Post-installation subscripts

The post-installation script izp-post-install.sh calls a number of subscripts. Following table describes each script with its purpose and its authority levels.

Script Purpose Authorization needed Comments Promote UMS to the next environment
izp-encrypt-dba.sh Update/save encrypted DBA user ID and password CONTROL on SO.<TOKEN>; WRITE on IZP_UMS_VARDIR

Store initial password.

Update password when needed.

Will likely need to be run on next environment assuming DBAuser password is different.
install/izp-import-certs.sh Import SSL certificate to be used for UMS server WRITE on IZP_UMS_VARDIR Add certificate to allow UMS to connect to ZSS. Will likely need to be run on next environment unless the same certificate is used.
install/izp-post-install-copies.sh Copy to MVS™ data sets; modify JCL for started task and other jobs with variable substitution, copy those JCLs to MVS data sets (PROCLIB, JOBLIB) DATASET CREATE in <RUNHLQ>; WRITE on those data sets; WRITE on <RUNHLQ>.JCLLIB Copy pax file contents from USS to data sets; modify JCL files and copy to <RUNHLQ>.JCLLIB Optional, but recommended, even if you copy the SIZP* data sets, in order to get the path substitutions on the JCLs.
install/izp-update-zowe.sh Update Zowe configuration WRITE to ZOWE_INSTANCE_DIR/instance.env Adds variables to instance.env to affect Zowe processing. Need to run on next environment unless changes to <zowe_instance>/instance.env are manually added.
install/izp-install-plugins.sh Install Zowe plug-ins WRITE to Zowe data sets and ZOWE_INSTANCE_DIR Provides UMS plug-ins to Zowe, both internal authentication and data discovery, and the user accessible application. Need to run on next environment.
izp-gen-cacerts.sh Create truststore with z/OSMF certificate Authority to run commands to extract CA certificate from SAF; WRITE on IZP_UMS_VARDIR Add certificate to allow UMS to connect to z/OSMF. Will likely need to be run on next environment unless the same certificate or CA is used.
install/izp-update-apiml-config.sh Register UMS with Zowe API ML Write to IZP_UMS_VARDIR Optional: sets up API ML use. Need to run if you want to register UMS with API ML.
install/izp-uss-grp.sh Change ownership of files in UMS installation OWNER of IZP_UMS_VARDIR Ensure both installer and STC has appropriate access to zFS files. Need to run unless file ownership and permissions are taken care of manually.
izp-apf-req-ds.sh To APF authorize IZP_LOADLIB Ability to APF authorize load modules. May need to run for each IPL. The job IZPAPFDS will call this script. It uses the value of IZP_UMS_ALL_SYSNAMES. Only if IPL was run.