IBM Z/VSE 6.2 Brings Storage, Processing, Security, Recovery, and Data Transfer Enhancements
Total Page:16
File Type:pdf, Size:1020Kb
IBM United States Software Announcement 221-201, dated May 4, 2021 IBM z/VSE 6.2 brings storage, processing, security, recovery, and data transfer enhancements Table of contents 1 Overview 5 Technical information 2 Key requirements 7 Ordering information 2 Planned availability date 7 Terms and conditions 2 Description 8 Order now 5 Program number Overview IBM(R) z/VSE(R) is an operating system for the IBM Z(R) platform used for traditional batch and online transaction processing applications. The following hardware support is available with z/VSE 6.2: • Exploitation of the latest IBM System Storage technology: – z/VSE 6.2 supports IBM System Storage TS7700 R5.1. • Exploitation of latest IBM z15TM Model T01 and T02 technology: – z/VSE 6.2 provides native support for System Recovery Boost (APAR DY47832). This enables z/VSE to temporarily boost general-purpose central processors (CPs) running at sub-capacity to full capacity in a logical partition (LPAR) during system IPL and shutdown. – z/VSE 6.2 supports the configurable IBM Crypto Express7S (APAR DY47834), which enables data encryption and Secure Sockets Layer (SSL) acceleration. Elliptic Curve Cryptography (ECC) with a Crypto Express7S can result in accelerated data-in-flight encryption. The following support is already available with z/VSE 6.2: • z/VSE supports the IBM Fibre Connection (FICON(R)) Express16S+ and FICON Express16SA, as well as the OSA-Express6S/7S family. • z/VSE supports IBM Fibre Channel Endpoint Security, which provides server authentication and data encryption to protect the integrity and confidentiality of data. z/VSE support for Transport Layer Security (TLS) 1.3: • TLS 1.3 support (APAR DY30239) is based on VSE Crypto Services/OpenSSL 1.1.1d update (APAR DY47825, in March 2020). • VSE/POWER(R) PNET SSL supports all available ciphers, including TLS 1.3 (APAR DY47842). • CICS(R) TS for z/VSE 2.2 supports TLS 1.3 inbound connections (APAR PH28252). • Interactive User Interface (IUI). Various job skeletons (ICCF library 59) have been updated to include TLS 1.3 cipher suites (APAR PH31756). • Updates for z/VSE Connector Workstation components for OpenSSL TLS 1.3 support (APAR PH35841). IBM Data Language/I (DL/I) VSE 1.12.1 support: • DL/I 1.12.1 adds utility improvements for database recovery (APAR PH29950). IBM United States Software Announcement 221-201 IBM is a registered trademark of International Business Machines Corporation 1 VSE/POWER: • PNODE Generation Macro for Networking Support is updated to enable acceleration of data transfer (APAR DY47835). TCP/IP updates: • IBM TCP/IP for z/VSE 2.2 is updated to the 2.2.8 level (APAR PH27676). Key requirements z/VSE 6.2 introduced an Architectural Level Set that requires IBM zEnterprise(R) 196, IBM zEnterprise 114, or later. Planned availability date May 4, 2021 Description With improved ease of use and exploitation of the latest IBM Z and IBM System Storage technology, z/VSE 6.2 can help clients with growing z/VSE workloads, and can enable them to better protect their investments in the z/VSE platform. z/VSE 6.2 offers the following enhancements: • Enhancements using continuous delivery: – z/VSE 6.2 and CICS TS for z/VSE 2.2 have been generally available since December 1, 2017. Additional functionality has been introduced for online transaction processing, security, and connectivity. – Clients can better integrate z/VSE in a heterogeneous environment using web- based business solutions and z/VSE connectors. • Exploitation of the latest IBM System Storage technology: – z/VSE 6.2 supports IBM System Storage TS7700 R5.1. • Exploitation of latest IBM z15 and IBM z15 Model T02 technology: – z/VSE 6.2 provides native support for System Recovery Boost (APAR DY47832). This enables z/VSE to temporarily boost general-purpose CPs running at sub-capacity to full capacity in an LPAR. It delivers improved overall system and application availability by minimizing the downtime that results from system shutdown and restart operations. -- The speed boost lasts up to 60 minutes during system IPL as well as stand- alone dump processing and up to 30 minutes during system shutdown. -- After the speed boost ends, the CPs being used by the LPAR return to the sub-capacity model speed. This increase applies only to the LPAR being boosted; all other LPARs not being boosted run at sub-capacity model speed, and the machine itself remains a sub-capacity machine. • z/VSE 6.2 supports the configurable Crypto Express7S (APAR DY47834), which enables data encryption and SSL acceleration. ECC with a CEX7 card can result in accelerated data-in-flight encryption: – Instead of using the CEX7 cards in toleration mode and treating them as Crypto Express6S coprocessors and accelerators, the CEX7 cards are now identified as Crypto Express7S and reported as such in messages and command output (APAR DY47834). The following support is already available with z/VSE 6.2: IBM United States Software Announcement 221-201 IBM is a registered trademark of International Business Machines Corporation 2 • z/VSE supports the FICON Express16S+ and FICON Express16SA as well as the OSA-Express6S/7S family. • z/VSE supports IBM Fibre Channel Endpoint Security, which provides server authentication and data encryption to protect the integrity and confidentiality of data. The capabilities of z/VSE 6.2 are further extended with enhancements delivered through continuous delivery: z/VSE support for Transport Layer Security (TLS) 1.3 • TLS 1.3 support (APAR DY30239) is based on VSE Crypto Services/OpenSSL 1.1.1d update (APAR DY47825, in March 2020). • VSE/POWER PNET SSL supports all available ciphers, including TLS 1.3 (APAR DY47842). • CICS TS for z/VSE 2.2 supports TLS 1.3 inbound connections (APAR PH28252). • Interactive User Interface (IUI). Various job skeletons (ICCF library 59) have been updated to include TLS 1.3 cipher suites (APAR PH31756). • Updates for z/VSE Connector Workstation components for OpenSSL TLS 1.3 support (APAR PH35841). With this upgrade, OpenSSL on z/VSE provides support for TLS 1.3. OpenSSL is an open source project that provides an SSL and TLS implementation as well as key management utilities. See the OpenSSL website for details. OpenSSL on z/VSE provides a z/OS(R) compatible SSL programming interface, which enables existing z/VSE SSL/TLS applications, such as the z/VSE Connector Server and the LDAP client, to run transparently with OpenSSL. Although OpenSSL provides software-based encryption for supported algorithms and key lengths, the z/VSE implementation transparently uses cryptographic hardware, when available, for improved performance. Clients benefit from IBM Z cryptographic hardware and its acceleration of cryptographic operations. For further information about how to set up SSL/TLS in z/VSE, see the following: • The z/VSE TCPIP Support manual, especially the section "Selecting the TCP/IP and SSL Implementation to use" • The IBM Redbook Enhanced Networking on IBM z/VSE • The LE/VSE C Run-Time Library Reference manual for further details about the LE/C TCP/IP Socket API Multiplexer DL/I VSE 1.12.1 DL/I adds improvements for database recovery (APAR PH29950). To enable correct recovery in all situations in which DL/I message DLZ004I (I/O-error) or DLZ005I (out of space) can occur, extensions to the DL/I Log Print utility and DL/I Data Base Backout utility have been provided: • A parameter has been introduced for the DL/I log print utility (DLZLOGP0) that can stop the printing and copying of log records when a DL/I log record with a defined sequence number is reached. This function might be needed when only log records that had been written up to a defined point should be applied during DL/I database recovery. • During DL/I database recovery, it might not be necessary to back out all databases for a Program Specification Block (PSB), but only one or a subset of them. To provide this function, a new input control statement has been introduced for the DL/I Data Base Backout utility (DLZBACK0). Next to these extensions, a description of the different situations in which message DLZ004I or message DLZ005I can appear together with the appropriate recovery actions has been provided in the DL/I 1.12.1 Release Guide. VSE/POWER IBM United States Software Announcement 221-201 IBM is a registered trademark of International Business Machines Corporation 3 PNODE Generation Macro for Networking Support is updated to enable acceleration of data transfer (APAR DY47835). To accelerate data transfer between PNET TCP/ IP nodes by up to 50 times, the system administrator needs to generate the Network Definition Table (NDT) on each system with the new PNODE macro operand SPEED=HIGH for the local node. The PNODE macro is described in the VSE/POWER Administration and Operation manual. TCP/IP updates IBM TCP/IP for z/VSE 2.2 is updated to the 2.2.8 level (APAR PH27676). z/VSE service z/VSE product and PTF orders from IBM Shopz are available only through the internet and DVD. Recommended Service Levels (RSLs), including January 7, 2021 RSLs, are found on the IBM: z/VSE- Service and support - Preventive web page. z/ VSE V6.2 is the only z/VSE release in service. z/VSE blogs For current z/VSE blogs, see the Jens Remus' Blog, which is hosted on the IBM Community Platform within the IBM Z and LinuxONE Community. z/VSE documentation For z/VSE product information and documentation, see IBM Documentation. The following IBM Redbooks(R) are available for z/VSE: • Introduction to the New Mainframe: IBM z/VSE Basics • Security on IBM z/VSE • Migration to CICS Transaction Server for z/VSE V2 • z/VSE Using DB2(R) on Linux(R) for System z(R) Section 508 of the US Rehabilitation Act IBM z/VSE 6.2 is capable as of May 4, 2021, when used in accordance with IBM's associated documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act, provided that any assistive technology used with the product properly interoperates with it.