Data privacy for diagnostics support for IMS 64-bit storage

To protect sensitive diagnostic data that is sent to IBM or other third-party vendors, you can use a sample job run against an IMS dump to redact 64-bit storage objects that have been tagged as SENSITIVE by IMS.

In IMS 15, after APAR PH14059, requests for certain 64-bit storage objects within IMS are made specifying the IARV64 SENSITIVE= parameter to tag the storage as possibly containing or not containing customer sensitive data. Certain areas that can contain sensitive data (for example: Fast Path 64-bit buffers and logger 64-bit buffers) are tagged as sensitive. Other areas that contain only IMS internal control type data (for example: storage tracking elements, internal performance statistics, and resource data) are tagged as not sensitive.

When IMS is run on an IBM z15 processor or later, and on z/OS 2.3 or later with z/OS APARs OA57570 and OA57633, the sensitive or not-sensitive storage tags are included as metadata in SVC dumps and stand-alone dumps (SADUMPs) of IMS storage. You can use the z/OS-provided JCL BLSJDPFD in SYS1.SAMPLIB to create a redacted copy of a dump. Storage marked as sensitive is excluded from this copy. Storage marked as not sensitive is included in this copy. See http://publibz.boulder.ibm.com/zoslib/pdf/OA57570.pdf for additional details.

Note: If you use the z/OS-provided JCL BLSJDPFD to generate a redacted SVC dump or stand-alone dump to send to IBM or another software vendor, ensure that you keep the original complete dump until your case has been resolved. Data removed by the tool may be necessary for solving a problem. IBM may request you provide specific information from the original dump, even if you do not send the complete dump to IBM for data privacy reasons.

Requirements

Hardware requirements: For the Data Privacy for Diagnostics support added by PH14059 to be effective, IMS must run on a z15 (machine type 8561) or later processor. IMS with PH14059 can still execute on a lower supported processor than z15; however, the 64-bit storage tagging will be ignored.

Software requirements: For the Data Privacy for Diagnostics support added by PH14059 to be effective, IMS must be running on a z/OS 2.3 or later operating system that has z/OS APARs OA57570 and OA57633 installed. IMS with PH14059 can still execute on a lower supported operating system, or on an operating system without the indicated z/OS APARs; however, the 64-bit storage tagging will be ignored.

Documentation changes

The following table lists the publications that contain new or changed topics for the New function name enhancement. Publications that are not impacted by this enhancement are not included in the table.

Table 1. Links to topics that have new or changed content for this enhancement
Publication	New or changed topics
Release planning	IMS 15 enhancements IMS 15 system continuous delivery functions Data privacy for diagnostics support for IMS 64-bit storage (new) (this topic)
Diagnosis	Preserving memory dumps
IMS messages and codes	ABEND codes 0070