CICS V5.4 Technical Overview - Guide Share Europe UK …conferences.gse.org.uk/attachments/presentations/BYN6cl_1510047260… · • New in CICS TS V5.4 - Event Processing Transient

CICS V5.4 Technical Overview

Steve FoleyIBM

7th November 2017Session GA

© 2017 IBM Corporation CICS Transaction Server for z/OS

Agenda

● CICS Upgrade Planning

● Major New Capability○ JEE 7 Full Platform support○ New asynchronous API○ Rapid provisioning of development environments

● CICS V5.4 Foundation○ Extensions to dynamic policy based management○ Enhanced management for MQ applications○ Workload Management Flow Control○ API extensions for batch applications○ Numerous enhancements to Security and Resilience

2


Service Planning

Release Availability ServiceCICS TS V5.4 16th June 2017

CICS TS V5.3 11th December 2015

CICS TS V5.2 Withdrawn 31st December 2020

CICS TS V5.1 Withdrawn 1st July 2019

CICS TS V4.2 Withdrawn 30th September 2018

CICS TS V4.1 Withdrawn 30th September 2017

3

4

Multi-Version MeasurementWhat does it do?

Removes Single Version Charging penalty for almost all IBM OTC and IBM MLC Products, including z/OS, CICS, DB2, IMS, MQ, z/VSE, etc.

How does it work?

When was it available?• Announcement: 14-Feb http://mainframeinsights.com/farewell-single-version-charging-svc/• June 1, 2017, is the earliest billing effective date for programs under MVM terms.• By Year End 2017, all eligible products will be billed using MVM terms.

CICS TS V5.1

CICS TS V5.3+ = CICS TS V5

CICS TS V4.2

CICS TS V5.2+ =

CICS TS ALL

Releases within a version arealready measured like this ➔

Under MVM, versions are measured in the same way ➔

https://www-01.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/8/649/ENUSA17-0148/index.html&lang=en&request_locale=en

http://mainframeinsights.com/farewell-single-version-charging-svc/

5

Consuming CICS Continuous DeliveryContinuous delivery enables more agile methods for the consumption of new CICS capabilities


CICS V5.4Major New Capability

6

Support for applications written to the Java EE 7 Full Platform specification

7

8

The new asynchronous CICS API is supported across different programming languages using a simple set of functions:

Applications that utilize this new API benefit from the comprehensive statistics, monitoring and transaction tracking capabilities.

A powerful new asynchronous API to extend programming language capabilities

▪ RUN TRANSID▪ FETCH CHILD▪ FETCH ANY▪ FREE CHILD

9

The IBM z/OS Provisioning Toolkit is a simple command line utility for the rapid provisioning of z/OS development environments.

System programmers can easily manage the provisioning process by preconfiguring the environments using z/OSMF workflows.

Application developers can provision and deprovision z/OS applications environments in minutes, without requiring any z/OS specific administration skills.

Uses IBM Cloud Provisioning and Management for z/OS to control developer access and set appropriate provisioning limits.

IBM z/OS Provisioning Toolkit

The toolkit is fully supported and available now to all z/OS V2 clients at no additional charge.


CICS V5.4Foundation

10


Policy enhancements

11


Policies are now expanded to support a new set of system-based rules.

This simplifies CICS systems management by providing a single place to create and manage both task-based and system-based policy rules.

Dynamic policy based management of applications that span multiple languages


Policies now provide the same capabilities as CICS system events and with a number of additional advantages. These include:✓ combining multiple rules in a

single policy✓ writing a message to the CICS

log in addition to emitting an event

✓ removing the requirement to define a capture specification for each event



IMPORTANT NOTICE:• CICS system events are now deprecated and may be removed in a future

release of CICS. • CICS policies are the strategic replacement for the CICS system events

technology. • All events emitted by policy make use of the existing CICS events

infrastructure. • The underlying CICS events infrastructure and CICS application events

remain strategic.

• New in CICS TS V5.4 - Event Processing Transient Data adapter○ INTRA and EXTRA TD Queues both supported


CICS TS

Cumulative Time Syncpoint Start TSQ

DB2 SQL Files Storage CPU Time

Policy

Task

Abend Task

Emit Event

Output Message

V5.2

Trigger: Action:

TDQ

Prog. Link

Policies

Policy ScopeCICS Region

Entry Point: TranidEntry Point: Program

Entry Point: URIApplication

Platform

V5.1

EXEC CICS MQ IMS DLI Shared TSV5.3Named Counter

Async API System RulesV5.4

DB2 File Message

MXT TCLASS Abend


MQ Management

16


CICS system administration of applications that utilize MQ is simplified. A new resource definition online (RDO) defined resource MQMONITOR provides control over the transaction ID and user ID under which a monitor task runs.CICS can now automatically start and stop MQ monitor tasks, which are based on the status of the MQCONN resource.

Enhanced management capabilities for applications that utilize IBM MQ for z/OS


18

New MQMONITOR resource


19

Example - CICS MQ Bridge

© 2017 IBM Corporation CICS TS Education

20

Example - all installed MQ monitors


z/OS WLM Health API

21


CICS TS can now utilize the z/OS Workload Manager Health API as a means of controlling the flow of work into a CICS region. This can allow a CICS region to have a warm-up process after system initialization, to help to ensure that the CICS region is ready to receive work.

Enhanced security and resiliency of applications across all languages


z/OS WLM Health Support …

▪ Problems we’re trying to solve (or mitigate the effects of) …– “DFHSI1517 Control is being given to CICS” – and we’re not really ready!– New IP Connections sent to a region that’s not really ready

▪ Solution …– Utilise the z/OS WLM Health API to control the rate at which we reach

100% Health• Delay the rate at which TCP/IP will send new HTTP connections to a

CICS region– Today a CICS region is de facto WLM health 100% immediately we

open to TCP/IP▪ Configuration …

– For Sysplex Distributor – set SERVERWLM on the VIPADISTRIBUTE DISTMETHOD

– For TCP/IP port sharing – set SHAREPORTWLM on the TCP/IP profile port definition

23 IBM Confidential


z/OS WLM Health Support …

▪ New SIT parameter– The WLMHEALTH system initialization parameter specifies whether CICS

is to use the z/OS WLM Health API (IWM4HLTH) to indicate the CICS regions 'health' to z/OS WLM. The WLMHEALTH parameter specifies the time interval between calls to the z/OS Workload Managers Health API (IWM4HLTH) and the adjustment value to be used on each call.

WLMHEALTH=(interval,adjustment)|OFF

– Interval• Specifies the amount of time, in seconds, between calls to the z/OS

Workload Managers Health API (IWM4HLTH). The value specified must be in the range 0 through 600.

– Adjustment• Specifies the health adjustment value in the range 1 through 100

provided to the z/OS Workload Managers Health API (IWM4HLTH) at the interval specified for the WLM health interval.

24 IBM Confidential


Example 1 - WLMHEALTH=(20,25)

25 IBM Confidential

15.22.34 JOB02121 +DFHKE0412I IYK2Z1V1 CICS WAITPRED call to automatic restart manager has completed. 15.22.34 JOB02121 +DFHCP0101I IYK2Z1V1 CPI initialization has started. 15.22.34 JOB02121 +DFHPR0104I IYK2Z1V1 Partner resource manager initialization has started. 15.22.34 JOB02121 +DFHAI0101I IYK2Z1V1 AITM initialization has started. 15.22.34 JOB02121 +DFHW20101I IYK2Z1V1 Web2.0 domain initialization has ended. 15.22.34 JOB02121 +DFHFC0100I IYK2Z1V1 File Control initialization has started. 15.22.34 JOB02121 +DFHTD0100I IYK2Z1V1 Transient Data initialization has started. 15.22.34 JOB02121 +DFHTD0101I IYK2Z1V1 Transient Data initialization has ended. 15.22.34 JOB02121 +DFHFC0562 IYK2Z1V1 The RLS control ACB has been successfully registered by CICS. 15.22.34 JOB02121 +DFHFC0570 IYK2Z1V1 File control RLS access has been enabled. 15.22.34 JOB02121 +DFHFC0101I IYK2Z1V1 File Control initialization has ended. 15.22.34 JOB02121 +DFHCP0102I IYK2Z1V1 CPI initialization has ended. 15.22.34 JOB02121 +DFHPR0105I IYK2Z1V1 Partner resource manager initialization has ended. 15.22.34 JOB02121 +DFHAI0102I IYK2Z1V1 AITM initialization has ended. 15.22.34 JOB02121 +DFHSI1511I IYK2Z1V1 Installing group list DFHLIST. 15.22.35 JOB02121 +DFHSI1511I IYK2Z1V1 Installing group list CJBLIST1. 15.22.35 JOB02121 +DFHLG0103I IYK2Z1V1 System log (DFHLOG) initialization has started. 15.22.35 JOB02121 +DFHLG0745I IYK2Z1V1 System log full scan has started. 15.22.35 JOB02121 +DFHLG0748I IYK2Z1V1 System log selective scan has started. 15.22.35 JOB02121 +DFHLG0749I IYK2Z1V1 System log scan has completed. 15.22.35 JOB02121 +DFHRM0156 IYK2Z1V1 This COLD start will NOT cause any damage to local resources. 15.22.35 JOB02121 +DFHRX0106I IYK2Z1V1 Restart processing with Resource Recovery Services (RRS) is beginning. 15.22.35 JOB02121 +DFHRX0107I IYK2Z1V1 Restart processing with Resource Recovery Services (RRS) has ended. 15.22.35 JOB02121 +DFHSI1519I IYK2Z1V1 The interregion communication session was successfully started in XCF group DFHIR000 15.22.35 JOB02121 +DFHSZ4001 I 04/04/2017 15:22:35 IYK2Z1V1 FEPI initialization has started. 15.22.35 JOB02121 +DFHAP1203I IYK2Z1V1 Language Environment is being initialized. 15.22.35 JOB02121 +DFHSZ4002 I 04/04/2017 15:22:35 IYK2Z1V1 FEPI initialization has ended. 15.22.36 JOB02121 +DFHAP1211I IYK2Z1V1 Language Environment initialization completed. 15.22.36 JOB02121 +DFHWB1007 IYK2Z1V1 Initializing CICS Web environment. 15.22.36 JOB02121 +DFHWB1008 IYK2Z1V1 CICS Web environment initialization is complete. 15.22.36 JOB02121 +DFHEC1006I IYK2Z1V1 Event processing status is STARTED. 15.22.36 JOB02121 +DFHSI8440I IYK2Z1V1 Initiating connection to MQ. 15.22.36 JOB02121 +DFHMQ0337 I 04/04/2017 15:22:36 IYK2Z1V1 CONNECT received from DFHMQCOD. 15.22.36 JOB02121 +DFHMQ0309 E 04/04/2017 15:22:36 IYK2Z1V1 Unable to connect using MQNAME DEV2. MQCC=2 MQRC=2298. 15.22.36 JOB02121 +DFHSI8443 IYK2Z1V1 Connection to MQ not completed. Adapter is awaiting initialization of MQ. 15.22.36 JOB02121 +DFHSI1517 IYK2Z1V1 Control is being given to CICS. 15.22.36 JOB02121 +DFHDH0101I IYK2Z1V1 Document domain initialization has ended. 15.22.36 JOB02121 +DFHXS1101I IYK2Z1V1 Security initialization has ended. 15.22.36 JOB02121 +DFHSJ0102I IYK2Z1V1 SJ domain initialization has ended. 15.22.56 JOB02121 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 25. 15.23.17 JOB02121 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 50. 15.23.37 JOB02121 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 75. 15.23.57 JOB02121 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 100.

Control is being given to CICS

z/OS WLM Health increments start


Example 2 - WLMHEALTH=(0,15)

26 IBM Confidential

16.07.47 JOB02341 +DFHKE0412I IYK2Z1V1 CICS WAITPRED call to automatic restart manager has completed. 16.07.47 JOB02341 +DFHCP0101I IYK2Z1V1 CPI initialization has started. 16.07.47 JOB02341 +DFHPR0104I IYK2Z1V1 Partner resource manager initialization has started. 16.07.47 JOB02341 +DFHAI0101I IYK2Z1V1 AITM initialization has started. 16.07.47 JOB02341 +DFHW20101I IYK2Z1V1 Web2.0 domain initialization has ended. 16.07.47 JOB02341 +DFHFC0100I IYK2Z1V1 File Control initialization has started. 16.07.47 JOB02341 +DFHTD0100I IYK2Z1V1 Transient Data initialization has started. 16.07.47 JOB02341 +DFHTD0101I IYK2Z1V1 Transient Data initialization has ended. 16.07.47 JOB02341 +DFHFC0562 IYK2Z1V1 The RLS control ACB has been successfully registered by CICS. 16.07.47 JOB02341 +DFHFC0570 IYK2Z1V1 File control RLS access has been enabled. 16.07.47 JOB02341 +DFHFC0101I IYK2Z1V1 File Control initialization has ended. 16.07.47 JOB02341 +DFHCP0102I IYK2Z1V1 CPI initialization has ended. 16.07.47 JOB02341 +DFHPR0105I IYK2Z1V1 Partner resource manager initialization has ended. 16.07.47 JOB02341 +DFHAI0102I IYK2Z1V1 AITM initialization has ended. 16.07.47 JOB02341 +DFHSI1511I IYK2Z1V1 Installing group list DFHLIST. 16.07.47 JOB02341 +DFHSI1511I IYK2Z1V1 Installing group list CJBLIST1. 16.07.48 JOB02341 +DFHLG0745I IYK2Z1V1 System log full scan has started. 16.07.48 JOB02341 +DFHLG0748I IYK2Z1V1 System log selective scan has started. 16.07.48 JOB02341 +DFHLG0749I IYK2Z1V1 System log scan has completed. 16.07.48 JOB02341 +DFHRM0156 IYK2Z1V1 This COLD start will NOT cause any damage to local resources. 16.07.48 JOB02341 +DFHRX0106I IYK2Z1V1 Restart processing with Resource Recovery Services (RRS) is beginning. 16.07.48 JOB02341 +DFHRX0107I IYK2Z1V1 Restart processing with Resource Recovery Services (RRS) has ended. 16.07.48 JOB02341 +DFHSI1519I IYK2Z1V1 The interregion communication session was successfully started in XCF group DFHIR000 16.07.48 JOB02341 +DFHSZ4001 I 04/04/2017 16:07:48 IYK2Z1V1 FEPI initialization has started. 16.07.48 JOB02341 +DFHAP1203I IYK2Z1V1 Language Environment is being initialized. 16.07.48 JOB02341 +DFHSZ4002 I 04/04/2017 16:07:48 IYK2Z1V1 FEPI initialization has ended. 16.07.49 JOB02341 +DFHAP1211I IYK2Z1V1 Language Environment initialization completed. 16.07.49 JOB02341 +DFHWB1007 IYK2Z1V1 Initializing CICS Web environment. 16.07.49 JOB02341 +DFHWB1008 IYK2Z1V1 CICS Web environment initialization is complete. 16.07.49 JOB02341 +DFHEC1006I IYK2Z1V1 Event processing status is STARTED. 16.07.49 JOB02341 +DFHSI8440I IYK2Z1V1 Initiating connection to MQ. 16.07.49 JOB02341 +DFHMQ0337 I 04/04/2017 16:07:49 IYK2Z1V1 CONNECT received from DFHMQCOD. 16.07.49 JOB02341 +DFHMQ0309 E 04/04/2017 16:07:49 IYK2Z1V1 Unable to connect using MQNAME DEV2. MQCC=2 MQRC=2298. 16.07.49 JOB02341 +DFHSI8443 IYK2Z1V1 Connection to MQ not completed. Adapter is awaiting initialization of MQ. 16.07.49 JOB02341 +DFHSI1517 IYK2Z1V1 Control is being given to CICS. 16.07.49 JOB02341 +DFHDH0101I IYK2Z1V1 Document domain initialization has ended. 16.07.49 JOB02341 +DFHXS1101I IYK2Z1V1 Security initialization has ended. 16.07.49 JOB02341 +DFHSJ0102I IYK2Z1V1 SJ domain initialization has ended. 16.09.32 JOB02341 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 15. 16.09.52 JOB02341 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 30. 16.10.12 JOB02341 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 45. 16.10.33 JOB02341 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 60. 16.10.53 JOB02341 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 75. 16.11.13 JOB02341 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 90. 16.11.33 JOB02341 +DFHMN0115I IYK2Z1V1 CICS Server z/OS WLM Health percentage is now 100.

Control is being given to CICS

z/OS WLM Health increments start when CEMT SET WLMHEALTH

OPEN has been issued


Example 3 - CICS Shutdown

27 IBM Confidential

11.52.42 JOB36262 +DFHTM1715 IYK2Z1V1 CICS is being quiesced by userid CBAKER in transaction CEMT at netname IYCWT126. 11.52.42 JOB36262 +DFHDM0102I IYK2Z1V1 CICS is quiescing. 11.52.42 JOB36262 +DFHMN0115I IYK2Z1V1 CICS Server WLM Health percentage is now 0. 11.52.42 JOB36262 +DFHCESD IYK2Z1V1 SHUTDOWN ASSIST TRANSACTION CESD STARTING. SHUTDOWN IS NORMAL. 11.52.42 JOB36262 +DFHEC1006I IYK2Z1V1 Event processing status is DRAINING. 11.52.42 JOB36262 +DFHEC1006I IYK2Z1V1 Event processing status is STOPPED. 11.52.43 JOB36262 +DFHMQ0411 I 02/17/2016 11:52:43 IYK2Z1V1 CICS warm shutdown detected. Adapter is quiescing. 11.52.43 JOB36262 +DFHTM1781 IYK2Z1V1 CICS shutdown cannot complete because some non-system user tasks have not terminated. 11.52.43 JOB36262 +DFHMQ0107 I 02/17/2016 11:52:43 IYK2Z1V1 A request to end CKTI has been received. CKTI ended. 11.52.43 JOB36262 +DFHMQ0334 I 02/17/2016 11:52:43 IYK2Z1V1 Adapter shutdown successful. 11.52.43 JOB36262 +DFHMQ0364 I 02/17/2016 11:52:43 IYK2Z1V1 Monitor terminated normally. 11.52.49 JOB36262 +DFHTM1782I IYK2Z1V1 All non-system tasks have been successfully terminated. 11.52.50 JOB36262 +DFHZC2305I IYK2Z1V1 Termination of VTAM sessions beginning 11.52.51 JOB36262 +DFHZC2316 IYK2Z1V1 VTAM ACB is closed 11.52.51 JOB36262 +DFHCQ0104I IYK2Z1V1 MVS console queue is closed. 11.52.53 JOB36262 +DFHFC0563 IYK2Z1V1 The RLS control ACB has been successfully unregistered by CICS. 11.52.53 JOB36262 +DFHRM0131 IYK2Z1V1 Resynchronization required with RRS resources. 11.52.54 JOB36262 +DFHSZ4015 I 02/17/2016 11:52:54 IYK2Z1V1 FEPI normal termination has started. 11.52.54 JOB36262 +DFHSZ4003 I 02/17/2016 11:52:54 IYK2Z1V1 FEPI termination complete. 11.52.54 JOB36262 +DFHRM0204 IYK2Z1V1 There are no indoubt, commit-failed or backout-failed UOWs. 11.52.54 JOB36262 +DFHRM0130 IYK2Z1V1 Recovery manager has successfully quiesced. 11.52.54 JOB36262 +DFHDU0303I IYK2Z1V1 Transaction Dump Data set DFHDMPA closed. 11.52.54 JOB36262 +DFHKE1799 IYK2Z1V1 TERMINATION OF CICS IS COMPLETE. 11.52.54 JOB36262 -CI07CJB1 CICS 00 17365 .02 .00 3.87 68889 0 0 0 0 0 3 11.52.54 JOB36262 -CI07CJB1 DUMPA 00 47 .00 .00 .00 347 0 0 0 0 0 4 11.52.54 JOB36262 -CI07CJB1 DUMPB 00 207 .00 .00 .00 483 0 0 0 0 0 5 11.52.54 JOB36262 IEF404I CI07CJB1 - ENDED 11.52.54 JOB36262 -CI07CJB1 ENDED. NAME-CHRIS BAKER TOTAL CPU TIME= .02 TOTAL ELAPSED TIME= 3.87 11.52.54 JOB36262 £HASP395 CI07CJB1 ENDED

The MN Domain sets the z/OS WLM Health to 0

then Waits for Applications Finished as it does today.


IBM Confidential :: ©2017 IBM Corporation

z/OS WLM Health and CPSM WLM


29

1) Starting and Stopping MQ monitors (AUTOSTART=YES)● Start when Health > 0 and Status is OPEN or OPENING● Stop when Health = 0 and Status = CLOSED

2) Throttling MQGET requests (and therefore MQ application tasks)● Only applies to MQMONITOR associated tasks, e.g. CKTI, CKBR● Only applies when Health < 100%● MQGETs limited to Health% x MXT x 2 calls per second

Example - WLMHEALTH=(20,25) and MXT=400…...

z/OS WLM Health and MQ


30

z/OS WLM Health and MQ - Example


IBM Health Checker

31


CICS TS now supports three new IBM Health Checker for z/OS checks, each of which define security best practices. If a CICS region becomes non-compliant, a Health Checker exception message will be issued.

CICS_CEDA_ACCESSCICS_JOBSUB_SPOOLCICS_JOBSUB_TDQINTRDR


32



CICS_CEDA_ACCESS− Checks whether CEDA is accessible to unauthenticated users, which might compromise

the security of the LPARCICS_JOBSUB_SPOOL− Checks whether the system spool, if enabled, is accessible to unauthenticated users,

which might compromise the security of the LPARCICS_JOBSUB_TDQINTRDR− Checks whether any transient data queue that writes to the internal reader is accessible to

unauthenticated users, which might compromise the security of the LPAR

33


34

********************************* TOP OF DATA ****************************CHECK(IBMCICS,CICS_CEDA_ACCESS) SYSPLEX: PLEX2 SYSTEM: MV2C START TIME: 05/10/2017 11:37:00.074340 CHECK DATE: 20170314 CHECK SEVERITY: LOW * Low Severity Exception * DFHH0001E The CEDA transaction is accessible to unauthenticated users. Explanation: The IBM supplied transaction CEDA is accessible to the default user or CICS security is turned off. This means anyone who can connect to the IP address and port number of one of the CICS regions listed below can change the configuration of CICS. The regions listed below have a RC/RSN with more specific information about why the region failed the check: 0801 CEDA installed and SEC=NO 0802 CEDA installed and DFLTUSER can run it 0807 The checking module can't be linked to System Action: The system continues processing. Operator Response: Report this error to the System Programmer. System Programmer Response: Correct the security exposure which has been identified. Problem Determination: n/a Source: CICS Transaction Server Reference Documentation: Look at the CICS Knowledge Centre for advice on best practice Automation: n/a Check Reason: CICS Health Check DFHHCC1 Check run (local time) Jobname ASID Applid Regionid Ver RcRn 05/10/2017 11:07:00.395096 CMASC111 007D C5407101 HODGINS 0710 0801 37 05/10/2017 11:07:20.515390 IYK3Z0VA 006A IYK3Z0VA LIQIN 0710 0801 7 05/10/2017 11:11:00.720032 CICSDEV1 007E IYK2Z3B1 WHARMBY 0710 0801 48 xxxxxxxxxxxx 35 lines deleted xxxxxxxxxx Number of regions checked = 38 Number of regions reported = 38 END TIME: 05/10/2017 11:37:00.078608 STATUS: EXCEPTION-LOW

Time check runCICS RegionCICS ReleaseReason for reportingNumber times check run


CICS Health Checker - requirements

▪ CICS TS 5.4▪ CICS TS V5 APAR PI76965▪ CICS TS 4.2 APAR PI76963

▪ LINKLST Update Required4 The are a number of new modules in SDFHLINK4 Need to be added to LINKLST so that Health Checker can access them4 Same for all releases of CICS (only one copy required)

▪ Requires z/OS PTFs (enhancement to SVC 99)4 z/OS 2.1 UA915844 z/OS 2.2 UA91583

35


Read-only EDF

36


Read only CEDF and CEDX• Customers need the ability to run CEDF or CEDX in emergency

situations in production regions• The problem is the risk of accidental or malicious changes being

made to storage or program execution• The solution is to provide read only versions of CEDF and

CEDX– New transactions CEDG and CEDY have been introduced

37


CEDG and CEDY• CEDG and CEDY

– cannot change storage– cannot change the command or the response– cannot invoke CECI – cannot invoke CEBR

38


EXCI enhancement

39


The EXCI interface enables standalone applications that run on z/OS to programmatically interoperate with CICS-hosted applications and APIs. This interface is now enhanced to add support for CICS channels and containers. It provides a mechanism to exchange large volumes of structured parameter data between batch applications and CICS applications.

API extensions that enables improved interoperability with batch applications


Any CICS applications coded to the channel and containers API and invoked using Distributed Program Link (DPL) can also be invoked unchanged from an EXCI client, including CICS applications that run on earlier CICS TS releases that support channels and containers.

API extensions that enables improved interoperability with batch applications


System autoinstall for LE modules

42


Background

▪ Currently Language Environment Modules must be defined in the CSD4 CICS provides empty CEE group in DFHLIST4 user must populate CEE group with the definitions supplied by LE in SCEESAMP▪ in member CEECCSD for standard LE definitions▪ in member CEECCSDX for XPLINK definitions

4 in member CLB3YCSD of SCLBJCL if using C I/O stream library, complex mathematics, collection, or Application Support Class DLLs

▪ For standard LE and XPLINK this totals over 2,000 definitions4 Large amount of redundancy as modules specific to language features used

▪ Large migration effort when upgrading z/OS releases

4343


Solution▪ CICS TS 5.4 has removed CEE group from DFHLIST

▪ CEE group should be removed from all user defined grouplists

▪ New DFHLE group contains 4 definitions specific to the CLER transaction

▪ All other definitions are system autoinstalled by CICS when LE issues EXEC CICS LOAD

▪ Independent of whether program autoinstall is active or not▪ No user replaceable program autoinstall is invoked for system autoinstall▪ CICS will set the attributes for the LE program definition

– Will be same attributes as used today in the CEE group▪ Definitions installed only when required

▪ Non-applicable LE Event Handlers are EXEC CICS DISCARDed

4444


Intrusion Detection Service

(and feature toggles)

45


The CICS 3270 Intrusion Detection Service (IDS) can help alert you to 3270 protocol violations as they occur in CICS Basic Mapping Support (BMS) applications.CICS TS also integrates with the new z/OS Communication Server IDS function to identify potential protocol violations in real time, for both BMS and native 3270 data streams.



Feature toggle control

• BMS IDS is first use of feature toggles in CICS...com.ibm.cics.bms.ids={ true | false }com.ibm.cics.bms.ids.action={ abend |ignore | log }

Feature toggles allow flexible adoption of new function

Feature toggle hierarchy…..

47


Other enhancements...

48


• A fence is required to stop updates being made to VSAM files on the standby site other than by the replication product

• New availability state for VSAM datasets– SET DSNAME(data-value)

>--+--------------------------------------------+------------------>< '---AVAILABLITY(cvda)----------------------' '---AVAILABLE---------------------------------' '---RREPL---------------------------------------' '---UNAVAILABLE ----------------------------'

• To identify to CICS that a program is a replicator program – SET PROGRAM(data-value)

>--+-------------------------------------+------------------>< '---REPLICATION(cvda)--------------' '---REPLICATOR-----------------------' '---NOREPLICATOR-------------------'

49

VSAM restricted access during replication


Problem▪ CICSPlex with 10’s of thousands of preset userid terminals (ATMs)

▪ Terminals share a very small number of userids

▪ ACEE associated with every terminal

▪ ACEE storage on TORs and AORs 10’sMBs below bar

Solution

▪ Alternative solution sharing ACEEs▪ Preset userid terminals share ACEEs

▪ No PoE (port of entry) information associated with ACEE (similar to web requests)

▪ Configurable on a region basis

ConfigurationSNPRESET=(UNIQUE|SHARED)

▪ UNIQUE - Each preset userid terminal has its own ACEE with associated PoE information

▪ SHARED - Preset userid terminals with the same userid share an ACEE

Shared ACEEs for preset userid terminals


Dump additional address spaces

• Service have requested the ability to dump additional non-CICS address spaces when a CICS system dump is triggered.

• Two new optional parameters, Joblist and Dsplist, added to INQ SYDUMPCODE and SET SYDUMPCODE

51


DFHSYDMP

• It is known that some errors will nearly always need additional address spaces to be dumped– errors with TCP/IP or CICS logger for example

• Adding these codes as default sysdump codes will allow all relevant data to be gathered when it first occurs rather than depending on a recreate

• A new URM called DFHSYDMP is provided to set up some default sysdump options– This program is invoked prior to 2nd phase PLTPI processing. It

must not be defined in the PLTPI table for your CICS region.

52

53

✓ Support for applications written to the Java EE 7 Full Platform specification.

✓ A powerful new asynchronous API to extend programming language capabilities.

✓ Dynamic policy based management of applications that span multiple languages.

✓ Enhanced security and resiliency of applications across all languages.

✓ API extensions that enables improved interoperability with batch applications.

✓ Enhanced management capabilities for applications that utilize IBM MQ for z/OS.

✓ Numerous enhancements to simplify or automate common workflows.

Summary - new and enhanced in CICS TS V5.4

Session feedback

• Please submit your feedback online at:

http://conferences.gse.org.uk/2017/feedback/ga

• Paper feedback forms also available from the Chair person

• This session is GA

Notices and DisclaimersCopyright © 2017 by International Business Machines Corporation (IBM). No part of this document may be reproduced or transmitted in any form without written permission from IBM. U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM.Information in these presentations (including information relating to products that have not yet been announced by IBM) has been reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM shall have no responsibility to update this information. THIS DOCUMENT IS DISTRIBUTED "AS IS" WITHOUT ANY WARRANTY, EITHER EXPRESS OR IMPLIED. IN NO EVENT SHALL IBM BE LIABLE FOR ANY DAMAGE ARISING FROM THE USE OF THIS INFORMATION, INCLUDING BUT NOT LIMITED TO, LOSS OF DATA, BUSINESS INTERRUPTION, LOSS OF PROFIT OR LOSS OF OPPORTUNITY. IBM products and services are warranted according to the terms and conditions of the agreements under which they are provided. Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without notice.Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary.References in this document to IBM products, programs, or services does not imply that IBM intends to make such products, programs or services available in all countries in which IBM operates or does business. Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not necessarily reflect the views of IBM. All materials and discussions are provided for informational purposes only, and are neither intended to, nor shall constitute legal or other guidance or advice to any individual participant or their specific situation. It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s business and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice or represent or warrant that its services or products will ensure that the customer is in compliance with any law.

Notices and Disclaimers continued

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products in connection with this publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. IBM does not warrant the quality of any third-party products, or the ability of any such third-party products to interoperate with IBM’s products. IBM EXPRESSLY DISCLAIMS ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. The provision of the information contained h erein is not intended to, and does not, grant any right or license under any IBM patents, copyrights, trademarks or other intellectual property right. IBM, the IBM logo, ibm.com, Aspera®, Bluemix, Blueworks Live, CICS, Clearcase, Cognos®, DOORS®, Emptoris®, Enterprise Document Management System™, FASP®, FileNet®, Global Business Services ®, Global Technology Services ®, IBM ExperienceOne™, IBM SmartCloud®, IBM Social Business®, Information on Demand, ILOG, Maximo®, MQIntegrator®, MQSeries®, Netcool®, OMEGAMON, OpenPower, PureAnalytics™, PureApplication®, pureCluster™, PureCoverage®, PureData®, PureExperience®, PureFlex®, pureQuery®, pureScale®, PureSystems®, QRadar®, Rational®, Rhapsody®, Smarter Commerce®, SoDA, SPSS, Sterling Commerce®, StoredIQ, Tealeaf®, Tivoli®, Trusteer®, Unica®, urban{code}®, Watson, WebSphere®, Worklight®, X-Force® and System z® Z/OS, are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml.

Documents

CICS V5.4 Technical Overview - Guide Share Europe UK …conferences.gse.org.uk/attachments/presentations/BYN6cl_1510047260… · • New in CICS TS V5.4 - Event Processing Transient