IBM z/OS software delivery enhancements: HTTPS direct-to-host download capabilityIBM United States Software Announcement 214-311
July 29, 2014
|Table of contents|
IBM® will add HTTPS (HTTP using Secure Sockets Layer) support for secure software and service delivery on October 19, 2014. On the same date, IBM will enhance the Connectivity Test for SW Download Readiness website to add support for HTTPS. The existing support for FTPS (FTP using Secure Sockets Layer) is not affected by this change and remains available. As previously announced in Software Announcement 213-292, dated July 23, 2013 , IBM plans to withdraw support for standard FTP connections for software and service delivery.
If you are not already using FTPS for software and service delivery, IBM recommends that you implement support in your network environment for either FTPS or HTTPS for direct-to-host connections as soon as possible to assure a smooth transition. IBM Download Director with encryption is an alternative download method you can use to download packages to a workstation and transfer them to z/OS® later. It is not affected by this change and remains available.
The following changes will be made to z/OS preventive service ordering on October 19, 2014:
- In Shopz, the z/OS "all licensed products" service package type will be removed.
- In Shopz, z/OS Internet delivery service subscriptions will be removed.
- In ServiceLink, z/OS ESO packages will be supported only when used to order service for selected FMIDs.
IBM will provide the capability to download Internet orders directly to your z/OS system using HTTPS for CBPDO, ServerPac, and SystemPac (in countries where it is available) packages as of October 19, 2014. This capability to download directly to your z/OS system using HTTPS will also be provided for Shopz service orders and for SMP/E RECEIVE ORDER.
To use HTTPS direct-to-host downloads, you will need to:
- Have SMP/E V3.5 with PTFs UO01692 (Base) and UO01694 (Japanese), or SMP/E V3.6 with PTFs UO01693 (Base) and UO01695 (Japanese), or higher
- Have CustomPac Installation Dialog level 26.20.00, or higher
- Set up a keyring and enable the CA (Certificate Authority) certificate that is used by the IBM download server or use the Java keystore file
- Provide the appropriate HTTPS proxy or SOCKS proxy options, if required for your environment
Refer to z/OS Planning for Installation for additional driving system requirements for Internet delivery.
IBM will provide the option to download your software or service order directly to your z/OS host system using FTPS, HTTPS, or standard FTP. A link to this file is contained on the Shopz Internet delivery help page and also on the Shopz download page for your order. Additional information can be found in the "Download to Host Install Instructions" readme file on the Shopz download page for your ServerPac or SystemPac order. In addition to existing support for magnetic tape and DVD, the CustomPac installation dialog used for ServerPac or SystemPac installation will allow you to specify which download method to use, prompt for the appropriate information, and create the RECEIVE job accordingly. You can access the Connectivity Test for SW Download Readiness website from Shopz to obtain setup information and verify your z/OS system setup for Internet delivery by downloading a test package to your z/OS host system using FTPS, HTTPS, or standard FTP. Alternatively, you can download the test package to your workstation first using IBM Download Director with encryption. The Connectivity Test for SW Download Readiness website can be found at
For more information about the SMP/E RECEIVE FROMNETWORK and RECEIVE ORDER commands, and the GIMGTPKG service routine, refer to the SMP/E Users Guide.
IBM will provide z/OS preventive service orders based on installed products, which is intended to make order content a better reflection of the systems to be serviced. If you currently order z/OS service based on licensed products, you should begin using the other available service options at this time. IBM recommends use of the SMP/E RECEIVE ORDER command, the simplest method of acquiring z/OS service, which lets customers who are able to connect their z/OS host to the Internet to fully automate service acquisition using local batch scheduling tools. SMP/E RECEIVE ORDER can be run using scheduled jobs to replace the current Shopz z/OS service subscription capabilities. Also, the ServiceLink z/OS ESO option is an alternative method you can use for ordering z/OS service if you are unable to upload a software inventory (bitmap or CSI) to IBM to identify installed software. Corrective service ordering remains unchanged. For more information on Shopz service options, refer to
For more information on ServiceLink service options, refer to
For more information on the SMP/E RECEIVE ORDER command, refer to the z/OS SMP/E User's Guide.
Back to top
|Planned availability date|
October 19, 2014
Back to top
|Business Partner information|
If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld ID and password are required (use IBM ID).
IBM and z/OS are registered trademarks of IBM Corporation in the United States, other countries, or both.
Oracle and Java are trademarks of Oracle and/or its affiliates in the United States, other countries, or both.
Other company, product, and service names may be trademarks or service marks of others.
For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page