IBM Security zSecure suite V1.13 extends application compliance management and audit reporting capabilities and helps simplify and reduce costs to administer IBM System z security
IBM United States Software Announcement 211-432October 4, 2011
ENUS211-432.PDF
|
| At a glance |
 |
IBM® Security zSecure suite V1.13 can help you enhance the security of mainframe systems.
- Automates security analysis of IBM CICS® and IBM IMS™ transactions and programs
- Allows you to improve data consolidation using Enrich Access Monitor
- Allows annotating user ID displays with data from external human resource files such as department and employee number
- Provides additional globalization enhancements
- Automates determination of which SAF classes are being used by each active DB2®, CICS, or IMS subsystem
- Allows you to add your own sensitivity classification, audit concern, and priority to data set names and general resources
- Supports currency with z/OS® V1R13, ACF2 R14 and R15, CICS V4R2, and Top Secret R12, R14, and R15
- Extends integration with Communications Server and provides various interface improvements
For ordering, contact Your IBM representative or an IBM Business Partner. For more information contact the Americas Call Centers at 800-IBM-CALL (426-2255). Reference: LE001
Back to top
|
|
| Overview |
|
IBM Security zSecure suite V1.13 consists of multiple individual components designed to help you administer your mainframe security server, monitor for threats, enforce policy compliance, audit usage and configurations, and assist in compliance management and audit reporting.
IBM Security zSecure Admin, Visual, and CICS Toolkit provide administrative, provisioning, and management components that can significantly reduce administration time, effort, and costs, and help improve productivity and response time, as well as help reduce training time for new administrators.
IBM Security zSecure Audit, Alert, and Command Verifier provide security policy enforcement, audit, monitoring and compliance management components. These offerings help ease the burden of compliance audits, can improve security and incident handling, and can increase overall operational effectiveness.
IBM Security zSecure suite V1.13 enhancements
New Security zSecure suite V1.13 capabilities offer enhancements for DB2, CICS, and IMS application security auditing.
- Automates security analysis of CICS and IMS transactions and programs
- Provides automated determination of which System Authorization Facility (SAF) classes are being used by each active IBM DB2, IBM CICS, or IBM IMS subsystem
- Enhances Access Monitor and allows you to improve data consolidation
- Allows annotating user ID displays with data from external human resource files such as department and employee number
- Adds globalization enhancements
- Allows addition of your own sensitivity classification, audit concern, and priority to data set names and general resources
- Supports currency with z/OS V1R13, ACF2 R14 and R15, CICS V4R2, and Top Secret R12, R14, and R15
- Extends integration with Communications Server and provides various interface improvements
Additional offerings include:
- IBM Tivoli® Compliance Insight Manager Enabler for z/OS
- IBM Tivoli zSecure Manager for RACF® z/VM® V1.11
Back to top
|
|
| Key prerequisites |
|
For details, refer to the Hardware requirements and Software requirements sections.
Back to top
|
|
| Planned availability date |
|
November 11, 2011
Back to top
|
|
| Description |
|
The IBM Security zSecure family of products (formerly Tivoli zSecure) provides a user-friendly interface for RACF, with extensive auditing and monitoring capabilities for the enterprise security hub. It can result in more efficient and effective administration and compliance to defined security policies.
Helps free administrators to focus on security
While preventing security breaches is paramount, administrators are frequently bogged down with tedious, time-consuming, day-to-day tasks that divert their attention from security issues. The IBM Security zSecure suite offers a range of products designed to help reduce administration time and enable valuable mainframe resources to focus on improving security quality.
IBM Security zSecure Admin is a leading security software program that enables efficient and effective IBM RACF administration, typically using significantly less resources. By putting a user-friendly layer over your RACF databases, you can quickly enter and process administrative commands, generate custom reports, and clean up databases. By implementing a repeatable process for security management, Security Secure Admin can help you reduce errors and improve the overall quality of services.
RACF administrators can create a mirrored offline copy of the RACF database that can be used to check and verify configuration changes, without affecting the production database. This ability to test changes and review the results before implementing them can reduce the risks of introducing errors into the production database, through human error, and possible outages of security.
RACF database clean-up function addresses the problem of obsolete authorizations, for example, by removing authorizations that have not been used for a year, which is an administrative issue that is increasingly unacceptable from a compliance, governance, and risk perspective. This pertains to unused permits (user and group authorizations) as well as unused connects (group membership). At the same time, if the authorizations are obsolete, it is likely that the corresponding resources are equally obsolete and should also be cleaned up. Obsolete resources on the system represent a security risk because they could be reused for another purpose, and inappropriate access might be granted by virtue of the obsolete authorizations lingering in the security database.
Removal of unused profiles is also possible but requires a manual review step since there exists reasons for the existence for a profile that the program cannot know. The RACF Cleanup function can be used to reduce the overhead of the processing around yearly authorization reviews demanded by some regulations.
IBM Security Secure Visual can reduce the need for expensive, RACF-trained expertise through a Microsoft® Windows-based GUI for RACF administration. With the ability to establish a secure connection directly with RACF, Security Secure Visual is ideal for decentralizing RACF administration or enabling central security administration from outside Interactive System Productivity Facility/Time Sharing Option (ISPF/TSO).
Tracks security events and helps prevent exposures to compliance requirements
Over the past decade, the number of requirements organizations must comply with has increased dramatically. Keeping up with the demands for audit and controls documentation, while also trying to prevent security breaches, can be overwhelming. Security zSecure suite delivers auditing, monitoring, and compliance management solutions designed to help reduce security exposures.
IBM Security zSecure CICS Toolkit adds mainframe administration capabilities to the CICS environment, such as password resets and authorization management. Its easy-to-use menu enables users to stay within the CICS application, to issue security commands to the mainframe, rather than forcing them into another environment. Your field administrators can quickly issue commands through a user-friendly menu for functions such as password resets for failed user logins and user additions.
If you have an application on your web server that communicates with CICS on your mainframe, your CICS application can use the advanced COBOL API capabilities in Security zSecure CICS Toolkit to execute select RACF security functions. Such functions could be verification of a user ID and password entered on the web interface against the RACF database or retrieval of information about a user ID and its privileges from the RACF database that gets passed on to the web application.
You can easily customize Security zSecure CICS Toolkit screens by using the API, which can be contacted by any CICS program with a standard CICS command area. Use the API to tailor the look of your screens to the requirements of a specific installation and show as little or as much as you want to your decentralized administrators. The API facilitates access checks of more than 2,000 resources, enabling you to easily replace an application's internal security with RACF security and helping to significantly improve the application's performance. Security zSecure CICS Toolkit API can centralize - in the RACF database - the security of (homegrown) applications built for CICS.
IBM Security zSecure Audit delivers a mainframe compliance management and audit solution that enables you to quickly analyze and report on mainframe events, and automatically detect security exposures through extensive status auditing. zSecure Audit provides extended and independent monitoring to track and assess the consistency of security relevant changes to z/OS across systems and the compliance of those changes in comparison to a best practice knowledge base.
Unlike offerings that only report on a copy of a database, Security zSecure Audit allows you to access live security data on mainframes running IBM z/OS with RACF, ACF2, or Top Secret delivering audit accuracy. Analyzing the active z/OS system control blocks can help you quickly identify possible issues that could have a negative effect on the stability of security.
After auditing and analyzing the z/OS operating system, Security zSecure Audit prioritizes and highlights security concerns. It provides displays to view definitions, tables, exits, and other vital z/OS information and identifies problems or potential problems. Issues are ranked by audit priority, with a number indicating the relative impact of a problem.
Security zSecure Audit can also provide extensive audit and analysis capabilities beyond z/OS systems, including the ability to audit UNIX® security definitions on the mainframe and automatically find problems within the security definitions in the UNIX subsystem. In addition, Security zSecure Audit provides audit support for Linux® on System z®, IBM DB2 security events, IBM CICS and IBM IMS security audit events, and audit security events from IBM Security Key Lifecycle Manager, WebSphere® Application Server, IBM Tivoli OMEGAMON® XE on z/OS, Hierarchical Storage Manager, IBM Communication Server network configuration for TCP/IP, and partition dataset extended (PDSE) member level auditing.
Extended monitoring and alerting of security events from IBM Security Key Lifecycle Manager, IBM Tivoli OMEGAMON XE on z/OS (V4R1 and V4R2), IBM DFSMS™ Removable Media Manager (DFSMSrmm™), and IBM WebSphere Application Server V7 assist in providing an improved view of the over all security within the mainframe environment. The technology lets you create standard and customized reports that can be generated in Extensible Markup Language (XML) format and used in databases and reporting tools.
Security zSecure Audit also lets you send Simple Network Management Protocol (SNMP) messages to an enterprise management console for policy exceptions or violations that indicate a security breach or weakness. This capability is provided for RACF, CA Top Secret, and CA ACF2 environments.
IBM Security zSecure Alert offers a real-time mainframe threat monitoring solution that allows you monitor intruders and identify misconfigurations that could hamper your compliance efforts. It goes beyond conventional intrusion detection solutions to support intrusion prevention by taking countermeasures via automatically generated commands.
In addition, Security zSecure Alert enables you to quickly determine unauthorized logons and attempts, user behavior that violates security policy, and when your core systems are at risk. With this information readily in hand, you can help identify misconfigurations before they can be exploited. This capability is provided for RACF and CA ACF2 environments.
IBM Security zSecure Command Verifier is a robust policy enforcement solution that can help enforce mainframe compliance to company policies by preventing erroneous commands. As a result, it helps increase control and decrease security risks and cleanup costs. Running in the background, Security zSecure Command Verifier verifies RACF commands against your company's policies and procedures. When commands are entered, it verifies whether the commands comply with security policies and blocks or, optionally, adjusts the ones that do not comply.
IBM Tivoli Compliance Insight Manager Enabler for z/OS provides a link from zSecure Audit to the Tivoli Security Information and Event Manager tool so that the mainframe audit information is included in the enterprise dashboard view.
To address currency with the latest releases of z/OS and RACF, Security zSecure suite includes support for new RACF capabilities. Security zSecure Admin, Audit, and Command Verifier support administration of, reporting on, and use of RACF commands and keywords.
Bringing it all together
IBM Security zSecure suite is a valuable part of managing mainframe security as a process that helps meet the needs of auditors and the business itself. These offerings are the result of a long-term commitment to innovation on the mainframe and to enabling you to improve and simplify mainframe security audit and administration. Through a broad range of offerings, Security zSecure suite helps you address your key mainframe challenges, such as:
- Audit and compliance management
- Report on questionable system configuration options and dangerous settings of privileged users.
- Integrate with Linux on System z, IBM DB2, IBM CICS, IBM IMS, IBM Tivoli Key Lifecycle Manager, IBM WebSphere Application Server V7, and IBM Tivoli OMEGAMON XE on z/OS for security audit monitoring and reporting.
- Measure and verify the effectiveness of mainframe security and security policies.
- User and security administration
- Include centralized and decentralized management and provision of users, profiles, and resources.
- Constantly monitor crucial users and data for misuse.
- Include security risk detection and avoidance:
- Can reduce operational costs and achieve faster incident detection.
- Generate alerts with instant reports about RACF, IBM System Management Facilities (SMF), IBM z/OS, IBM DB2, IBM CICS, and the UNIX subsystem.
Additional offerings:
- IBM Tivoli Compliance
Insight Manager Enabler for z/OS
IBM Security zSecure suite allows you to submit mainframe security information into an enterprise audit and compliance management solution, through the seamless integration with Tivoli Security Information and Event Manager. Combining mainframe data with that from other operating systems, applications, and databases, Tivoli Security Information and Event Manager provides the ability to capture log data, interpret that data through sophisticated log analysis and communicate results in an efficient, streamlined manner for full enterprise-wide audit and compliance reporting. Tivoli Compliance Insight Manager Enabler for z/OS provides the event source Connection to supply the mainframe information into the enterprise tool.
- IBM Tivoli zSecure
Manager for RACF z/VM V1.11
IBM Tivoli zSecure Manager for RACF z/VM provides administrators with tools to help unleash the potential of your mainframe system, enabling efficient and effective RACF administration and auditing of the z/VM environment including Linux on System z, while helping use fewer resources. By automating many recurring auditing and system administration functions, IBM Tivoli zSecure Manager for RACF z/VM can help you maximize IT resources, reduce errors, improve quality of services, and demonstrate compliance.
Accessibility by people with disabilities
A U.S. Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at
Business Partner information
If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld® ID and password are required (use IBM ID).
Back to top
|
|
| Product positioning |
|
IBM Security zSecure suite with IBM Tivoli Security Information and Event Manager
Security zSecure suite leverages the capabilities of Tivoli Security Information and Event Manager to enable inclusion of mainframe reporting on RACF, IBM CICS, IBM DB2, CA ACF2, and CA Top Secret into Tivoli Security Information and Event Manager enterprise-wide compliance dashboard and reporting, so that users can view the status of their enterprise security hub along with the rest of their environment. For more details on Tivoli Security Information and Event Manager, refer to Software Announcement 210-068, dated February 23, 2010.
IBM Security zSecure Alert with IBM Tivoli Security Information and Event Manager
Tivoli Security Information and Event Manager and Security zSecure Alert are companion products that deliver a comprehensive view of the mainframe threats and incidents. Tivoli Security Information and Event Manager manages security operations effectively and efficiently with centralized security event correlation, prioritization, investigation, and respose.
IBM Security zSecure with RACF
Your investment in RACF may be enhanced with the addition of Security zSecure suite, which provides integrated security audit and compliance management and administration for z/OS and RACF.
Mainframe auditing - For data center auditors, security managers, system programmers, and IT managers who need to monitor mainframe events and incidents, help reduce security vulnerability, and help enforce security policy compliance and generate audit reports, Security zSecure suite offers a mainframe audit solution that provides analysis and reporting of mainframe events and automatic detection of exposures through extensive status auditing.
Mainframe security administration - For RACF administrators and IT managers who need to simplify and automate routine administrative tasks and decentralize administration control, Security zSecure suite offers a mainframe administration suite that enables efficient and effective RACF administration typically using less resources, and providing richer functionality and helping address compliance initiatives. And by implementing a repeatable process for security management, Security zSecure suite can help you reduce errors and improve the overall quality of services.
Back to top
|
|
| Program number |
|
Program Program
number VRM name
5655-T01 1.13 IBM Security zSecure Admin
5655-T02 1.13 IBM Security zSecure Audit
5655-T05 1.13 IBM Security zSecure CICS Toolkit
5655-T07 1.13 IBM Security zSecure Command Verifier
5655-T09 1.13 IBM Security zSecure Visual
5655-T11 1.13 IBM Security zSecure Alert
5655-T15 1.13 IBM Tivoli Compliance Insight Manager Enabler
for z/OS
Product identification number
Subscription and
Program PID number Support PID number
5655-T01 5655-T03
5655-T02 5655-T04
5655-T05 5655-T06
5655-T07 5655-T08
5655-T09 5655-T10
5655-T11 5655-T12
5655-T15 5655-T16
Back to top
|
|
| Education support |
|
Comprehensive education for IBM Tivoli products is offered through Worldwide Tivoli Education Delivery Services. A wide range of training options are available, including classes led by instructors, learning on demand, on-site training, and blended learning solutions.
For additional information, visit
Back to top
|
|
| Offering Information |
|
Product information is available via the Offering Information website
Back to top
|
|
| Publications |
|
No hardcopy publications are shipped with these products.
Unlicensed publications
Unlicensed publications are available on the Security zSecure Documentation CD provided with the products, with the exception of the Security zSecure Quick Reference and the Security zSecure Release Information. These publications are available only from the Security zSecure Information Center website at general availability.
Table 1 lists the unlicensed Security zSecure suite V1.13 publications, which are available in English. These publications can be viewed and downloaded from the Security zSecure Information Center website at general availability.
National language unlicensed publications will be available from the Security zSecure Information Center website 30 days after general availability.
Security zSecure Information Center website
Table 1: English unlicensed publications
Title Order number
IBM Security zSecure
Audit for ACF2 Getting Started GI11-9163-00
Admin and Audit for RACF Getting Started GI11-9162-00
Alert User Reference Manual SC14-7666-00
Visual Client Manual SC14-7669-00
CICS Toolkit User Guide SC14-7671-00
Command Verifier User Guide SC14-7670-00
CARLa-Driven Components Installation and SC14-7662-00
Deployment Guide
Messages Guide SC14-7667-00
Quick Reference SC14-7668-00
Licensed publications
Table 2 lists the Security zSecure suite V1.13 licensed publications, which are available in English. These publications are only available to licensed users and are included on the Security zSecure Documentation CD provided with your product order.
To obtain an electronic copy of a licensed publication, send an email requesting the publication to tivzos@us.ibm.com. Include your IBM customer number, form number for each publication, and contact information. You will be contacted with further instructions for fulfilling your order.
For an additional charge, you can order a manufactured documentation CD from the IBM Publications Center. For ordering instructions, go to the Security zSecure Information Center website at
Click the link entitled Obtaining a licensed publication.
National language versions of the licensed documentation are available on an updated version of the Security zSecure Documentation CD after general availability.
Table 2: English Licensed publications
Title Order number IBM Security zSecure Admin and Audit for RACF User Reference Manual LC14-7663-00 Audit for ACF2 User Reference Manual LC14-7664-00 Audit for Top Secret User Reference Manual LC14-7665-00 IBM Security zSecure Suite Documentation CD LCD7-1387-09
IBM Publications Center
The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are by credit card (in the U.S.) or customer number for 20 countries. A large number of publications are available online in various file formats, and they can all be downloaded by all countries, free of charge.
Back to top
|
|
| Technical information |
|
Specified operating environment
Hardware requirements
Minimum and recommended processor, disk space, and memory requirements for Security zSecure suite V1.13:
Minimum Recommended
Processor Z800 IBM System z9® or z10™ Enterprise Class (EC)
or z9™ or z10 Business Class (BC)
Disk space 300 MB 450 MB
Memory 1 GB 2 GB
Software requirements
IBM Security zSecure suite V1.13 is supported in the following environments:
- z/OS V1R11
- z/OS V1R12
- z/OS V1R13
Security zSecure products that include features for CA ACF2 and CA Top Secret support CA ACF2 R12, R14, and R15 and CA Top Secret R12, R14, and R15.
The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a readme file, or other information published by IBM, such as an announcement letter. Documentation and other program content may be supplied only in the English language.
Planning information
Packaging
Security zSecure suite products are distributed with:
- International Program License Agreement (Z125-3301)
- License Information document
- Tape
- Publications (refer to the Publications section)
Security, auditability, and control
IBM Security zSecure suite V1.13 uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.
Back to top
|
|
| Software Services |
|
IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.
To learn more about IBM Software Services or to contact a Software Services sales specialist, visit
Back to top
|
|
| Licensing metric definitions and pricing examples |
|
Licensing metric definitions
Millions of Service Units (MSUs)
An MSU is defined as millions of Central Processing Unit (CPU) service units per hour; the measure of capacity used to describe the computing power of the hardware processors on which S/390® or System z software runs. Processor MSU values are determined by the hardware vendor, IBM, or Software Compatible Vendors (SCVs).
For more detailed information about System z software pricing, visit
Value Units
A Value Unit (VU) is the metric by which this software's license entitlements are obtained. Value Unit entitlements are based on the quantity of a specific designated measurement, for example MSUs, users, engines, tape drives, for the given software. The appropriate number of entitlements must be obtained for the appropriate number of Value Units required for your environment as defined by the specific software terms. The Value Unit entitlements are specific to the software and may not be exchanged, interchanged, or aggregated with Value Unit entitlements of another software program.
System z software pricing examples (MSU based)
The following pricing example should be used to determine required license entitlements for the following software products for System z.
Consider a System z server with 1,000 MSUs
All products for this example employ Value Unit slope Value Unit Exhibit 020 (VUE020). Translation from MSUs to Value Units:
VUE020
MSUs Value Units/MSU
Base 1-3 1.00
Tier A 4-45 .15
Tier B 46-175 .08
Tier C 176-315 .04
Tier D 316+ .03
If the customer has installed 1,000 MSUs, the applicable number of Value Units will be:
Value
Level MSUs Units/MSU Value Units
Base 3 1.00 3.00
Tier A 42 0.15 6.30
Tier B 130 0.08 10.40
Tier C 140 0.04 5.60
Tier D 685 0.03 20.55
Total 1,000 45.85
When calculating the total number of Value Units, the sum is rounded up to the next integer. In this example, the customer will need to license 46 Value Units.
Note: IBM RACF for z/OS (a separate IBM MLC offering) or a comparable competitive offering (CA ACF2 or CA Top Secret) is a prerequisite for IBM Security zSecure suite. For more information on RACF, refer to
Scenario 1 - MSU-based pricing
Transaction 1
Enterprise ABC initially wants to work with the following system configuration.
On one System z server with 1,000 MSUs and they want to run IBM Security zSecure Audit and IBM Security zSecure Alert. The same MSU to Value Unit conversion calculation applies to both Security zSecure Audit and Security zSecure Alert components:
Value
Level MSUs Units/MSU Value Units
Base 3 1.00 3.00
Tier A 42 0.15 6.30
Tier B 130 0.08 10.40
Tier C 140 0.04 5.60
Tier D 685 0.03 20.55
Total 1,000 45.85
The customer must purchase 46 Value Units for Security zSecure Audit and 46 Value Units for Security zSecure Alert.
Transaction 2
After the initial purchase, enterprise ABC wants to expand their use of IBM Security zSecure suite to include IBM Security zSecure Command Verifier, IBM Security zSecure Admin, and IBM Security zSecure Visual, along with IBM Tivoli Compliance Insight Manager Enabler for z/OS. Tivoli Compliance Insight Manager Enabler for z/OS can be ordered with Security zSecure suite at no charge. In addition, entitlements for IBM Tivoli Security Information and Event Manager and z/OS event sources must be purchased through distributed pricing structures.
The same calculation to convert MSUs to Value Units applies to each of above mentioned components: Security zSecure Command Verifier, Security zSecure Admin, Security zSecure Visual, and Tivoli Compliance Insight Manager Enabler for z/OS.
Value
Level MSUs Units/MSU Value Units
Base 3 1.00 3.00
Tier A 42 0.15 6.30
Tier B 130 0.08 10.40
Tier C 140 0.04 5.60
Tier D 685 0.03 20.55
Total 1,000 45.85
The customer must purchase 46 Value Units for each of Command Verifier, Admin, Visual, and Tivoli Compliance Insight Manager Enabler for z/OS. (Tivoli Compliance Insight Manager Enabler for z/OS is no charge, but the customer must purchase at $0 price and hold entitlements.)
Back to top
|
|
| Ordering information |
|
The programs in this announcement all have Value Unit-based pricing.
Program
number Program name Value Unit exhibit
5655-T01 IBM Security zSecure Admin VUE020
5655-T02 IBM Security zSecure Audit VUE020
5655-T05 IBM Security zSecure CICS Toolkit VUE020
5655-T07 IBM Security zSecure Command Verifier VUE020
5655-T09 IBM Security zSecure Visual VUE020
5655-T11 IBM Security zSecure Alert VUE020
5655-T15 IBM Tivoli Compliance Insight Manager VUE020
Enabler for z/OS
For each System z IPLA program with Value Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity. Your required license capacity is based upon the following factors:
- The System z IPLA program you select
- The applicable Value Unit Exhibit
- The applicable terms
- Whether your current mainframes are full capacity or sub-capacity
Value Unit exhibit VUE020
Value
Level Minimum Maximum Units/MSU
Base 1 3 1
Tier A 4 45 0.15
Tier B 46 175 0.08
Tier C 176 315 0.04
Tier D 316 + 0.03
Value Units for mainframes without MSU ratings:
Value
HW Units/machine
MP3000 H30 3
MP3000 H50 4
MP3000 H70 6
ESL Models 1
Ordering z/OS through the Internet
ShopzSeries provides an easy way to plan and order your z/OS ServerPac or CBPDO. It will analyze your current installation, determine the correct product migration, and present your new configuration based on z/OS. Additional products can also be added to your order (including determination of whether all product requisites are satisfied). ShopzSeries is available in the US and several countries in Europe. In countries where ShopzSeries is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order via the traditional IBM ordering process. For more details and availability, visit the ShopzSeries website at
Current licensees
Current licensees, with support in effect, will receive instructions on how to order this update.
Current licensees of Security zSecure suite V1.13 can order the new distribution medium via MES by specifying the desired distribution medium feature number.
New licensees
Orders for new licenses will be accepted now.
Shipment will begin on the planned availability date.
Basic license
This table should be used for all Security zSecure PIDs
VUE020 MSUs Value Units/MSU Base 1-3 1.00 Tier A 4-45 0.15 Tier B 46-175 0.08 Tier C 176-315 0.04 Tier D 316+ 0.03
To order, specify the program product number and the appropriate license or charge option. Also, specify the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW.
Ordering information for Value Unit pricing - 5655-T01
Program name: IBM Security zSecure Admin V1.13
Program PID: 5655-T01
Entitlement License option/
identifier Description Pricing metric
S01471B zSecure Admin Basic OTC, per Value Unit
Orderable supply ID Language Distribution medium
S0166BV Multilingual 3590 tape cartridge
Subscription and Support PID: 5655-T03
Entitlement License option/
identifier Description Pricing metric
S01471M zSecure Admin S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
per MSU SW S&S registration
Orderable supply ID Language Distribution medium
-
S015T26 Multilingual Hardcopy publication
Ordering information for On/Off Capacity on Demand (On/Off CoD)
IBM Security zSecure Admin is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.
Program name: IBM Security zSecure Admin V1.13 Program PID: 5655-T01 Entitlement License option/ identifier Description Pricing metric S01471B zSecure Admin Basic OTC, per MSU-day TUC
Ordering information for Value Unit Pricing - 5655-T02
Program name: IBM Security zSecure Audit V1.13
Program PID: 5655-T02
Entitlement License option/
identifier Description Pricing metric
S01471C RACF Basic OTC, per Value Unit
S01471D ACF2 Basic OTC, per Value Unit
S01471F Top Secret Basic OTC, per Value Unit
Orderable supply ID Language/Description Distribution medium
S0166BZ Multilingual RACF 3590 tape cartridge
S0166BX Multilingual ACF2
S0166BW Multilingual Top Secret
Subscription and Support PID: 5655-T04
Entitlement License option/
identifier Description Pricing metric
S01471N RACF S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
per MSU SW S&S registration
S01471P ACF2 S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
per MSU SW S&S registration
S01471R Top Secret S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
per MSU SW S&S registration
Orderable supply ID Language/Description Distribution medium
S015TT2 Multilingual RACF Hardcopy publication
S015TT3 Multilingual ACF2
S015TT4 Multilingual Top Secret
Ordering information for On/Off Capacity on Demand (On/Off CoD)
IBM Security zSecure Audit is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.
Program name: IBM Security zSecure Audit V1.13 Program PID: 5655-T02 Entitlement License option/ identifier Description Pricing metric S01471C RACF Basic OTC, per MSU-day TUC S01471D ACF2 Basic OTC, per MSU-day TUC S01471F Top Secret Basic OTC, per MSU-day TUC
Ordering information for Value Unit pricing - 5655-T05
Program name: IBM Security zSecure CICS Toolkit V1.13 Program PID: 5655-T05 Entitlement License option/ identifier Description Pricing metric S01471S zSecure CICS Toolkit Basic OTC, per Value Unit Orderable supply ID Language/Description Distribution medium S0166C0 Multilingual 3590 tape cartridge
Subscription and Support PID: 5655-T06
Entitlement License option/
identifier Description Pricing metric
S01472T zSecure CICS Toolkit Basic ASC, per Value Unit SW S&S
S&S no charge, decline SW S&S
per MSU SW S&S registration
Orderable supply ID Language/Description Distribution medium
S015TP6 Multilingual Hardcopy publication
Ordering information for On/Off Capacity on Demand (On/Off COD)
IBM Security zSecure Audit is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.
Program name: IBM Security zSecure CICS Toolkit V1.13
Program PID: 5655-T05
Entitlement License option/
identifier Description Pricing metric
S01471S zSecure CICS Basic OTC, per MSU-day TUC
Toolkit
Ordering information for Value Unit pricing - 5655-T07
Program name: IBM Security zSecure Command Verifier V1.13 Program PID: 5655-T07 Entitlement License option/ identifier Description Pricing metric S01471T zSecure Command Verifier Basic OTC, per Value Unit Orderable supply ID Language Distribution medium S0166C1 Multilingual 3590 tape cartridge
Subscription and Support PID: 5655-T08
Entitlement License option/
identifier Description Pricing metric
-
S01471V zSecure Command Basic ASC, per Value Unit SW S&S
Verifier S&S no charge, decline SW S&S
per MSU SW S&S registration
Orderable supply ID Language Distribution medium
S015TPD Multilingual Hardcopy publication
Ordering information for On/Off Capacity on Demand (On/Off CoD)
IBM Security zSecure Command Verifier is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.
Program name: IBM Security zSecure Command Verifier V1.13
Program PID: 5655-T07
Entitlement License option/
identifier Description Pricing metric
S01471T zSecure Command Basic OTC, per MSU-day TUC
Verifier
Ordering information for Value Unit pricing - 5655-T09
Program name: IBM Security zSecure Visual V1.13 Program PID: 5655-T09 Entitlement License option/ identifier Description Pricing metric S01471X zSecure Visual Basic OTC, per Value Unit Orderable supply ID Language Distribution medium S0166C2 Multilingual 3590 tape cartridge
Subscription and Support PID: 5655-T10
Entitlement License option/
identifier Description Pricing metric
S014721 zSecure Visual S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
per MSU SW S&S registration
Orderable supply ID Language Distribution medium
S015TPX Multilingual Hardcopy publication
Ordering information for On/Off Capacity on Demand (On/Off CoD)
IBM Security zSecure Visual is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.
Program name: IBM Security zSecure Visual V1.13 Program PID: 5655-T09 Entitlement License option/ identifier Description Pricing metric S01471X zSecure Visual Basic OTC, per MSU-day TUC
Ordering information for Value Unit pricing - 5655-T11
Program name: IBM Security zSecure Alert V1.13 Program PID: 5655-T11 Entitlement License option/ identifier Description Pricing metric S014725 RACF Basic OTC, per Value Unit S014728 ACF2 Basic OTC, per Value Unit Orderable supply ID Language/Description Distribution medium S0168RT Multilingual RACF 3590 tape cartridge S0168RV Multilingual ACF2
Subscription and Support PID: 5655-T12
Entitlement License option/
identifier Description Pricing metric
S014733 RACF S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
per MSU SW S&S registration
S014736 ACF2 S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
per MSU SW S&S registration
Orderable supply ID Language/Description Distribution medium
S015TPZ Multilingual RACF Hardcopy publication
S015TR0 Multilingual ACF2
Ordering information for On/Off Capacity on Demand (On/Off CoD)
IBM Security zSecure Alert is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.
Program name: IBM Security zSecure Alert V1.13 Program PID: 5655-T11 Entitlement License option/ identifier Description Pricing metric - S014725 RACF Basic OTC, per MSU-day TUC S014728 ACF2 Basic OTC, per MSU-day TUC
Ordering information for Value Unit pricing - 5655-T15
Program name: IBM Tivoli Compliance Insight Manager Enabler for z/OS V1.11 Program PID: 5655-T15 Entitlement License option/ identifier Description Pricing metric S01473W RACF Basic OTC, per Value Unit S014748 ACF2 Basic OTC, per Value Unit S014749 Top Secret Basic OTC, per Value Unit S01474K DB2 Basic OTC, per Value Unit S015TNJ CICS Basic OTC, per Value Unit Orderable supply ID Language/Description Distribution medium S0166C7 Multilingual RACF 3590 tape cartridge S0166C4 Multilingual ACF2 S0166C5 Multilingual Top Secret S0166C6 Multilingual DB2 S0166C8 Multilingual CICS
Subscription and Support PID: 5655-T16
Entitlement License option/
identifier Description Pricing metric
S01473K RACF S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
S01474B ACF2 S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
S01474C Top Secret S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
S01474W DB2 S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
S015TNK CICS S&S Basic ASC, per Value Unit SW S&S
no charge, decline SW S&S
Orderable supply ID Language/Description Distribution medium
S015TNS Multilingual RACF Hardcopy publication
S015TNR Multilingual ACF2
S015TNP Multilingual Top Secret
S015TNN Multilingual DB2
S015TNM Multilingual CICS
Subscription and Support
Subscription and Support must be ordered to receive voice technical support via telephone during normal business hours, and future releases and versions, at no additional charge. The capacity of Subscription and Support (for example, Value Units or number of processors) must be the same as the capacity ordered for the product licenses.
To order, specify the Subscription and Support program product number and the appropriate license or charge option.
IBM is also providing Subscription and Support for these products, via a separately purchased offering, under the terms of the IBM International Agreement for Acquisition of Support Maintenance (IAASM). This offering:
- Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
- Entitles customers to future releases and versions, at no additional charge. Note that the customer is not entitled to new products.
When Subscription and Support is ordered, the charges will automatically renew annually unless cancelled by the customer.
Customized Offerings
Product deliverables are shipped only via CBPDO, ServerPac, SystemPac®.
CBPDO and ServerPac are offered for Internet delivery in countries where ShopzSeries product ordering is available. Internet delivery reduces software delivery time and allows you to install software without the need to handle tapes. For more details on Internet delivery, refer to the ShopzSeries help information at
You choose the delivery method when you order the software. IBM recommends Internet delivery. In addition to Internet and DVD, the supported tape delivery options for CBPDO, ServerPac, and SystemPac, include:
- 3590
- 3592
Most products can be ordered in ServerPac and SystemPac the month following their availability on CBPDO. z/OS can be ordered via all three offerings at general availability. Production of software product orders will begin on the planned general availability date.
- CBPDO shipments will begin one week after general availability.
- ServerPac shipments will begin two weeks after general availability
- SystemPac shipments will begin four weeks after general availability due to additional customization, and data input verification.
Back to top
|
|
| Terms and conditions |
|
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage® Agreement, and the IBM Agreement for Acquisition of Software Maintenance.
Licensing
IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use.
Agreement for Acquisition of Software Maintenance
The following agreement applies for Software Subscription and Support (Software Maintenance) and does not require customer signatures:
- IBM Agreement for Acquisition of Software Maintenance (Z125-6011)
These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.
IBM System z Operational Support Services - SoftwareXcel is an option if you desire added services.
License Information form number
Product LI form number IBM Security zSecure Admin V1.13 GC23-7976-05 IBM Security zSecure Audit V1.13 GC23-7977-04 IBM Security zSecure CICS Toolkit V1.13 GC23-7981-03 IBM Security zSecure Command Verifier V1.13 GC23-7982-04 IBM Security zSecure Visual V1.13 GC23-7979-04 IBM Security zSecure Alert V1.13 GC23-7978-04 IBM Tivoli Compliance Insight Manager Enabler GC23-7980-04 for z/OS V1.13
The program's License Information will be available for review on the IBM Software License Agreement website
Limited warranty applies
Yes
Limited warranty
IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.
IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at
IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).
Program support
Enhanced support, called Subscription and Support, includes telephone assistance, as well as access to updates, releases, and versions of the program as long as support is in effect. You will be notified of discontinuance of support with 12 months' notice.
Money-back guarantee
If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.
For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.
Other terms
Volume orders (IVO)
No
IBM International Passport Advantage Agreement
Passport Advantage applies
No
Usage restriction
Yes. Usage is limited to the quantity of Value Units licensed.
For additional information, refer to the License Information document that is available on the IBM Software License Agreement website
Software Subscription and Support applies
No. For operating system software, the revised IBM Operational Support Services - SoftwareXcel offering will provide support for those operating systems and associated products that are not available with the Software Subscription and Support (Software Maintenance) offering.
This will ensure total support coverage for your enterprise needs, including IBM and selected non-IBM products. For complete lists of products supported under both the current and revised offering, visit
IBM Operational Support Services - SoftwareXcel
Yes
System i Software Maintenance applies
No
Variable charges apply
Yes
Educational allowance available
Yes. A 15% education allowance applies to qualified education institution customers.
Sub-capacity utilization determination
Sub-capacity utilization is determined based on the utilization of an eligible operating system and machine (for example, z/OS running in z/Architecture® (64 bit) mode on a System z ((or equivalent) server).
Sub-capacity utilization is determined based on the product's own execution as reported to IBM in accordance with the requirements for reporting sub-capacity utilization for products.
On/Off Capacity on Demand (CoD)
To be eligible for On/Off CoD pricing, you must be enabled for temporary capacity on the corresponding hardware, and the required contract, Attachment for IBM System z On/Off Capacity on Demand (Z125-7883) must be signed prior to use.
Back to top
|
|
| IBM Electronic Services |
|
IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent.
The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.
The Electronic Service Agent™ is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM. Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server.
To learn how Electronic Services can work for you, visit
Back to top
|
|
| Prices |
|
Information on charges is available at website
In the Electronic tools category, select the option for Purchase/upgrade tools.
Passport Advantage
For Passport Advantage and charges, contact your IBM representative or your authorized IBM Business Partner. Additional information is also available at
Back to top
|
|
| Order now |
|
To order, contact your local IBM representative or your IBM Business Partner.
To identify your local IBM Business Partner or IBM representative, call 800-IBM-4YOU (426-4968). For more information, contact the Americas Call Centers.
Phone: 800-IBM-CALL (426-2255)
Fax: 800-2IBM-FAX (242-6329)
For IBM representative: callserv@ca.ibm.com
For IBM Business Partner: pwswna@us.ibm.com
Mail: IBM Teleweb Customer Support
ibm.com® Sales Execution Center, Americas North
3500 Steeles Ave. East, Tower 3/4
Markham, Ontario
Canada L3R 2Z1
Reference: LE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.
Note: Shipments will begin after the planned availability date.
Trademarks
IMS, DFSMS, DFSMSrmm, z10, z9 and Electronic Service Agent are trademarks of IBM Corporation in the United States, other countries, or both.
IBM, CICS, DB2, z/OS, Tivoli, RACF, z/VM, System z, WebSphere, OMEGAMON, PartnerWorld, System z9, S/390, SystemPac, Passport Advantage, z/Architecture and ibm.com are registered trademarks of IBM Corporation in the United States, other countries, or both.
Microsoft is a registered trademark of Microsoft Corporation in the United States, other countries, or both.
UNIX is a registered trademark of The Open Group in the United States and other countries.
Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.
Other company, product, and service names may be trademarks or service marks of others.
Terms of use
IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at:
For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page
