Front cover IBM System z Strengths and Values Technical presentation of System z hardware and z/OS Enterprise-wide roles for the System z platform Cost of computing considerations Philippe Comte Andrea Corona James Guilianelli Douglas Lin Werner Meiner Michel Plouin Marita Prassolo Kristine Seigworth Eran Yona Linfeng Yu ibm.com/redbooks International Technical Support Organization IBM System z Strengths and Values January 2007 SG24-7333-00 Note: Before using this information and the product it supports, read the information in “Notices” on page ix. First Edition (January 2007) This edition applies to the IBM System z platform and IBM z/OS V1.8. © Copyright International Business Machines Corporation 2007. All rights reserved. Note to U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Contents Notices . ix Trademarks . x Preface . xi The team that wrote this redbook. xi Become a published author . xiii Comments welcome. xiii Chapter 1. A business view . 1 1.1 Business drivers . 2 1.2 Impact on IT . 3 1.3 The System z platform . 7 1.3.1 Using System Z technology to reduce complexity . 7 1.3.2 Business integration and resiliency. 8 1.3.3 Managing the System z platform to meet business goals. 11 1.3.4 Security . 12 1.4 Summary . 13 Chapter 2. System z architecture and hardware platform . 15 2.1 History . 16 2.2 System z architecture . 17 2.2.1 Multiprogramming and multiprocessing . 18 2.2.2 The virtualization concept . 19 2.2.3 PR/SM and logical partitions . 19 2.3 System z hardware architecture . 21 2.3.1 The processing unit. 21 2.3.2 Memory . 23 2.3.3 The channel subsystem . 26 2.3.4 Control units and I/O devices . 28 2.3.5 Time-of-Day clock . 28 2.3.6 CP Assist for Cryptographic Function . 28 2.3.7 HiperSockets. 28 2.3.8 Hardware Management Console (HMC). 29 2.3.9 Intelligent Resource Director (IRD) . 29 2.4 System z frames and cages . 31 2.4.1 System z book. 33 2.5 The System z hardware models . 34 Chapter 3. System z software . 35 © Copyright IBM Corp. 2007. All rights reserved. iii 3.1 Operating systems . 36 3.1.1 z/OS . 36 3.1.2 z/VM . 37 3.1.3 Linux on System z. 38 3.1.4 Other supported operating systems . 38 3.2 z/OS software design . 38 3.2.1 Address space . 39 3.3 z/OS components . 40 3.3.1 Memory managers . 41 3.3.2 Workload Manager (WLM) . 41 3.3.3 Resource Recovery Services (RRS). 45 3.3.4 System Management Facility (SMF) . 46 3.3.5 Systems Managed Storage. 46 3.3.6 Global resource serialization (GRS) . 48 3.4 Tools . 49 3.4.1 Resource Measurement Facility (RMF) . 49 3.4.2 IBM OMEGAMON z/OS Management Console . 51 3.4.3 SMP/E . 52 3.4.4 Programming languages . 53 3.4.5 Software development tools . 55 3.5 Middleware . 56 3.5.1 Business layer. 57 3.5.2 Data layer . 62 Chapter 4. Security . 65 4.1 z/OS Security Server. 66 4.1.1 User identification and authentication . 67 4.1.2 System Authorization Facility . 70 4.1.3 Access control. 72 4.1.4 Multilevel security . 72 4.1.5 Auditing and logging . 74 4.1.6 Networking and communications security. 75 4.2 z/OS Integrated Security Services . 78 4.2.1 Integrated IPSec/VPN support . 78 4.2.2 LDAP directory server . 78 4.2.3 Network authentication service (Kerberos) . 79 4.2.4 Enterprise Identity Mapping (EIM). 80 4.3 z/OS cryptographic services . 81 4.3.1 ICSF . 81 4.3.2 OCSF . 82 4.3.3 System SSL . 82 4.3.4 z/OS PKI services . 83 4.4 System z hardware cryptographic functions . 83 iv IBM System z Strengths and Values 4.4.1 Cryptographic synchronous functions . 83 4.4.2 Cryptographic asynchronous functions . 84 4.4.3 Reasons for using hardware cryptography . 86 4.5 IBM Encryption Facility for z/OS . 88 4.5.1 IBM Encryption Facility for z/OS, Services feature . 89 4.5.2 Encryption Facility Client. 90 4.5.3 DFSMSdss Encryption feature . 91 4.6 IBM System Storage TS1120 . 91 4.7 Security certifications . 92 4.7.1 Hardware certifications . ..