters use vendor-provided APIs to remotely manage user accounts in systems such as operating systems, relational databases, PKI registration authorities, enterprise resource planning packages, and other security systems. IBM now provides a core set of adapters available for the Tivoli Identity Manager for z/os server at no additional charge to help increase user time to value and decrease deployment times. These adapters work with some of the most common IT infrastructure components, including: IBM AIX V5.1, V5.2, and V5.3 Cisco Access Control Server (ACS) 3.2 Entrust PKI 6, 7 HP-UX 11i thru 11iv2 HP-UX NIS 11iv2 Informix Dynamic Server 9.2 LDAP Directories Red Hat Enterprise Linux 2.1, 3.0 SUSE Linux Enterprise Server 8 IBM Lotus Notes 6.0, 6.5 Novell edirectory (NDS) 8.7 Oracle Database 8i, 9i, 10g RSA ACE Server 5.2 Sun Solaris 8, 9 Sun Solaris NIS 8, 9 Sybase Adaptive Server Enterprise 12 IBM Tivoli Access Manager 4.1, 5.1 IBM DB2 UDB 8.1 Microsoft Windows Active Directory 2000, 2003 Microsoft Windows Local Account 2000, 2003, XP For download details, refer to the Ordering information section. IBM Tivoli Identity Manager for z/os also has two other groups of adapters that customers can purchase to provision and maintain user accounts on additional applications and systems. The first group contains adapters that interface with common enterprise resource planning applications and other commercial off-the-shelf applications as well as adapters that enable the development of customized adapters for homegrown applications. These are downloadable adapters. For download details, refer to the Ordering information section. The second group of adapters provision and maintain user accounts on systems such as IBM RACF and IBM AS/400. These are downloadable adapters. For download details, refer to the Ordering information section. Due to the constantly changing nature of these systems, adapters are updated frequently and are available through download only. For a current list of available adapters go to IBM reserves the right to add or remove adapters from a group, move adapters between groups, and add or remove adapter groups at any time without prior notice. Services with IBM Tivoli Identity Manager for z/os IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 5

6 IBM Software Group offers consulting services for Tivoli Identity Manager for z/os. IBM Global Services also offers identity management services that include Tivoli Identity Manager for z/os. Business Partner information If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld ID and password are required (use IBM ID). BP Attachment for Announcement Letter Trademarks System z and Informix are trademarks of International Business Machines Corporation in the United States or other countries or both. z/os, Tivoli, DB2, AIX, Lotus Notes, AS/400, and RACF are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Windows and Microsoft are trademarks of Microsoft Corporation. Linux is a trademark of Linus Torvalds in the United States, other countries or both. Other company, product, and service names may be trademarks or service marks of others. Offering Information Product information is available via the Offering Information Web site Publications The following English publications can be downloaded from the following Web site at general availability Title Read This First Program Directory Installation and Configuration Guide Form number GI GI SC Technical information Specified operating environment Hardware requirements: Minimum processor, disk space, and memory requirements for TIM for z/os follow: Minimum for Single Minimum for Cluster System Z Z Processor 2 2 Memory 3 GB 3.7 GB for each member TIM for z/os 400 cylinders for 400 cylinders for installation READ-ONLY directory READ-ONLY directory disk space (/usr/lpp/itim) (/usr/lpp/itim) and about 350 and about 350 cylinders for cylinders for READ-WRITE directory READ-WRITE directory of each member IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 6

7 Disk space for 7.4 GB 7.4 GB on the LPAR product data where DB2(R) for z/os stores* and z/os LDAP server reside * Based on 20K users + 60K Windows(TM) local accounts Software requirements: Tivoli Identity Manager for z/os V4.6 supports the following: z/os V1R7 with OA11699 WebSphere Application Server for z/os V6.0.1 with APAR PK24808 DB2 for z/os V8.1 The following product is included with IBM Tivoli Identity Manager V4.6 for use restricted to Identity Manager: IBM Tivoli Directory Integrator V6.1 with Fixpack 1 (PTF Z61FP01) Note: Minimum values are listed for hardware and software prerequisites. These values enable a very basic use of Tivoli Identity Manager. You may need to use larger values that are appropriate for your production. Planning information Packaging: IBM Tivoli Identity Manager for z/os is distributed on tape with: International Program License Agreement (Z ) License Information document Tape with Tivoli Identity Manager for z/os CD-ROM with Japanese language translations CD-ROM for IBM Tivoli Directory Integrator V6.1 CD-ROM for publications Security, auditability, and control IBM Tivoli Identity Manager for z/os uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. Software Services IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based Software Services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an unmatched portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support any critical business need. To learn more about IBM Software Services or to contact a Software Services sales specialist, visit IBM Tivoli Value-Based Pricing IBM Tivoli software products are priced using IBM Tivoli's Enhanced Value-Based Pricing. The Enhanced Value-Based Pricing system is based upon the IBM Tivoli Environment-Managed Licensing Model, which uses a managed-environment approach whereby price is determined by what is managed rather than the number and type of product components installed. For example, all servers monitored with IBM Tivoli's monitoring product (IBM Tivoli Monitoring) require entitlements sufficient for those servers. Other IBM Tivoli products may manage clients, IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 7

8 client devices, agents, network nodes, users, or other items, and are licensed and priced accordingly. Unlike typical systems management licensing models that require entitlements of specific software components to specific systems, the IBM Tivoli Environment-Managed Licensing Model provides the customer flexibility to deploy its IBM Tivoli software products within its environment in a manner that can address and respond to the customer's evolving architecture. That is, as the architecture of a customer's environment changes, the customer's implementation of IBM Tivoli software can be altered as needed without affecting the customer's license requirements (as long as the customer does not exceed its entitlements to the software). Under Enhanced Value-Based Pricing, licensing and pricing of server-oriented applications are determined based upon the server's use in the customer's environment. Typically, such applications are licensed and priced in a manner that corresponds to each installed and activated processor of the server managed by the IBM Tivoli application to help correlate price to value while offering a simple solution. Where a server is physically partitioned, this approach is modified. This partitioning technique is the approach used with systems that have either multiple cards or multiple frames, each of which can be configured independently. For servers capable of physical partitioning (for example, IBM's pseries Scalable POWERparallel Systems servers, Sun Ultra servers, and HP Superdome servers), an entitlement is required for each processor in the physical partition being managed by the Tivoli application. For example, assume that a server has 24 processors installed in aggregate. If this server is not partitioned, entitlements are required for all 24 processors. If, however, it is physically partitioned into three partitions each containing eight processors, and Tivoli products were managing only one of the three partitions, then entitlements would be required for the eight processors on the physical partition managed by the IBM Tivoli application. For servers with virtual or logical partitions, entitlements are required for all installed and activated processors on the server. For each IBM Tivoli application managing a clustered environment, licensing is based on the cumulative number of installed and activated processors on each server in the cluster. Where the cluster includes physically partitioned servers, the considerations described above concerning physically partitioned servers apply as well. Enhanced Value-Based Pricing recognizes the convergence of RISC/UNIX and Microsoft Windows/Intel technologies, in order to simplify the customers licensing requirements, and to provide a smoother, more scalable model. Pricing and licensing do not differentiate between non-zseries server platforms or operating systems. For some products, this platform neutrality extends to zseries and other host servers as well. Scalable usage model tiering The following nonlinear scalable usage table is used to determine the required value units per 1,000 users. Each tier is converted and all tiers are then summed. Scalable Usage Level Users 1K - 5K 5,001 15,001 50,001-15K - 50K - 150K Value Units per user Scalable Usage Level Users 150, ,001 >1M - 500K - 1M Value Units per user The pricing model for IBM Tivoli Identity Manager for z/os is enhanced to significantly reduce costs for many customers whose systems support a large number of external users. The price for these external users is not the same as for internal users. The external user charge will be based on a set ratio of five external users to one internal user, so that the charge is lower than, and proportional to, the typical internal user charge. IBM Tivoli Enhanced Value-Based Pricing terminology definitions Enterprise: A person or single entity and the subsidiaries owned by more than 50%. Authorized user for IBM Tivoli Identity Manager for z/os: An authorized user is one and only one individual, machine, program, or device with a specific identity (ID) within or outside your enterprise. A Proof of Entitlement (PoE) is required for each user accessing the program or any program component Notes: IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 8

9 1. The program can be accessed by multiple users provided that a user authorization has been obtained for each individual user. 2. Authorized users have unique specific identity and IDs cannot be shared. 3. An ID can establish one or more connections and count as a single authorized user. 4. An authorized user of IBM Tivoli Identity Manager for z/os is any ID that accesses an application or service managed or protected by IBM Tivoli Identity Manager for z/os. Standby or backup systems: For programs running or resident on backup machines, IBM defines three types of situations: cold, warm, and hot. In the cold and warm situations, a separate entitlement for the copy on the backup machine is normally not required and typically no additional charge applies. In a hot backup situation, the customer needs to acquire another license or entitlements sufficient for that server. All programs running in backup mode must be solely under the customer's control, even if running at another enterprise's location. As a practice, the following are definitions and allowable actions concerning the copy of the program used for backup purposes: Cold A copy of the program may reside, for backup purposes, on a machine as long as the program is not started. There is no additional charge for this copy. Warm A copy of the program may reside for backup purposes on a machine and is started, but is idling, and is not doing any work of any kind. There is no additional charge for this copy. Hot A copy of the program may reside for backup purposes on a machine, is started, and is doing work. The customer must acquire a license or entitlements for this copy and there will generally be an additional charge. Doing work includes, for example, production, development, program maintenance, and testing. It also could include other activities such as mirroring of transactions, updating of files, synchronization of programs, data, or other resources (for example, active linking with another machine, program, database, or other resource, and so on), or any activity or configurations that would allow an active hot switch or other synchronized switch over between programs, databases, or other resources to occur. In the case of a program or system configuration that is designed to support a high availability environment by using various techniques (for example, duplexing, mirroring of files or transactions, maintaining a "heartbeat," active linking with another machine, program, database, or other resource, and so on), the program is considered to be doing work in the hot situation and a license or entitlement must be purchased. Value Units: A Value Unit is a metric used to compute license quantities, is program specific, and is typically only used on products managing zseries systems. Product and licensing Web sites A complete list of IBM Tivoli products is available at Web site IBM Tivoli product licensing documents are available at Web site Pricing examples IBM Tivoli Identity Manager for z/os V4.6: Scenario: Customer ABC wants to initially secure access for the following adapters through one 8-way server for its 12,000 internal users (2,000 on-site employees and 10,000 remote employees): 12,000 employees as authorized users of LDAP 12,000 employees as authorized users of Lotus Notes 12,000 employees as authorized users of AIX First, total the users for the class of adapters within a part number. Since all of these authorized IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 9

10 users are internal users (part of ABC's enterprise), each user is counted when calculating Value Units. Transaction 1 In this example, LDAP, Lotus Notes, and AIX are Infrastructure adapters which are no longer separately priced adapters and are included in the purchase price of Tivoli Identity Manager for z/os. Therefore, the environment is 12,000 chargeable users of base. Quantity in Value Units Value Units Pricing customer per authorized required metric environment (A) user (B) (A) * (B) Tier 1 5, ,000 Tier 2 7, ,500 Totals 12,000 8,500 Note: There is a minimum order quantity of 1,000 users. Transaction 2 After the initial purchase, customer ABC wants to secure access for 500,000 external authorized users using the LDAP and Lotus Notes adapters an increase of 100,000 chargeable users of TIM for z/os based on the five to one ratio. The new environment for ABC would look as follows: The LDAP and Lotus Notes adapters are no longer separately priced and are included in the purchase price of TIM for z/os. Therefore, the environment is 112,000 chargeable users of base (500,000/5 = 100, ,000 = 112,000). To be compliant in the new environment, customer ABC must purchase additional Value Units of Identity Manager for z/os base, which include the adapters needed. Quantity in Value Units Value Units Pricing customer per authorized required metric environment (A) user (B) (A) * (B) Tier 1 5, ,000 Tier 2 10, ,000 Tier 3 35, ,500 Tier 4 62, ,400 Totals 112,000 32,900 12,000 Less currently licensed from (8,500) transaction 1 Additional Value Units required 24,400 Additional host (such as RACF ) and application (such as SAP R3) adapters are available for purchase through Passport Advantage. A current list of adapters is available at Ordering information The programs in this announcement all have Value Unit-based pricing. Value Program Unit number Program name exhibit 5698-A82 IBM Tivoli Identity Manager for z/os VUE023 For each System z IPLA program with Value Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity. Your required license capacity is based upon the following factors: The System z IPLA program you select The applicable Value Unit exhibit The applicable terms Whether your current mainframes are full-capacity or sub-capacity Value Unit exhibit VUE023 IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 10

11 Minimum Maximum Usage level users users Value Units/user Tier 1 1,000 5K 1.0 Tier 2 5,001 15K 0.50 Tier 3 15,001 50K 0.30 Tier 4 50, K 0.20 Tier 5 150, K 0.15 Tier 6 500,001 1M 0.10 Tier 7 >1,000, Ordering z/os through the Internet ShopzSeries provides an easy way to plan and order your z/os ServerPac or CBPDO. It will analyze your current installation, determine the correct product migration, and present your new configuration based on z/os. Additional products can also be added to your order (including determination of whether all product requisites are satisfied). ShopzSeries is available in the U.S. and several countries in Europe. In countries where ShopzSeries is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order via the traditional IBM ordering process. For more details and availability, visit the ShopzSeries Web site at New licensees Orders for new licenses will be accepted now. Shipment will begin on the planned availability date. Basic license To order, specify the program product number and the appropriate license or charge option. Also, specify the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW. Program name: IBM Tivoli Identity Manager for z/os Program PID: 5698-A82 Entitlement License option/ identifier Description Pricing metric S013HTW Identity Manager Basic OTC, per Value Unit for z/os Orderable supply ID Language Distribution medium S013HV0 Multilingual 3480 tape cartridge, CD-ROM, and Hardcopy Pub Subscription and Support PID: 5698-S96 Entitlement License option/ identifier Description Pricing metric S013HW3 Identity Manager Basic ALC, per Value Unit SW S&S for z/os no charge, decline SW S&S Orderable supply ID Language Distribution medium S013J2M Multilingual Hardcopy pub Ordering information for adapters for Tivoli Identity Manager for z/os Core adapters: IBM now provides a core set of adapters available for the Tivoli Identity Manager for z/os server at no additional charge to help increase user time to value and decrease deployment times. These adapters are downloadable from an IBM Web Membership (IWM) Web site upon request. You can request access to the IWM Web site by contacting support as you normally would, such as by calling the support line or by opening an electronic PMR. You can also send an to tivzos@us.ibm.com. If you choose to send an to tivzos@us.ibm.com, be sure to provide your customer number, customer name, phone number, and preferred address. Due to the constantly changing nature of these systems, adapters are updated frequently. For a current list of available adapters go to IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 11

12 Application and host adapters: Application and host adapters may be ordered from Passport Advantage. Passport Advantage allows you to have a common anniversary date for Software Maintenance renewals, which can simplify management and budgeting for eligible new versions and releases (and related technical support) for your covered products. The anniversary date, established at the start of your Passport Advantage Agreement, will remain unchanged while your Passport Advantage Agreement remains in effect. New software purchases will initially include 12 full months of maintenance coverage. Maintenance in the second year (the first year of renewal) can be prorated to be coterminous with your common anniversary date. Thereafter, all software maintenance will renew at the common anniversary date and include 12 full months of maintenance. Refer to the IBM International Passport Advantage Agreement and to the IBM Software Maintenance Handbook for specific terms relating to, and a more complete description of, technical support provided through Software Maintenance. The quantity to be specified for the Passport Advantage part numbers in the following table is per number of required Authorized Users. IBM Tivoli Identity Manager for Applications: You will need to purchase the appropriate license part numbers listed below. This will enable you to receive IBM Tivoli Identity Manager for Applications' adapters as downloadable images. Part description IBM Tivoli Identity Manager for Applications Value Unit License and SW Maintenance 12 Months IBM Tivoli Identity Manager for Applications Value Unit SW Maintenance Annual Renewal IBM Tivoli Identity Manager for Applications Value Unit SW Maintenance Reinstatement 12 Months Part number D52EHLL E00RVLL D52EILL IBM Tivoli Identity Manager Host Edition: You will need to purchase the appropriate license part numbers listed below. This will enable you to receive IBM Tivoli Identity Manager Host Edition adapters as downloadable images. Part description IBM Tivoli Identity Manager Host Editions Value Unit License and SW Maintenance 12 Months IBM Tivoli Identity Manager Host Edition Value Unit SW Maintenance Annual Renewal IBM Tivoli Identity Manager Host Edition Value Unit SW Maintenance Reinstatement 12 Months Part number D52ELLL E00RXLL D52EMLL Due to the constantly changing nature of these systems, adapters are updated frequently and are available through download only. For a current list of available adapters go to IBM reserves the right to add or remove adapters from a group, move adapters between groups, and add or remove adapter groups at any time without prior notice. Subscription and Support To receive voice technical support via telephone during normal business hours and future releases and versions at no additional charge, Subscription and Support must be ordered. The capacity of Subscription and Support (for example, Value Units or number of processors) must be the same as the capacity ordered for the product licenses. To order, specify the Subscription and Support program product number and the appropriate license or charge option. IBM is also providing Subscription and Support for these products via a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Support Maintenance (IAASM). This offering: Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours. IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 12

13 Entitles customers to future releases and versions at no additional charge. Note that the customer is not entitled to new products. When Subscription and Support is ordered, the charges will renew automatically annually unless cancelled by the customer. Customization option for OS/390 Select the following feature number to customize your order if running on the OS/390 platform. This feature can be specified on the initial or MES orders. Feature number Description 3450 Satellite Electronic Delivery Customized offerings Product deliverables are shipped only via Customized Offerings (for example, CBPDO, ServerPac, SystemPac ). CBPDO and ServerPac are offered for electronic delivery, where ShopzSeries product ordering is available. For more details on electronic delivery, refer to the ShopzSeries help information at Media type for this software product is chosen during the customized offerings ordering process. Based on your customer environment, it is recommended that the highest possible density tape media is selected. Currently offered media types are: CBPDOs 3480, 3480 Compressed, 3590* ServerPacs 3480, 3480 Compressed, 3490E, 3590* SystemPacs 3480, 3480 Compressed, 3490E, 3590* * 3590 is highest density media, which will ship the fewest number of media Once a product becomes generally available, it will be included in the next ServerPac and SystemPac monthly update. Production of software product orders will begin on the planned general availability date. CBPDO shipments will begin one week after general availability. ServerPac shipments will begin two weeks after inclusion in ServerPac. SystemPac shipments will begin four weeks after inclusion in SystemPac due to additional customization, and data input verification. Terms and conditions The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents, such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and IBM Agreement for Acquisition of Software Maintenance. Licensing: IBM International Program License Agreement including the License Information (LI) document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. Agreement for Acquisition of Software Maintenance: The following agreement applies for maintenance and does not require customer signatures: IBM Agreement for Acquisition of Software Maintenance (Z ) These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provides for support with ongoing access to releases and versions of the program. IBM includes one year of Software IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 13

14 Maintenance with the initial license acquisition of each program acquired. The initial period of Software Maintenance can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect. S/390 and System z IBM Operational Support Services SoftwareXcel is an option if you desire added services. Limited warranty applies: Yes Limited warranty: IBM warrants that when the program is used in the specified operating environment it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program. IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. Consult the IBM Software Support Guide for further information at IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period). Program support: Enhanced support, called Subscription and Support, includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect. You will be notified of discontinuance of support with 12 months' notice. Money-back guarantee: If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund. For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you. Authorization for use on home/portable computer: You may not copy and use this Program on another computer without paying additional license fees. Volume orders (IVO): No Passport Advantage applies: No Usage restriction: Yes Usage is limited to the quantity of Value Units licensed. For additional information, refer to the License Information document that is available on the IBM Software License Agreement Web site Software Maintenance applies: No For operating system software, the revised IBM Operational Support Services SoftwareXcel offering will provide support for those operating systems and associated products that are not available with the newly announced Software Maintenance offering. This will ensure total support coverage for your enterprise needs, including IBM and selected non-ibm products. For complete lists of products supported under both the current and revised SoftwareXcel offering, visit IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 14

15 For additional information on the revised IBM Operational Support Services, refer to Services Announcement , dated July 10, IBM Operational Support Services SoftwareXcel: Yes System i Software Maintenance applies: No Variable charges apply: No Educational allowance available: Yes. A 15% education allowance applies to qualified education institution customers. IBM Electronic Services IBM has transformed its delivery of hardware and software support services to put you on the road to higher system availability. Electronic Services is a Web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent. The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems. The Electronic Service Agent is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM. Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. To learn how Electronic Services can work for you, visit Prices Information on charges is available at In the Electronic tools category, select the option for "Purchase/upgrade tools." Pricing for 5698-xxx non-msu-based zseries offerings Program name: IBM Tivoli Identity Manager for z/os Program PID: 5698-A82 Entitlement License option/ identifier Description Pricing metric S013HTW Identity Manager Basic OTC, per Value Unit for z/os Subscription and Support PID: 5698-S96 Entitlement License option/ identifier Description Pricing metric S013HW3 Identity Manager Basic ALC, per Value Unit SW S&S Manager for z/os no charge, decline SW S&S Passport Advantage IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 15

16 For Passport Advantage and charges, contact your IBM representative or your authorized IBM Business Partner. Additional information is also available at Order now To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business Partner. To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU ( ). Phone: 800-IBM-CALL ( ) Fax: 800-2IBM-FAX ( ) Internet: Mail: IBM Americas Call Centers Dept. Teleweb Customer Support, 9th floor 105 Moatfield Drive North York, Ontario Canada M3B 3R1 Reference: LE001 The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products. Note: Shipments will begin after the planned availability date. Trademarks System z, System i, and Electronic Service Agent are trademarks of International Business Machines Corporation in the United States or other countries or both. Tivoli, z/os, DB2, WebSphere, pseries, Scalable POWERparallel Systems, zseries, Lotus Notes, AIX, RACF, Passport Advantage, OS/390, SystemPac, and S/390 are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Intel is a registered trademark of Intel Corporation. Windows and Microsoft are trademarks of Microsoft Corporation. UNIX is a registered trademark of the Open Company in the United States and other countries. Other company, product, and service names may be trademarks or service marks of others. This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States Announcement IBM is a registered trademark of International Business Machines Corporation 16