IBM Systems & Technology Group z/OS V1.11 – An … System z 3 ©2008,2009 IBM Corporation System z10 EC New Functions and Features 1 TKE Enhancements New Capacity on Demand architecture

IBM Systems & Technology Group

© 2008, 2009 IBM Corporation

Pekka JaskaraIBM [email protected]

z/OS V1.11 – An Update

LSU 2009

IBM Systems & Technology Group

© 2008, 2009 IBM Corporation2

1. Fee-based service extension available

2. All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.

3. IBM Lifecycle Extension for z/OS V1.7 (5637-A01) required

4. Fee-based service extension required for some features

z/OS Support Summary

z/OS z800/z900

z890

R10

R6

R7

R8

R9

x x

x

x

x

x

x

x

x x

R11 x x

R122 x x

z990

x

x

x

x

x

z9 EC

x

x

x

x

x

x x

x x

z9 BC

x

x

x

x

x

x

x

DS8000™DS6000™

z10 EC

x

x4

x

x

x

End of Service

Coexists with

z/OS...

Planned Ship Date2

TS1130

9/07 R8

9/081 R9

9/091 R10

9/102 R11

9/112 R122x

x

x4

x

x

x

x

x

x

9/122 R132 9/09x x

9/132 R142 9/102x xx

z10 BC

x

x3

x

x

x

x

IBM System z

3

©2008,2009 IBM Corporation

System z10 EC New Functions and Features1

TKE Enhancements

New Capacity on Demand

architecture and enhancements

Capacity Provisioning

Hardware Decimal Floating

Point

Enhanced CPACF SHA 512,

AES 192 and 256-bit keys

HiperDispatch

Large Page (1 MB)2

Fixed HSA as standard

Up to 1,520 GB memory3

Star Book Interconnect

36 CP Subcapacity Settings

Up to 64 customer PUs

Faster Processor Unit (PU)

Five hardware models

High-Performance FICON (zHPF)

Power Monitoring support

Standard ETR Attachment

STP using InfiniBand

CF Duplexing Improvements with

CFCC Level 16

Scheduled Outage Reduction

FICON LX Fiber Quick Connect

InfiniBand Coupling Links

6.0 GBps InfiniBand HCA to I/O

interconnect

HiperSockets enhancements

OSA-Express3 10 GbE

SCSI IPL included in Base LIC

FICON® Express8 -- New

1. z/OS R7 support for some functions requires IBM Lifecycle Extension for z/OS V1.7 (5637-A01) 2. z/OS R9 and lager required for large page support.

3. Maximum of 1 TB per LPAR. Maximum supported by z/OS R7 is 512 GB. z/OS R8 and later are designed to support up to 4 TB per image.

(z/OS Support in blue)

Hardware Support

© 2008, 2009 IBM Corporation4

InfiniBand Coupling Links

Enhanced CPACF with SHA 512,AES 192 and 256-bit keys

CFCC Level 16

New Family of OSA-Express3

STP Enhancements

Faster Uni Processor – 3.5 Ghz

Up to 5 CPs

Up to 248 GB Customer Memory

High Performance FICON for System z

HiperDispatch

130 CP Capacity Settings

Separate 8 GB of fixed HSA

InfiniBand® (IFB)I/O interconnect

FICON® Express8 -- New

Large Page Support (1 MB)

STP over Coupling Links including InfiniBand

HiperSockets Layer 2 Support

Capacity Provisioning Support

Crypto TKE 5.3 Enhancements

CBU & On/Off CoD Increased Functionality and Flexibility

Power Monitoring Support

z10 BC – Functions and Features Overview

Replaceable Processor Unit and System

Controller Single Chip Modules (SCMs)

Hot Pluggable I/O Drawer

Hardware Decimal Floating Point

IBM System z

5

©2008,2009 IBM Corporation

1. Additional features, service, or Web downloads required. 2. Please refer to the current PSP buckets for latest PTFs for z10 Compatibility and new functions/features support. 3. Cryptographic Support for z/OS V1R8-V1R10 and z/OS.e V1R8 Web deliverable required 4. Lifecycle Extentsion required

1.71,2,3TKE Enhancements

1.71,2CFCC Level 16

1.71,2,4High-Performance FICON and FICON Express8

1.10Dynamic Addition of PUs

1.71,2Secure Key AES, 13-19 Digit PANs

1.81CPU Measurement

1.71,2 STP NTP Client Support

1.7 (1.81 for some functions)OSA-Express3 10 Gbps – CHPID OSD

1.9HiperSockets Multi Write Facility

1.81520 GB per server, 1 TB per LPAR

1.71,24096-bit RSA support

1.964-way support

1.71,2InfiniBand Coupling

1.8HW Decimal Math Support

1.9Capacity Provisioning

1.71,2Basic System z10™ EC and z10 BC support

1.71,2CPACF Enhancements

1.91Large Page (1MB)

1.71,2 HiperDispatch

z/OS

z10 and z/OS Support for New functions

Hardware Support

6©2008,2009 IBM Corporation

Meeting the challenges of a dynamic infrastructure with designs for:

Improving Availability

Sysplex partitioning

enhancements, Predictive failure

analysis, Alternate Sysplex Root

Filesystem support, SETALLOC

command, Remote Pair

FlashCopy support, AutoIPL

improvements…

Scalability & Performance

Extensions to EAV support, RMODE 64

DSECTs, HDELETE for IEFBR14, More

Large Page exploitation, EDT changes,

DS8000 Flash drive support, SMS volume

separation, C/C++ Prefetch, XES

improvements, Sysplex Distributor …

Self Managing Capabilities

BCPii, 2K reporting classes,

HiperDispatch zIIP

improvements, Improved cross-

library tape load balancing, LDAP

load balancing, Sysplex

Distributor, OAM, DFSMSrmm

improvements…Enhancing SecurityDrive-level disk encryption; SSL code signing;

ICSF 14-digit PANs, improved AES support,

Crypto query service; RACF general resource

support in LDAP; PKI native key generation

and End User Entity support; Identity

propagation with CICS, SSL/AT-TLS, Key

management Policy controls, …

Improving Usability and Skills

z/OSMF, Multi-user support for

HCM, Health and Migration

Checks, IFASMFDL and ISPF

improvements, MFA out of

IEAVMXIT, Better SMF statistics

for 64-bit storage, Automated

VTOCIX rebuild, Configuration

Assistant, IDCAMS Delete

masking, Elimination of

HASPINDX, DFSMSrmm …

Integrating new Applications and

Supporting Industry and Open

Standards

zAAP on zIIP, Additional IEEE-

standard Decimal FP for C/C++,

METAL C RTL extensions,

IEWPARMS support, FTP support

for named pipes, SYSREXX

Improvements, PKI web pages,

EOF on OPEN for non-SMS data

sets, Unicode …

Extending the Network

New SMTP client, FTP support

for EAV, LOGON RECONNECT

for TN3270, Storage shortage

management, Performance

enhancements, ACF/TAP, …

z/OS 1.11

* All statements regarding IBM future direction and intent are subject to

change or withdrawal without notice, and represent goals and objectives only.


This presentation will cover important new functions in:

� Improving Usability and Skills

� Scalability and Performance

� Improving Availability

� Integrating new Applications

� Enhancing Security


The IBM z/OS Management Facility V1.11 (5655-S28)

� Browser-based management console for z/OS

� Available for z/OS R10 and z/OS R11� To get it, order IBM z/OS Management Facility V1.11

(5655-S28)

� Problem data management helps you collect and send diagnostic data to software vendors for analysis

� Dumps� Console log� LOGREC records

� Configuration Assistant for z/OS Communications Server

� Now a z/OSMF application for z/OS R11 (only!)

� Still a downloadable Windows-based tool as well (for R8 and up)


The IBM z/OS® Management Facility V1.11 (5655-S28)

� z/OSMF applications served by:

� IBM WebSphere Application Server OEM Edition for z/OS…

� …which is included in z/OSMF

� Entirely browser-based—no z/OSMF client application

� Simplified setup

� Setup jobs included in ServerPac’s Full-System Replacement path, samples in Software Upgrade path

� Setup scripts included for CBPDO installers

Browser

HTTP(s)

z/OS V1.10 or V1.11

App. server

�z/OS MF app

�Servlets

�DOJO/JAVA

script

z/OS elements

� CIM

� System REXX

� RACF

� and others


Welcome page

�Configuration :

•Configuration Assistant for z/OS Communication Server

•Simplified configuration and setup of TCP/IP policy-based networking

functions

�Links :

•Provides common launch point for accessing resources beyond the

z/OSMF

•Some links are pre-defined in the product.

�Problem Determination

•Incident Log task

•The Incident Log provides a consolidated list of SVC Dump related

problems, along with details and diagnostic data captured with each

incident. It also facilitates sending the data for further diagnostics.

�z/OSMF Administration :

•Authorization services for administrator to add z/OSMF users and roles

•Allows the administrator to dynamically add links to non-z/OSMF resources,

e.g. ISV products, commonly used installation Web sites

IBM z/OS Management Facility


z/OSMF Pricing Confusion

� Business systems make it hard for us to say “Free”

� z/OSMF is a “priced product”

� … with a “price” of zero dollars and zero cents

� Ordering example (from announcement):

� The total number of Value Units is calculated according to the following example.

� If your required license capacity is 1,500 MSUs for your selected System z IPLA product, the applicable Value Units would be:

Translation from MSUs to Value Units:

MSUs * Value Units/MSU = Value Units

Base 3 * 1.00 = 3.00

Tier A 42 * .45 = 18.90

Tier B 130 * .36 = 46.80

Tier C 140 * .27 = 37.80

Tier D 1,185 * .20 = 237.00

Total 1,500 343.50

� OK so far? So now, take 343.50 value units and multiply by zero dollars: 343.50 * 0 = $0

� Convert it to Pounds Sterling: $0 * .60683 = £ 0

� ...or Euros: $0 * .70286 = € 0

� Same for z/OSMF Service & Support!



New Health Checks:

� SAF-based authorization not being used for SDSF

� Available on R9 with UK39818 and R10 with UK39819

� DAE checks for:

� Suppression off

� Unshared DAE data set

� Entries found in IEAVTRML

� Last IBM entry no longer needed!

� Auto-IPL set up for use

� DFSMSrmm checks:

� Verify supported vital records selection options

� Whether new GDG options are needed

� Whether dropped REXX stem variables are used.

� Also available with UA45968 on R9 and UA45967 on z/OS R10

� IMBED/REPLICATE found for catalogs

� SFM using BCPii



New Migration Checks:

� STP supported but ETR in use

� BIND DNS Version 9 server in use

� IPSec rules not compliant with RFC4301

� zFS checks for admin level and use of multifilesystem aggregates� Available for z/OS R9 and R10 with PTFs for

OA27198

� Root filesystem too small

� Available with PTFs for OA28684 and OA28631 on z/OS R9 and up

� Old LDAP server in use

� ISS LDAP server not present z/OS V1R11

� Also available on R8 and R9 with UA47096 and R10 with UA47095



� New STP messages for:

� Time server change

� External time source events, including failures

� Available for z/OS R9 and z/OS R10 with the PTF for

APAR OA28323

� Supported on IBM System z10 and System z9 servers

with Machine Change Level (MCL) Driver 76

� IDCAMS DELETE Masking

� New MASK keyword for DELETE

� Allow you to specify filtering similar to that used for the Catalog Search Interface:

• DELETE EELLS.** MASK matches any data set

• DELETE EELLS.A%%D.XYZ filters on second qualifier

• Limited to 100 deletes per command for safety’s sake



� DFSMS designed to automatically rebuild VTOCIXs

� Eliminates need to run ICKDSF REFVTOC job after dynamic volume expansion

� Improved SMF statistics

� Reflect actual use of allocated 64-bit storage areas in SMF30 records (SMF30HVR and following fields)

� New larger count fields to record service units for long-running address spaces (SMF30SRV_L and following fields)

� Can help with capacity planning, tuning, and accounting

� Demand device allocation within a tape library:

� Designed to honor UNIT=nnnn specification within a tape library with new SMSHONOR JCL keyword

� Help simplify diagnosis for specific devices



* All statements regarding IBM future direction and intent are subject to

change or withdrawal without notice, and represent goals and objectives only.

� SMF Processing Improvements

� Relative date processing in IFASMFDL

• Intended to mirror typical GDG processing

• New RELATIVEDATE keyword

• Specify DAILY, WEEKLY, or MONTHLY range and number of units (e.g., 2 months, or 3 weeks)

� IFASMFDL option to delete data from Logger (vs. waiting for retention period to expire)

� MAXDORM to apply to SMF log streams

� Available for z/OS R9 and up via OA27037

� New MFA design to remove MFA from IEAVMXIT

� Message Flooding Automation was introduced in z/OS R9

� Policy-driven automation intended to deal with high volumes of messages occurring at very high message rates

� Originally implemented using IEAVMXIT and system command exits

� Now done in internal Consoles message processing, not exits

� Available for z/OS R9 and up via OA25602


Old Message ProcessingWTO

MPFLST processing

IEAVMXIT

Message Flood

Automation

specific MPF exit

SSI

JES

joblog

DLOG

NETVSSI

MRT

NetView

MAT or PIPE

SYSLOG

OPERLOG

TSO

EMCS queuing

System

Automation

MCS/SMCS

consoles

XCF to Console AS and other systems

LOG

WTP

send


New Message ProcessingWTO

MPFLST processingMessage Flood

Automation

specific MPF exit

SSI

JES

joblog

DLOG

NETVSSI

MRT

NetView

MAT or PIPE

SYSLOG

OPERLOG

TSO

EMCS queuing

System

Automation

MCS/SMCS

consoles

XCF to Console AS and other systems

LOG

WTP

send

IEAVMXIT exit



� RMF improvements

� RMF Spreadsheet Reporter can generate files to be imported into a Microsoft® Excel® spreadsheet application to display data graphically

� RMF Postprocessor can create XML reports in addition to text

� Improved reporting for group capacity limits

� Extended storage-related SMF23 fields added by OA22414, also included in SMF70 and SMF71

� New Monitor II OPT command shows active IEAOPTxx and SRM settings:

F CPU= 2/ 2 UIC= 65K PR= 0 SYSA OPT T

OPT: 00 Time: N/A

-- Parameter -- - Default - -- Value -- Unit ---------- Description ----------

ABNORMALTERM Yes Yes Y/N Abnormal terminations in routing

BLWLINTHD 20 20 sec Time blocked work waits for help

BLWLTRPCT 5 5 0/00 CPU cap. to promote blocked work

CCCAWMT 12000 3200 usec Alternate wait management time

ZAAPAWMT 12000 3200 usec AWM time value for zAAPs

ZIIPAWMT 12000 3200 usec AWM time value for zIIPs

CNTCLIST No No Y/N Clist commands count individually

CPENABLE 10,30|0,0 10,30 % Threshold for TPI (low,high)

DVIO Yes Yes Y/N Directed VIO is active

ERV 500 1000/CB SU Enqueue residency CPU Service/DP

HIPERDISPATCH No Yes/Yes Y/N Hiperdispatch is desired/active

IFAHONORPRIORITY Yes Yes Y/N Allows CPs to help zAAPs

IIPHONORPRIORITY Yes Yes Y/N Allows CPs to help zIIPs

. . .


Scalability and Performance

� Solid-State Devices for DASD

� New DS8000 feature announced February 10, 2009

� Flash-based “drives”

• RAID-based

• Dynamic chip sparing

� Improved DASD response times

� Caching with controller-based prefetching means SSD probably best

suited for:

• Infrequently written data

• Frequently read data

• Random access data

• Data with high read disconnect times

� HDD probably a better choice for:

• Sequential access

• Frequently rewritten data

� SMF records, DATACLAS support to help with data management

� Support available on z/OS R9 and R10 with APAR OA25559, included in

z/OS R11

� Power consumption and cooling requirements markedly lower than for

hard disk-based volumes


SSD Planning Aid

� FLASHDA tool to help identify good candidates available:

� ibm.com/systems/z/os/zos/downloads/flashda.html

� As-is application written to use SAS® software

� Three types of reports:

• Read-Only Disconnect Time by Dataset

• Read-Only Disconnect Time by Volume

• Pseudo Device Load



� EAV Support Extensions for:

� Extended Format sequential data sets

� Data sets spanning the 64K cylinder line

� A new JCL keyword and data set attribute, EATTR

� SMS, SMF, TSO/E, ISPF, FTP, DCOLLECT support

� Language Environment support for data sets with extended attributes, including those in EAS on an EAV, for C/C++ programs

� RACF discrete profile support for non-VSAM data sets in EAS

� SVCDUMP, SYSMDUMP, SNAP, ABDUMP, and IPCS support

3390-A

EAV

CCHHRCatalogs

PagespaceKEYRANGE

or IMBED

All Data Set Types

• VSAM Data Sets•21-cylinder allocation units

• Extended Format Data Sets• etc.

65,520 Cylinders

New!


z10 High Performance FICON for System z (zHPF)

* Some complex channel programs can not be converted to zHPF protocol. This document contains performance information. Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending

upon considerations such as the amount of multiprogramming in the user’s job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput or performance improvements equivalent to the numbers stated here.

� New FICON architecture reduces the number exchanges to reduce overhead and improve performance

� Allows streaming data for multiple commands in a single data transfer

� Designed to have same RAS characteristics as existing FICON

� Maximum number of I/Os per second is designed to be improved up to 100%* for small block sizes data transfers that can exploit the zHPF protocol

� Note: Not all channel programs can be converted to use zHPF

� FC channels can support controllers using older FICON protocol and zHPF protocol at the same time

� Control unit capability determined automatically

� To use zHPF, you need:

� z10 server with FICON Express8, Express4, or Express2 (CHP type FC) and a

minimum microcode level

� IBM System Storage DS8000 family – Release 4.1(LMC level 5.4.1.xx, bundle version 64.1.x.x or later, with the High Performance FICON feature)

� z/OS R7 with the IBM Lifecycle Extension for z/OS V1.7 or higher with PTFs; or, z/OS R8 or higher with PTFs (see z10 and DS80000 PSPs); or, z/OS R11

© 2009 IBM CorporationIBM System z

1200

13000 14000

31000

20000

9200

52000

0

4000

8000

12000

16000

20000

24000

28000

32000

36000

40000

44000

48000

52000

FICON Express

I/Os per second – I/O driver benchmark 4k block size, channel 100% utilized

FICON Express4and

FICON Express2

FICON Express4and

FICON Express2

FICON Express8

FICON Express8

FICONExpress4

andFICON

Express2

z990z890 z10 z10 z10

z9z990z890 z10

zHPF – 70% increase FICON Express8 vs. FICON Express4

FICON – 40% increase FICON Express8 vs. FICON Express4

ESCON

*This performance data was measured in a controlled environment running an I/O driver program under z/OS . The actual throughput or performance that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user’s job

stream, the I/O configuration, the storage configuration, and the workload processed.

FICON performance on System z – start I/Os

zHPF

zHPF

© 2009 IBM CorporationIBM System z

170

350

510

740

270

520

0

50

100

150

200

250

300

350

400

450

500

550

600

650

700

750

800

850

FICON performance on System z – MBps throughput

FICONExpress2 Gbps

FICONExpress22 Gbps

FICON Express44 Gbps

*This performance data was measured in a controlled environment running an I/O driver program under z/OS . The actual throughput or performance that any user will

experience will vary depending upon considerations such as the amount of multiprogramming in the user’s job stream, the I/O configuration, the storage configuration,

and the workload processed.

FICONExpress44 Gbps



zSeriesz10

z9z10 z10

z9z990z890

z10

zHPF – 40% increase FICON Express8 vs. FICON Express4

FICON – 45% increase FICON Express8 vs. FICON Express4

zHPF

zHPF

I/O driver benchmarkMegabytes per second

Full-duplexLarge sequential read/write mix



� zHPF Multitrack support

� More than a track’s worth of data in a single transfer

� Limited to 64K per transfer for now

� Media Manager applications doing large I/O transfers expected tobenefit, including zFS, HFS, PDSE, and striped Extended Format data sets.

� Available on z/OS R9 and R10 with the PTFs for APARs OA26084 and OA29017

� Requires DS8000 Licensed Machine Code (LMC) level 5.4.3.xx (bundle version 64.3.xx.xx) or later

� Dynamic Channel Path Management (DCM) for FICON

� Define in HCD whether channels and control units are managed by DCM

� Enable/disable DCM via IECIOSxx and SETIOS commands

� Dynamically manage channels used to connect to control units

� Intended to help provide more consistent I/O response times with less manual tuning effort



� z/OS XL C/C++ improvements

� Use new z10 prefetch instructions with new PREFETCH option to avoid memory latency

� Language Evironment support for AMODE 64 applications to take advantage of large pages using the __moservices() interface

� Other optimization and tuning improvements, new compiler options

� Can improve program performance with just a recompile

� A performance improvement of over 8% was observed using code generated using the z/OS V1.11 XL C/C++ compiler with high optimization when compared to code generated using the z/OS V1.10 XL C/C++ compiler.*

* This is based on internal IBM lab measurements using the ILP32, XPLINK, ARCH(8), TUNE(8), HGPR, O3, HOT, and IPA(LEVEL(2)) with PDF compiler options. Performance results for specific applications will vary; some factors affecting performance are the source code and the compiler options specified.



� Allocation and DFSMShsm to use HDELETE for IEFBR14

� When DISP=(anything,DELETE) for a DFSMShsm-migrated data set

� Specify IEFBR14_DELMIGDS(NORECALL) in ALLOCxx

• And/or issue a new SETALLOC command:

SETALLOC SYSTEM,IEFBR14_DELMIGDS=NORECALL

� Intended to avoid recall-only-to-delete and associated delay

� Language Environment exploitation of Large Pages

� Less page handling overhead and higher TLB hit ratios for big heaps

� EDT changes

� Unused EDT space to be released

� Significant VSCR, relief for Dynamic Activation constraints



� New SETALLOC and DISPLAY ALLOC commands for z/OS R11:

� SETALLOC, not T ALLOC=xx

� Allow most ALLOCxx parameters to be changed

• (Exception is what to do with 2-digit years in EXPDT)

� D ALLOC support for active Allocation parameters

� Metro Mirror support for FlashCopy

� Define a Metro Mirror primary volume as a FlashCopy destination

� New DS8000 feature

� Supported on z/OS R8 and up with APARs OA24809, OA24816, and PK64715

� System Logger design changed to help protect the system from SQAshortages

� Prevent writes from outpacing reads



� Predictive failure analysis

� System designed to “learn” about normal CSA utilization over time on your systems

• Intended to warn when trend is abnormal and free CSA is headed in the wrong direction

• CSA monitoring available z/OS R10 with PTFs UA46241 (base) and UA46243 (JPN)

� Virtual storage usage checking, designed to detect increased useby persistent address spaces, such as system address spaces and started tasks

• Can provide alerts when auxiliary storage use crosses a threshold you set and an increase in storage utilization has been observed

• Expected to allow you to respond to slow rates of storage utilization growth before they become problems

� Message arrival rate detection, designed to monitor messages issued per CPU second

• Compare those values to their predicted values

• Determine when message arrival rates are abnormally high and might indicate a problem



� IPL/Restart time reduction

• IOS improvements for path validation and device discovery during initialization

• Logger improvements in concurrent connection time during restart

�Enhanced Contention Analysis for latches

• New D GRS,ANALYZE,LATCH command

• Improvements to D GRS,C and D GRS,LATCH,C output

• New options for latch obtainers to identify themselves

– Logger and RRS exploitation in z/OS R11

�AutoIPL improvements on z9 and z10 servers

• AutoIPL designed to work with SFM in a Parallel Sysplex

• New MCL needed

• Available for z/OS R10 with PTF UA45446


�Dump management:

• New default AUXMGMT option added to CHNGDUMP– Allows you to specify that the system is to manage virtual storage

used for dump processing based on available auxiliary storage– Allows the system to react to changing auxiliary storage capacity and

utilization automatically– Intended to make it unnecessary to use MAXSPACE

• Dump processing to detect excessive periods of system-wide nondispatchability

– Designed to allow other work to run if dump is taking too much time– Specify maximum nondispatchability time on new MAXSNDSP

operand of CHNGDUMP

• New IEA045I message to be issued at the start of dump processing

– IEA045I AN SVC DUMP HAS STARTED AT TIME=hh:mm:ss …– Complements IEA611I COMPLETE DUMP ON …. – Makes it easier to find dump duration

Serviceability


Integrating new Applications and Supporting Industry and Open Standards

� zAAP on zIIP

� zAAP workloads can now run on zIIP processors in z/OS LPARswhen:

• No zAAPs are installed on the server

• Using z/OS R11 or z/OS R10 with the PTF for APAR OA27495

• Running on a z9 or z10 server

• ZAAPZIIP=YES is specified in an active IEASYSxx member of parmlib at

IPL time

– R10 default (with OA27495) is ZAAPZIIP=NO

– R11 default is ZAAPZIIP=YES

� Might make it worth getting a zIIP if you have zAAP-eligible plus zIIP-eligible workload

� You can use PROJECTCPU to help determine total offload potential

� Keep this change in mind while doing capacity planning for servers that have zIIPS and no zAAPs!


Integrating new Applications and Supporting Industry and Open Standards

� Some DB2 Utility Sort Work on zIIP

� DB2 utilities…

• Sorting fixed-length records…

• Using IBM's memory object sorting technique…

• Especially LOAD, REORG and RUNSTATS utilities…

• …will have a portion of the workload offloaded

� Requirements:

• z/OS R11 or z/OS R10 with the PTF for APAR PK85856

• DB2 V8 or DB2 9 with the PTF for APAR PK85889

• An available zIIP on a z9 or z10 server

� You can (still!) use PROJECTCPU to help determine total offload potential


Enhancing Security

� Drive-Level Encryption

� New DS8000 feature supports encryption of “data at rest”

� Continuous, real-time encryption of individual hard drives

� Expected to:

• Have no performance impact

• Require no application changes

� Can Use Tivoli Key Lifecycle Manager (5608-A91)

• Key management via ICSF and RACF

• Auditability via SMF

• Supported on z/OS R9, R10, and R11

� Supported on z/OS R8, R9, & R10 with the PTF for APAR OA27393


Enhancing Security

� z/OS identity propagation with exploiting subsystems

� Map distinguished name and realm to RACF ID, auditability via SMF

� First exploiter is CICS Transaction Server for z/OS V4.1

� FIPS 140-2 support:

� Code signing for Program Objects in PDSEs

� Support in Binder & Loader

� System SSL support for a new mode of operation designed to meet NIST FIPS 140-2 Level 1 criteria

� AT-TLS support for FIPS 140-2, for TN3270, FTP, CICS Sockets, and other applications that use AT-TLS for secure connections

� RACF RACDCERT and PKI Services extensions to multibyte character support� Allow installation, retrieval, and authentication use characters outside code page 1047

� Allow characters used in additional languages to be used in the Subject Distinguished Names

� Support the SHA256 with RSA encryption signature algorithm in PKI

� Intended to allow SHA256 in the signature algorithm to be used for signing certificates, for certificate and authority revocation lists (CRLs/ARLs), and for OCSP responses

� SSL Support for TLS and for X.509 V3 certificates

� Intended to meet RFC4346, RFC3546, and RFC3820


Optimization and Management Capabilities

New BCP internal interface (BCPii) component:

� API for authorized programs to perform HMC functions

� List CPCs, Images, Capacity records, and query related attributes

� Change profile contents

� Activate, deactivate, start, stop, reset, restart systems

� Initiate capacity changes (up and down)

� Designed to communicate using internal HMC network, isolated from other network traffic

� Use of this communication technique recommended for Capacity Provisioning Manager (PTF UA47421 needed for z/OS R10 CPM)

� SAF-based security controls

� Requirements:

� Available on z/OS R10 with PTF UA47493 and z/OS R11

� Requires a z9 or z10 server with a microcode update (see hardware PSP)

� Support for interactions with activation profile attributes is planned to be made available with the PTF for APAR OA29638 1Q2010


The following are trademarks of the International Business Machines Corporation in the United States and/or other countries.

The following are trademarks or registered trademarks of other companies.

InfiniBand® is a registered trademark of the InfiniBand Trade Association (IBTA).Intel is a trademark of the Intel Corporation in the United States and other countries.Linux is a trademark of Linux Torvalds in the United States, other countries, or both. Java and all Java-related trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc., in the United States and other countries.Microsoft, Windows, Windows NT, and Vista are registered trademarks of Microsoft Corporation.UNIX is a registered trademark of The Open Group in the United States and other countries.All other products may be trademarks or registered trademarks of their respective companies.The Open Group is a registered trademark of The Open Group in the US and other countries.SAS and all other SAS Institute Inc. product or service names are registered trademarks or trademarks of SAS Institute Inc. in the USA and other countries. ® indicates USA registration.

Notes: Performance is in Internal Throughput Rate (ITR) ratio based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput improvements equivalent to the performance ratios stated here.

IBM hardware products are manufactured from new parts, or new and serviceable used parts. Regardless, our warranty terms apply.

All customer examples cited or described in this presentation are presented as illustrations of the manner in which some customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics will vary depending on individual customer configurations and conditions.

This publication was produced in the United States. IBM may not offer the products, services or features discussed in this document in other countries, and the information may be subject to change without notice. Consult your local IBM business contact for information on the product or services available in your area.

All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.

Information about non-IBM products is obtained from the manufacturers of those products or their published announcements. IBM has not tested those products and cannot confirm the performance, compatibility, or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

Prices subject to change without notice. Contact your IBM representative or Business Partner for the most current pricing in your geography.

This presentation and the claims outlined in it were reviewed for compliance with US law. Adaptations of these claims for use in other geographies must be reviewed by the local country counsel for compliance with local laws.

* Registered trademarks of IBM Corporation

AIX*

AnyNet*

CICS*DB2*developerWorks*DFSMSdfp

DFSMSdssDFSMShsm

DFSMSrmmDFSORT*DRDA*DS8000ESCON*FICON*

FlashCopy*GDPS*HiperSocketsHiperspace

HyperSwapIBM*IBM eServerIBM logo*IMS

Infoprint*IP PrintWay

iSeriesLanguage Environment*

MVS

Notes*OMEGAMON*Open Class*Parallel Sysplex*PR/SM

Processor Resource/ Systems ManagerpSeries*

RACF*RedbookRMFSystem iSystem Storage

System zSystem z9

System z10SystemPac*

Tivoli*VTAM*WebSphere*z/Architecture*z/OS*

z/VM*zSeries*

Trademarks


Statements of Direction


Statements of Direction*

Reminders:

� z/OS R10 is the last release to support these z/OS Communications Server functions:

� Network Database (NDB)

� BIND DNS 4.9.3� Boot Information Negotiation Layer (BINL)� DHCP server

� z/OS R10 is the last release to support:

� The Integrated Security Services LDAP Server� IPCS Problem Management Subcommands

� Attaching zSeries File System (zFS) multi-file system aggregates that are to be shared across systems in a sysplex

� In a future release, IBM plans to withdraw support for zFS multi-file system aggregates

� When this support is withdrawn, only zFS compatibility mode aggregates will be supported. (A zFS compatibility mode aggregate has a single file system per data set.)

*All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice.



Reminders:

� IBM plans to discontinue software delivery on 3480, 3480 Compressed (3480C), and 3490E tape media.

� IBM intends to withdraw BIND 9.2.0 function from z/OS Communications Server

� IBM recommends you use the Resolver cache function in z/OS V1.11 to cache

DNS responses

� If you use the z/OS BIND 9.2.0 function as a primary or secondary authoritative

name server, you should investigate using BIND on Linux for System z




� IBM intends to provide ServerPac, CBPDO, the Customized Offerings Driver, SystemPac, ProductPac, and service orders on DVD

� IBM recommends using Internet delivery, but DVD support may provide an option for those who cannot use it

� IBM no longer plans to withdraw support for VSAM IMBED, REPLICATE, and KEYRANGE attributes in a future release

� Based on customer feedback

� IBM recommends that you stop using these attributes

� IBM still plans to remove IMBED and REPLICATE attributes during logical DFSMSdss restore operations and DFSMShsm recall operations as announced in IBM United States Software Announcement 207-175 (RFAxxxxx), dated August 7, 2007

� IBM intends to update z/OS with support for the latest Internet Key Exchange protocol, version 2 (IKEv2)

� As documented in RFC4306 and RFC4718

� IBM intends to update the Security Server RACF component of z/OS to support certificates with longer distinguished names.

� Planned to be made available on z/OS V1.10 and z/OS V1.11 by the end of the first quarter of 2010.

New news




� The native SSL/TLS support in the TN3270 server and FTP client and server will not be enhanced to address FIPS 140-2 requirements

� Use AT-TLS instead

� z/OS V1.11 is planned to be the last z/OS release in which RFC4301 compliance ("Security Architecture for the Internet Protocol“) is optional

� IBM plans to remove the Enhanced PSP Tool, host compare program, and the associated extract files from the IBM Technical Support Web site(software.ibm.com/webapp/set2/psp/srchBroker) at the end of 2010.

� Function replaced by FIXCAT HOLDDATA and SMP/E’s REPORT MISSINGFIX command

� SMP/E function available for all supported releases; Enhanced HOLDDATA is available in all

IBM service delivery offerings and in the 730-day file from the Enhanced HOLDDATA Web

site at: service.software.ibm.com/holdata/390holddata.html

New news




� Infrastructure for RTLS for Language Environment

� Last release to support Run-Time Library Services z/OS V1.5

� In the release following z/OS V1.11, IBM plans to remove the underlying CSVRTLS services

� A way to track usage so you can find any programs that using these services planned in September 2009 for z/OS V1.9, V1.10, and included in V1.11 orders with APAR OA29019

� msys for Setup element of z/OS planned to be removed in the release following z/OS V1.11

� IBM intends to continue to deliver improvements to help with z/OS setup and configuration in the future

� In a future release, IBM plans to withdraw support for z/OS Distributed Computing Environment (DCE) and Distributed Computing Environment Security Server (DCE Security Server)

� IBM recommends the IBM WebSphere Application Server, the IBM Network Authentication Service, and/or the IBM Directory Server as replacements

� See the DCE Replacement Strategies Redbook for more details at redbooks.ibm.com/redbooks/pdfs/sg246935.pdf

New news




� In a future release, IBM plans to withdraw support for the z/OS Distributed File Service support using DCE

� IBM recommends the z/OS Network File System (NFS) as the replacement

� DFS also supports the Server Message Block (SMB) architecture, which is not affected by this

withdrawal of support.

� In a future release, IBM plans to withdraw support for z/OS UNIX System Services Connection Scaling, specifically the Connection Manager and Process Manager components.

� z/OS V1.11 is the last release for which SDK1.4 (5655-I56) support is planned. On z/OS V1.11, these z/OS Java products are supported until withdrawn from service:

� IBM 31-bit SDK for z/OS, Java Technology Edition, Version 6.0 (5655-R31)

� IBM 64-bit SDK for z/OS, Java Technology Edition, Version 6.0 (5655-R32)

� IBM 31-bit SDK for z/OS, Java 2 Technology Edition, Version 5.0 (5655-N98)

� IBM 64-bit SDK for z/OS, Java 2 Technology Edition, Version 5.0 (5655-N99)

� IBM SDK for z/OS, Java 2 Technology Edition, Version 1.4 (5655-I56).

� For more information about z/OS Java SDK products see:

• ibm.com/servers/eserver/zseries/software/java/

New news



Documents

IBM Systems & Technology Group z/OS V1.11 – An … System z 3 ©2008,2009 IBM Corporation System z10 EC New Functions and Features 1 TKE Enhancements New Capacity on Demand architecture