IBM Security zSecure Manager for RACF z/VM 2.5.1 provides near real-time feeds of RACF SMF event codes to IBM QRadar and Splunk

IBM Latin America Software Announcement LP22-0045
June 14, 2022

Table of contents
OverviewOverviewTechnical informationTechnical information
Key requirementsKey requirementsOrdering informationOrdering information
Planned availability datePlanned availability dateTerms and conditionsTerms and conditions
DescriptionDescriptionPricesPrices
Program numberProgram numberRegional availabilityRegional availability
PublicationsPublications


Overview

Top rule

IBM Security® zSecure Manager for RACF® z/VM® provides tools to help unleash the potential of your mainframe system that enables efficient and effective RACF administration, while helping use fewer resources. By automating many recurring system administration functions, Security zSecure Manager for RACF z/VM can help you maximize IT resources, reduce errors, improve quality of services, and demonstrate compliance.

Security zSecure Manager for RACF z/VM 2.5.1 delivers the following:

  • Near real-time feeds of RACF SMF events to IBM® QRadar® SIEM and Splunk
  • Cache server that can enable the following:
    • Get last 24 hours of RACF SMF event data
    • See all events from all RACF machines in a single system image (SSI) cluster in one query
    • Query the cache server from the ISPF Events (EV) menu
  • RACF Security Server for z/VM and IBM Z® Multi-Factor Authentication support
  • RACF for z/VM Processing Record for VMXEVENT SMF support
  • User interface enhancements:
    • Selection capabilities on audit and global audit settings in the RA.D and RA.R (RACF data sets and resources) menu options.
    • RA.R search on * string * to find all profiles, across all resource classes, where the string occurs in profile key.
    • User interface support for searching application data in RACF profiles.
    • RACLIST merge support option for REPORT SCOPE (RA.3.4).
    • New primary commands RA.U and RA.G to pick up the word at cursor position and start a recursive query with that word as a user ID or group. These new primary commands can be assigned to PF keys.
    • X and XF primary commands for profile lists to exclude all lines with specified string or exclude all lines except those with the specified string. The column to match against can be specified by name or position and can be used as preparation for the FORALL command.
    • New CARLa report types RUN (current environment) and RUN_DD (allocated files).
    • A new menu option CO.L to easily work with the last CARLa query.
  • CARLa enhancements:
    • Extensions to the CONVERT function of the DEFINE command, providing more options to convert and print time stamps
    • An output format DEC$DIGITS to format numbers with leading zeroes
    • Many new options for the HEADER keyword on NEWLIST and various related parameters to make it easier to generate output in a certain format, including HEADER=LEEF and HEADER=CEF
    • New LIST keyword in IMBED in addition to NOLIST; previous LIST and NOLIST settings restored when returning from imbed
    • New DEFSENS statement to more easily specify site-specific sensitive resource types
    • A new sensitivity type for GDPR data
    • New DOMAIN statement keyword CONFIG to specify a configuration member from within the standard itself
  • IBM z/VM specific enhancements:
    • New option SE.Z for configuring ISPF
    • Support for RACF databases on SCSI devices
    • Support to read OpenEdition BFS files
  • Scope processing updated to handle system-wide attributes (SPECIAL, AUDITOR)


Back to topBack to top

Key requirements

Top rule

An IBM Z server that is capable of supporting IBM z/VM 7.1, or later.

Note: The SMF cache server and real-time SMF to QRadar and Splunk support require z/VM 7.2 with APAR VM66459.



Back to topBack to top

Planned availability date

Top rule

June 17, 2022

Availability within a country is subject to local legal requirements.



Back to topBack to top

Description

Top rule

Accessibility by people with disabilities

Accessibility Compliance Reports (previously known as a VPAT) containing details on accessibility compliance to standards, including the Worldwide Consortium Web Content Accessibility Guidelines, European Standard EN 301 349, and US Section 508, can be found on the IBM Accessibility Conformance Report Request website.

Engine-based Value Unit pricing

Engine-based Value Unit pricing for Security zSecure Manager for RACF z/VM is designed to provide a decreasing price curve as hardware capacities and workload grow, which may help improve price performance.

There may also be a price benefit when you grow your capacity. Additional capacity is not priced starting at the base with a higher price per unit. Instead, additional capacity is priced starting at the capacity (engines) on which Security zSecure Manager for RACF z/VM has already been installed.

Note: Value Units of a given product cannot be exchanged, interchanged, or aggregated with Value Units of another product.

IPLA and Subscription and Support considerations

A no-charge Subscription and Support registration record will be established for each designated machine where Security zSecure Manager for RACF z/VM and the priced, optional features of DirMaint, RACF, and the Performance Toolkit for VM are running. These no-charge Subscription and Support registration records will be linked to the billable Subscription and Support, and all billable Subscription and Support within the scope of the engine-based Value Units aggregation will be linked together.

Subscription and Support is an annual charge and should be kept at an annual term.



Back to topBack to top

Program number

Top rule

Program name VRM Program number
IBM Security zSecure Manager for RACF z/VM 2.5.1 5655-RAC
Program number Subscription and Support Program number
5655-RAC 5655-T14


Back to topBack to top

Education support

Top rule

IBM training provides education to support many IBM offerings. Descriptions of courses for IT professionals and managers can be found on the IBM Training and Skills website.

Contact your IBM representative for course information.



Back to topBack to top

Offering Information

Top rule

Product information is available on the IBM Offering Information website.



Back to topBack to top

Publications

Top rule

Technical documentation can be found in IBM Security zSecure Manager for RACF z/VM documentation website.



Back to topBack to top

Services

Top rule

IBM Systems Lab Services

Systems Lab Services offers infrastructure services to help build hybrid cloud and enterprise IT solutions. From servers to storage systems and software, Systems Lab Services can help deploy the building blocks of a next-generation IT infrastructure to empower a client's business. Systems Lab Services consultants can perform infrastructure services for clients online or onsite, offering deep technical expertise, valuable tools, and successful methodologies. Systems Lab Services is designed to help clients solve business challenges, gain new skills, and apply best practices.

Systems Lab Services offers a wide range of infrastructure services for IBM Power® servers, IBM Storage systems, IBM Z, and IBM LinuxONE. Systems Lab Services has a global presence and can deploy experienced consultants online or onsite around the world.

For assistance, contact Systems Lab Services at ibmsls@us.ibm.com.

To learn more, see the IBM Systems Lab Services website.

IBM Consulting™

As transformation continues across every industry, businesses need a single partner to map their enterprise-wide business strategy and technology infrastructure. IBM Consulting is the business partner to help accelerate change across an organization. IBM specialists can help businesses succeed through finding collaborative ways of working that forge connections across people, technologies, and partner ecosystems. IBM Consulting brings together the business expertise and an ecosystem of technologies that help solve some of the biggest problems faced by organizations. With methods that get results faster, an integrated approach that is grounded in an open and flexible hybrid cloud architecture, and incorporating technology from IBM Research® and IBM Watson® AI, IBM Consulting enables businesses to lead change with confidence and deliver continuous improvement across a business and its bottom line.

For additional information, see the IBM Consulting website.

IBM Technology Support Services (TSS)

Get preventive maintenance, onsite and remote support, and gain actionable insights into critical business applications and IT systems. Speed developer innovation with support for over 240 open-source packages. Leverage powerful IBM analytics and AI-enabled tools to enable client teams to manage IT problems before they become emergencies.

TSS offers extensive IT maintenance and support services that cover more than one niche of a client's environment. TSS covers products from IBM and OEMs, including servers, storage, network, appliances, and software, to help clients ensure high availability across their data center and hybrid cloud environment.

For details on available services, see the Technology support for hybrid cloud environments website.

IBM Expert Labs

Expert Labs can help clients accelerate their projects and optimize value by leveraging their deep technical skills and knowledge. With more than 20 years of industry experience, these specialists know how to overcome the biggest challenges to deliver business results that can have an immediate impact.

Expert Labs' deep alignment with IBM product development allows for a strategic advantage as they are often the first in line to get access to new products, features, and early visibility into roadmaps. This connection with the development enables them to deliver First of a Kind implementations to address unique needs or expand a client's business with a flexible approach that works best for their organization.

For additional information, see the IBM Expert Labs website.

IBM Security Expert Labs

With extensive consultative expertise on IBM Security software solutions, Security Expert Labs helps clients and partners modernize the security of their applications, data, and workforce. With an extensive portfolio of consulting and learning services, Security Expert Labs provides project-based and premier support service subscriptions.

These services can help clients deploy and integrate IBM Security software, extend their team resources, and help guide and accelerate successful hybrid cloud solutions, including critical strategies such as zero trust. Remote and on-premises software deployment assistance is available for IBM Cloud Pak® for Security, IBM Security QRadar/QRoC, IBM Security SOAR/Resilient®, IBM i2®, IBM Security Verify, IBM Security Guardium®, and IBM Security MaaS360®.

For more information, contact Security Expert Labs at sel@us.ibm.com.

For additional information, see the IBM Security Expert Labs website.



Back to topBack to top

Technical information

Top rule

Specified operating environment

Hardware requirements

An IBM Z server capable of supporting z/VM 7.1, or later.

Software requirements

Security zSecure Manager for RACF z/VM 2.5.1 is supported in the following environments:

  • z/VM 7.1
  • z/VM 7.2

Note: The SMF cache server and real-time SMF to QRadar and Splunk support require z/VM 7.2 with APAR VM66459.

Such information is provided subject to the following terms. IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated, or misused, or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service, or security measure can be completely effective in preventing improper use or access. IBM systems, products, and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.

IBM Support

IBM Support is your gateway to technical support tools and resources that are designed to help you save time and simplify support. IBM Support can help you find answers to questions, download fixes, troubleshoot, submit and track problem cases, and build skills. Learn and stay informed about the transformation of IBM Support, including new tools, new processes, and new capabilities, by going to the IBM Support Insider.

Additional IBM support

IBM Client Engineering for Systems

Client Engineering for Systems is a framework for accelerating digital transformation. It helps you generate innovative ideas and equips you with the practices, technologies, and expertise to turn those ideas into business value in weeks. When you work with Client Engineering for Systems, you bring pain points into focus. You empower your team to take manageable risks, adopt leading technologies, speed up solution development, and measure the value of everything you do. Client Engineering for Systems has experts and services to address a broad array of use cases, including capabilities for business transformation, hybrid cloud, analytics and AI, infrastructure systems, security, and more. Contact Client Engineering for Systems at sysgarage@ibm.com.

Planning information

Packaging

This offering is delivered through the internet as an electronic download from Shopz. There is no physical media.

Direct client support

For technical support or assistance, contact your IBM representative or go to the IBM Support website.



Back to topBack to top

Ordering information

Top rule

Consult your IBM representative.


Value Unit exhibit VUE021

Engine-based Value Units for a specified number of engines are determined by the following table:

Level Engines minimum Engines maximum Value Units per engine
From 1 to 3 1 3 10
From 4 to 6 4 6 9
From 7 to 9 7 9 8
From 10 to 12 10 12 7
From 13 to 16 13 16 6
From 17 to 20 17 20 5
From 21 to 25 21 25 4
For more than 25 26 + 3

Charge metric

Charge metric information can be found in the corresponding License Information document.

Program number License Information document title License Information document number
5655-RAC IBM Security zSecure Manager for RACF z/VM 2.5.1 L-MADP-CANHX9

Select your language of choice and scroll down to the Charge Metrics section. Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.

Basic license

To order, specify the program ID number and the appropriate license or charge option.

Program name and number: IBM Security zSecure Manager for RACF z/VM (5655-RAC)

Entitlement identifier Description License option/Pricing metric
S018MXN IBM Security zSecure Manager for RACF z/VM MultiVersion Measurement No Charge Value Units Qty 1
    On Off Cap on demand Temporary Use Charge PROCESSOR-Day(s) Qty 1
    Use-Based License One-Time Charge Value Units Qty 1
Orderable supply ID Description Language
S018MXR IBM Security zSecure Manager for RACF z/VM English US

IBM recommends internet delivery. However, if you still require physical media, you can choose DVD.

IBM Security zSecure Manager for RACF z/VM Subscription and Support SW S&S; Program ID: 5655-T14

Entitlement Identifier Description License Option/Pricing metric
S01473C IBM Security zSecure Manager for RACF z/VM S&S Decline Subscribe and Suppt. No Charge Base with Qty 0
    SW Subs and Sup Rgst No Charge Per Engine Registration Qty 0
    SW Subscription and Support Annual Support Charge Value Un Qty 1
    SW Subscription and Support Monthly Support Charge Value U Qty 1
Orderable supply ID Description Language
S01473D IBM Security zSecure Manager for RACF z/VM S&S English US


Subscription and Support

To receive voice technical support by telephone and future releases and versions at no additional charge, Subscription and Support must be ordered. The capacity of Subscription and Support (Value Units) must be the same as the capacity ordered for the product licenses.

To order, specify the Subscription and Support program ID referenced above and the appropriate license or charge option.

IBM is also providing Subscription and Support for these programs with a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Software Maintenance. This offering:

  • Includes and extends the support services provided in the base support to include telephone technical support.
  • Entitles you to future releases and versions, at no additional charge. Note that you are not entitled to new programs.

When Subscription and Support is ordered, the charges will automatically renew annually unless canceled by you.

The combined effect of the IPLA license and the Agreement for Acquisition of Software Maintenance gives you rights and support services comparable to those under the traditional ICA IBM Z license or its equivalent. To ensure that you continue to enjoy the level of support you are used to in the ICA business model, you must order both the license for the program and the support for the selected programs at the same Value Unit quantities.


On/Off CoD

The following program is eligible for On/Off CoD with a temporary use charge calculated based on Processor per-day usage.

Entitlement identifier Description License option/Pricing metric
S018MXN IBM Security zSecure Manager for RACF z/VM (5655-RAC) Value Units



Back to topBack to top

Terms and conditions

Top rule

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage® Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

Licensing

IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use.

This software license includes Software Subscription and Support (also referred to as Software Maintenance).

Software Maintenance

The following agreement applies for Software Subscription and Support (Software Maintenance) and does not require client signatures:

  • IBM Agreement for Acquisition of Software Maintenance (Z125-6011)

These programs are licensed under the IBM International Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.

No

License Information number

Program number License Information document title License Information document number
5655-RAC IBM Security zSecure Manager for RACF z/VM 2.5.1 L-MADP-CANHX9

Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.

Limited warranty applies

Yes

Limited warranty

IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, see the IBM Support Guide.

IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).

Program technical support

Enhanced support

Technical support of a program product version or release will be available for a minimum of five years from the planned availability date, as long as your Software Subscription and Support is in effect.

This technical support allows you to obtain assistance (by telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Subscription and Support also provides you with access to updates (modifications or fixes), releases, and versions of the program. You will be notified, through an announcement letter, of discontinuance of support with 12 months' notice.

If you require additional technical support from IBM, including an extension of support beyond the discontinuance date, contact your IBM representative or IBM Business Partner. This extension may be available for a fee.

For additional information on the IBM Software Support Lifecycle Policies, see the Standard and enhanced IBM support lifecycle policies website.

Money-back guarantee

If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.

For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.

Volume orders (IVO)

No

Passport Advantage applies

No

Software Subscription and Support applies

Yes. During the Software Subscription and Support period, for the unmodified portion of a program, and to the extent problems can be recreated in the specified operating environment, IBM will provide the following:

  • Defect correction information, a restriction, or a bypass.
  • Program updates: Periodic releases of collections of code corrections, fixes, functional enhancements and new versions and releases to the program and documentation.
  • Technical assistance: A reasonable amount of remote assistance by telephone or electronically to address suspected program defects. Technical assistance is available from the IBM support center in the organization's geography.

Additional details regarding Technical Assistance, which includes IBM contact information, are provided in the IBM Support Guide.

Software Subscription and Support does not include assistance for:

  • The design and development of applications.
  • Your use of programs in other than their specified operating environment.
  • Failures caused by products for which IBM is not responsible under the IBM Agreement for Acquisition of Software Maintenance.

Software Subscription and Support is provided only if the program is within its support timeframe as specified in the Software Support Lifecycle policy for the program.

Yes. All distributed software licenses include Software Subscription and Support (also referred to as Software Maintenance) for a period of 12 months from the date of acquisition, providing a streamlined way to acquire IBM software and assure technical support coverage for all licenses. Extending coverage for a total of three years from date of acquisition may be elected.

While your Software Subscription and Support is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance by telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your end users.) IBM provides Severity 1 assistance 24 hours a day, every day of the year. For additional details, go to the IBM Support Handbooks page.

Software Subscription and Support does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under this agreement.

IBM Technology Support Services - Support Line for IBM Z

No

Variable charges apply

No

Educational allowance available

Yes. A 15% education allowance applies to qualified education institution clients.

Sub-capacity pricing terms and conditions

To be eligible for sub-capacity pricing, the machine on which the eligible products are installed and running must be eligible for sub-capacity pricing terms and conditions. Software can be priced at less than full machine capacity for eligible products. Sub-capacity pricing for eligible products is based on the current program pricing methodology, but the number of processors will be determined based on the sum of processors for all partitions where the program is defined (used). To obtain pricing at less than full machine capacity for eligible products, you are required to:

  • Install and use, when available, the IBM License Metric Tool (ILMT), which installs with eligible IBM programs.
  • Install available updates to the operating system and eligible products such that license use can be accurately managed.
  • Determine if the use of sub-capacity pricing terms results in a reduced requirement for entitlements; you can reallocate the entitlement difference by distributing entitlements across a larger or different set of systems, or reserve them for future growth. There will be no refunds for these freed up entitlements. Subscription, Software Maintenance and support volumes, and entitlements for existing contracts will continue at the same levels as the acquired licenses.

Sub-capacity utilization determination

Sub-capacity pricing for the z/VM operating environment is available to clients running z/VM. Software pricing at less than full machine capacity can provide more flexibility and improved cost of computing as clients manage the volatility and growth of new workloads.

For details on z/VM sub-capacity, see Software Announcement LP17-0343, dated July 17, 2017.

On/Off CoD

To be eligible for On/Off CoD pricing, you must be enabled for temporary capacity on the corresponding hardware, and the required contract, Attachment for IBM System z® On/Off Capacity on Demand (Z125-7883) must be signed prior to use.



Back to topBack to top

Statement of good security practices

Top rule

IT system security involves protecting systems and information through intrusion prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a regulatory compliant, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.



Back to topBack to top

Prices

Top rule

For all local charges, contact your IBM representative.



Back to topBack to top

Regional availability

Top rule

Argentina, Belize, Plurinational State of Bolivia, Brazil, Chile, Colombia, Costa Rica, Dominican Republic, Ecuador, El Salvador, Guatemala, Haiti, Honduras, Mexico, Nicaragua, Panama, Paraguay, Peru, Uruguay, and Bolivarian Republic of Venezuela

Trademarks

IBM Consulting is a trademark of IBM Corporation in the United States, other countries, or both.

IBM Security, RACF, z/VM, IBM, QRadar, IBM Z, Passport Advantage, Power, IBM Research, IBM Watson, IBM Cloud Pak, Resilient, i2, Guardium, MaaS360, z/VSE and System z are registered trademarks of IBM Corporation in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Reference to other products in this announcement does not necessarily imply those products are announced, or intend to be announced, in your country. Additional terms of use are located at

Terms of use

For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page

IBM Directory of worldwide contacts