Changes to externals in this release

CICS® Transaction Server for z/OS®, Version 5 Release 6 changes a number of externals, including commands, transactions, resources, system initialization parameters, messages, trace, and user exits.

For a summary of changes across all supported releases, see Changes between releases in the Upgrading information.

Changes in CICS Transaction Server for z/OS, Version 5 Release 6

Changes to externals are presented by functional area. The links in the summary tables take you to each section that describes the external changes in detail. These changes are not exclusive to each of the roles shown; some will be of interest across roles. The Any changes in this release column indicates whether any external changes have been introduced in a specific functional area in this release.

Installing CICS TS	Any changes in this release?	For application programmers	For system programmers
Changes to installing	Yes		✓
Changes to samples	Yes		✓

Developing and deploying applications	Any changes in this release?	For application programmers	For system programmers
Changes to CICS API	Yes	✓
Changes to CICS EXCI	No	✓
Changes to JCICS API	No	✓
Changes to Liberty features	No		✓
Changes to JVM server profile options	Yes	✓
Changes to JVM system properties	Yes	✓
Changes to context containers	Yes	✓
Changes to the CICS assistants	Yes	✓
Changes to compiler and translator support	No	✓

Configuring and administering CICS	Any changes in this release?	For application programmers	For system programmers
Changes to CICS storage	No		✓
Changes to toggle-enabled features	Yes		✓
Changes to resource definitions	Yes	✓	✓
Changes to SIT parameters	Yes		✓
Changes to CICS transactions	Yes		✓
Changes to CEMT	Yes		✓
Changes to CICS SPI	Yes		✓
Changes to JVM profiles	Yes		✓
Changes to CICS utilities	Yes	✓	✓
Changes to GLUEs and TRUEs	Yes		✓
Changes to XPI functions	No		✓
Changes to user-replaceable programs	Yes		✓
Changes to control tables	Yes		✓
Changes to CICS policies	Yes		✓
Changes to event processing adapters and formats	No		✓

CICSPlex® System Manager	Any changes in this release?	For system programmers
Changes to installation and definition of CICSPlex SM	Yes	✓
Changes to configuration and initialization of CICSPlex SM	Yes	✓
Changes to CICSPlex SM behavior and operation	Yes	✓
Changes to CICSPlex SM resource tables	Yes	✓

Security	Any changes in this release?	For application programmers	For system programmers
Changes to security	Yes		✓
Changes to RACF classes	Yes		✓

Monitoring	Any changes in this release?	For application programmers	For system programmers
Changes to CICS monitoring	Yes		✓
Changes to statistics	Yes		✓

Troubleshooting	Any changes in this release?	For application programmers	For system programmers
Changes to messages	Yes		✓
Changes to abend codes	Yes		✓

Installing CICS TS

Changes to installing

System programmers

SDFHDLL1 has been removed.
Service APAR PH29332: DFHEITAB and DFHEITBS modules are not LPA eligible.
Service APAR PH39798: Support for installing maintenance-supplied newest release CICS Type 3 SVC and DFHIRP modules. See Installing newest release CICS Type 3 SVC and DFHIRP modules supplied through maintenance.

Changes to samples

System programmers

Table 1. Changes to the samples provided with CICS in this release
Sample	This release
DFH$DB2T	CHANGED: The TYPE within JOURNALMODEL is now specified as a CHAR(5) attribute.
DFH$FORA	CHANGED: Resources are now alphabetically ordered.
DFH$FORC	CHANGED: Resources are now alphabetically ordered and resource attributes that are COBOL reserved words are prefixed with `RDO-`.
DFH$FORP	CHANGED: Resources are now alphabetically ordered. Compiled version now supplied.
DFH0QRCP	NEW: Associated with transaction QRCP. This sample program demonstrates how to obtain and calculate the QR TCB CPU / Dispatch ratio and display a message when the ratio is less than a specified percentage.

Developing and deploying applications

Changes to CICS API

Application programmers

Table 2. Changes to EXEC CICS commands in this release
API	This release
CHANGE PASSWORD	Service CHANGED with APAR: APAR PH23078: New NOTAUTH with RESP2 value of 1, indicating that the PASSWORD field, the NEWPASSWORD field, or both are blank. APAR PH31270: New NOTAUTH with RESP2 value of 17, indicating that the USERID is not authorized to use the application. APAR PH51378: New INVREQ with RESP2 value of 32, indicating that the user ID field contains a blank character in an invalid position.
CHANGE PHRASE	Service CHANGED with APAR: APAR PH23078: New NOTAUTH with RESP2 value of 1, indicating that the PHRASE field, the NEWPHRASE field, or both are blank. APAR PH31270: New NOTAUTH with RESP2 value of 17, indicating that the USERID is not authorized to use the application. APAR PH51378: New INVREQ with RESP2 value of 32, indicating that the user ID field contains a blank character in an invalid position.
VERIFY PASSWORD	Service CHANGED with APAR: APAR PH23078: New NOTAUTH with RESP2 value of 1, indicating that the PASSWORD field is blank. APAR PH31270: New NOTAUTH with RESP2 value of 17, indicating that the USERID is not authorized to use the application.
VERIFY PHRASE	Service CHANGED with APAR: APAR PH23078: New NOTAUTH with RESP2 value of 1, indicating that the PHRASE field is blank. APAR PH31270: New NOTAUTH with RESP2 value of 17, indicating that the USERID is not authorized to use the application.
VERIFY TOKEN	CHANGED: Enhanced to support JSON Web Tokens (JWTs) provided by RACF®.
WEB CONVERSE	CHANGED: Enhanced to support the PATCH method.
WEB SEND (Client)	CHANGED: Enhanced to support the PATCH method.

Changes to CICS EXCI

Application programmers

No changes in this release.

Changes to JCICS API

Application programmers

No changes in this release.

Changes to Liberty features

System programmers

No changes in this release.

Changes to JVM server profile options

Application programmers

Table 3. Changes to JVM server profile options in this release
Option	This release
PURGE_ESCALATION_TIMEOUT	NEW compatible with: All JVM Environments New JVM server option to specify the interval between the disable actions that CICS performs when a JVM server encounters a TCB failure.
WLP_ZOS_PLATFORM	OBSOLETE: Multiple fully configured Liberty servers can be in the same address space.

Changes to JVM system properties

Application programmers

Table 4. Changes to JVM system properties in this release
Property	This release
`-Dcom.ibm.cics.jvmserver.cmci.bundles.dir=<bundles_directory>`	NEW: Only for the CICS bundle deployment API in the CMCI JVM server. Specifies the bundles directory on zFS that stores the CICS bundles pushed to the API.
`-Dcom.ibm.cics.jvmserver.cmci.deploy.timeout={120000\|timeout_limit}`	NEW: Only for the CICS bundle deployment APIin the CMCI JVM server. Specifies the timeout limit for deploying a CICS bundle, in milliseconds. This includes the time for all bundle lifecycle actions, including disable, discard, install and enable.
`-Dcom.ibm.cics.jvmserver.cmci.max.file.size={52428800\|max_file_size}`	NEW: Only for the CICS bundle deployment API in the CMCI JVM server. Specifies the maximum size allowed for the uploaded CICS bundle, in bytes.
`-Dcom.ibm.cics.jvmserver.cmci.max.request.size={104857600\|max_request_size}`	NEW: Only for the CICS bundle deployment API in the CMCI JVM server. Specifies the maximum size allowed for a multipart or form-data request, in bytes.
`-Dcom.ibm.cics.jvmserver.trace.specification={filter_text}`	NEW compatible with: All JVM Environments. Specifies a JVM server trace filter string allowing finer grained control over package and class trace from the JVM server.
`-Dcom.ibm.cics.jvmserver.wlp.saf.profilePrefix=<my_prefix>`	NEW: Only for the CMCI JVM server. Specify the prefix for SAF profiles in the EJBROLE class.
`-Dcom.ibm.cics.jvmserver.wlp.security.subject.create={true\|false}`	Service NEW: Allows the user to turn off Java™ Subject creation when performing a `LINK` to Liberty.
`-Dcom.ibm.ws.zos.core.angelRequiredServices`	Service NEW (APAR PH41256): This new property specifies which z/OS authorized services should be checked to see if they are available to the Liberty server being started.

Changes to context containers

Application programmers

Table 5. Changes to the context containers used in a PIPELINE
Container	This release
DFHWS-DPLTRANID	NEW: A new container, DFHWS-DPLTRANID, can be created in a PIPELINE by a handler program. The container can contain the name of a transaction identifier under which remote web services are to be executed. If the container does not exist, the default transaction identifier, CSMI, will be used.

Changes to the CICS assistants

Application programmers

Table 6. Changes to the CICS web services assistants, XML assistants, and JSON assistants in this release
Assistant	This release
ALL	NEW: A new symbolic parameter, PATHMAIN, has been added to all of the assistants. This parameter specifies the main part of the name of the CICS TS directory in the UNIX system services file system. The default is /usr/lpp/cicsts
DFHWS2LS	Service CHANGED (APAR PH21097): This web services assistant has been updated to set the required Java properties to support use of SAF keyrings. See this information for guidance on how to use SSL parameters SSL-KEYSTORE and SSL-TRUSTSTORE for DFHWS2LS.

Changes to compiler and translator support

Application programmers

No changes in this release.

Configuring and administering CICS

Changes to CICS storage

System programmers

No changes in this release.

Changes to toggle-enabled features

System programmers

Table 7. Changes to toggle-enabled features in this release
Feature toggle	This release
`com.ibm.cics.cmci.jvmserver={true\|false}`	CHANGED The default is changed to true. If you have not upgraded to the CMCI JVM server, follow the upgrade instruction in Upgrading CICSPlex SM.
`com.ibm.cics.rls.delete.ridfld={true\|false}`	NEW Avoid AFCG abends when migrating from non-RLS to RLS access mode.
`com.ibm.cics.http.options.handler={program_name}`	REMOVED You can specify the name of the HTTP Options handler program in the OPTIONSPGM attribute of the TCPIPSERVICE resource definition.
`com.ibm.cics.cpsm.bas.largecicsplex={true\|false}`	NEW Improved use of BAS data space storage for large CICSplex environments. Service CHANGED (APAR PH26781): The default is changed from true to false.
`com.ibm.cics.cpsm.wlm.botrsupd.enabled={true\|false}`	Service NEW (APAR PH14812): Disable coupling facility updates when the task load is below the threshold set by the BOTRSUPD parameter.
`com.ibm.cics.cpsm.wlm.surgeresist={true\|false}`	Service NEW (APAR PH30768): When applied to CICSPlex SM WLM routing regions, this feature toggle takes effect for the QUEUE and GOAL WLM algorithms when using CICSPlex SM sysplex optimized workload routing. It has no effect when applied to target regions. When the feature toggle is set to true, surges of extremely high frequency, short duration transactions can be mitigated by reducing the likelihood that recently selected target regions are reselected. Enabling this feature toggle increases the average routing cost per transaction, but restores the routing behavior of CICSPlex SM at CICS TS 5.6 before APAR PH30768 is applied. See Changes to CICSPlex SM sysplex optimized workload routing behavior.
`com.ibm.cics.db2.origindata={true\|false}`	Service NEW (APAR PH49408): Gives you the option to disable the passing of adapter origin data to Db2® for adapter tracking.
`com.ibm.cics.dpl.32kcommarea={true\|false}`	NEW Disable the capability to use COMMAREAs greater than 24 KB for DPL requests over an MRO connection.
`com.ibm.cics.ds.freeussprocesses={true\|false}`	Service NEW (APAR PH27111): Handling of USS processes. Intended for use only under guidance from IBM service personnel.
`com.ibm.cics.resourceoverrides.file={name.yaml}`	Service NEW (APAR PH30590) Resource definition overrides support. See Overriding resource definitions.
`com.ibm.cics.web.defaultcipherfile={true\|false}`	Service NEW (APAR PH38091): Use defaultciphers.xml as a default set of ciphers for outbound web requests. See Default cipher file for outbound web requests.
`com.ibm.cics.tls.minimumkeystrength={1024\|2048}`	Service NEW (APAR PH50175): Sets the minimum key size allowed during TLS handshakes.
`com.ibm.cics.mvssm.mon.interval={0\|60,1-60}`	NEW MVS™ storage monitoring and SOS wait support.
`com.ibm.cics.mvssm.sos24.minavailable.contiguous={32,1-1024}`	NEW MVS storage monitoring and SOS wait support.
`com.ibm.cics.mvssm.sos24.minavailable.total={64,1-1024}`	NEW MVS storage monitoring and SOS wait support.
`com.ibm.cics.mvssm.sos31.minavailable.contiguous={64,1-16384}`	NEW MVS storage monitoring and SOS wait support.
`com.ibm.cics.mvssm.sos31.minavailable.total={128,1-16384}`	NEW MVS storage monitoring and SOS wait support.
`com.ibm.cics.mvssm.sos.wait={true\|false}`	NEW MVS storage monitoring and SOS wait support.
`com.ibm.cics.web.hsts.includesubdomains.TCPIPS={true\|false}`	Service NEW (APAR PH55369): Controls whether to extend HTTP strict transport security (HSTS) to sub-domains of the specified TCPIPSERVICE.
`com.ibm.cics.web.hsts.max-age.TCPIPS={seconds\|-1}`	Service NEW (APAR PH55369): Sets HSTS for an individual TCPIPSERVICE to override the region wide setting.
`com.ibm.cics.web.hsts.includesubdomains={true\|false}`	Service NEW (APAR PH55369): Controls whether to extend HSTS to the sub-domains of the CICS server.
`com.ibm.cics.web.hsts.max-age=seconds`	Service NEW (APAR PH55369): Activates and sets HSTS for a CICS region.

Changes to resource definitions

Application programmers System programmers

Table 8. Changes to resource definitions in this release
Resource	This release
DUMPCODE	NEW: To define attributes for transaction dump codes and system dump codes.
MQMONITOR	CHANGED: You can use one or more symbolic parameters, `&applid.` or `&APPLID.`, anywhere in the QNAME value to identify the APPLID of a CICS region. Any user-defined character strings `&applid.` or `&APPLID.` will be replaced by the APPLID of the local region when the MQMONITOR is installed. This will facilitate generic use of this resource.
TCPIPSERVICE	CHANGED: The OPTIONSPGM parameter has been added. Use this parameter to specify the name of a program that is invoked to handle an HTTP OPTIONS request.
URIMAP	Service CHANGED (APAR PH44683): Added support for enabling multiple client URIMAPs that point to the same endpoint (that is, the same host, port and path) in a CICS region.

Changes to SIT parameters

System programmers

Table 9. Changes to system initialization parameters in this release
SIT	This release
CMDSEC	CHANGED: The ALWAYS option no longer affects category 3 transactions.
CONFDATA	CHANGED: The default is changed to HIDE. The HIDE option replaces HIDETC, which means that all transport data, not just terminal control data, is subject to CONFDATA. If the deprecated CONFDATA=HIDETC is specified in the SIT or in an override, CONFDATA=HIDE is assumed, and no message will be issued. If you use CONFDATA=SHOW, you should review if this is necessary. See Removing sensitive data from CICS trace using CONFDATA for details.
CPSMCONN	Service CHANGED with APAR PH35122: New option SMSSJ. CPSMCONN=SMSSJ initializes a single CICS region that is not part of a CICSplex as a CICS System Management Single Server (SMSS) and automatically creates a Liberty JVM server named EYUCMCIJ as the CMCI JVM server of the region.
DUMP	CHANGED: The TABLEONLY option has been added to allow all sdumps to be suppressed except those that have an entry in the dump table that allows sdumps.
DUMPSW	CHANGED: The ALL option has been added to allow continuous switching between the two transaction dump data sets DFHDMPA and DFHDMPB.
GMTRAN	CHANGED: The DISCONNECT option is extended to the CICS-supplied sign-off transaction CESF, forcing the terminal session to be disconnected upon sign-off.
KEYRING	Service CHANGED with APAR PH49253: The parameter accepts more formats of key ring names, which allows you to specify key rings that are not owned by the region user ID.
TRTABSZ	CHANGED: The minimum value which can be specified has been increased from 16 KB to 1024 KB.
TRTRANSZ	CHANGED: The minimum value which can be specified has been increased from 16 KB to 1024 KB.

Changes to CICS transactions

System programmers

Table 10. Changes to CICStransactions in this release
Transaction	This release
CEDA CEDB CEDC	CHANGED: The dataset associated with the CSD for the local region is now displayed on the panel in format `DSN=<dataset name>`.
CESF	CHANGED: Now subject to the control of GMTRAN=(,DISCONNECT). When this system initialization parameter is in effect, the terminal session is disconnected upon sign-off.
CJSS	NEW: JVM server SPI service transaction (category 1).
CJXA	NEW: JVM server JCICSX request processor transaction (category 2).
CKBR	CHANGED: New parameter SMFMQGET, instructing CICS to write SMF type 110 records for MQGET requests issued by the CICS-MQ bridge. CKBR now handles temporary errors that occur when issuing MQOPEN and MQGET requests. Rather than terminating, CKBR will retry every minute for up to an hour. If the error is not resolved after an hour, the monitor transaction will then terminate.
CKTI	CHANGED: CKTI now handles abends produced when starting user transactions. If an abend occurs when the CKTI transaction attempts to start the user transaction, rather than terminating, CKTI will now send the trigger message to the dead-letter queue, and trigger monitor processing continues. CKTI now handles temporary errors that occur when issuing MQOPEN and MQGET requests. Rather than terminating, CKTI will retry every minute for up to an hour. If the error is not resolved after an hour, the monitor transaction will then terminate.
CQRC	NEW: QR TCB CPU/Disp ratio transaction (category 1).
CSFE	CHANGED: CSFE has been enhanced to allow authorized users to change the CONFDATA settings. For more information, see Using CSFE to change the CONFDATA setting.
CWDP	NEW: Web support alias transaction for the CMCI CICS bundle deployment API (category 2).

Changes to CEMT

System programmers

Table 11. Changes to CEMT in this release
Command	This release
CEMT INQUIRE DUMPDS	CHANGED: New value ALL returned for SWITCHSTATUS keyword.
CEMT INQUIRE SYDUMPCODE	CHANGED: Resource signature keywords CHANGEAGENT, CHANGEAGREL, CHANGETIME, CHANGEUSRID, DEFINESOURCE, DEFINETIME, INSTALLAGENT, INSTALLTIME, and INSTALLUSRID added.
CEMT INQUIRE SYSTEM	CHANGED: New value TABLEONLY returned for DUMPING keyword.
CEMT INQUIRE TCPIPSERVICE	CHANGED: New option OPTIONSPGM, returning the name of the HTTP OPTIONS handler program used for this TCPIPSERVICE.
CEMT INQUIRE TRDUMPCODE	CHANGED: Resource signature keywords CHANGEAGENT, CHANGEAGREL, CHANGETIME, CHANGEUSRID, DEFINESOURCE, DEFINETIME, INSTALLAGENT, INSTALLTIME, and INSTALLUSRID added.
CEMT INQUIRE TSQUEUE / TSQNAME	CHANGED: New option TSMODEL, returning the name of the temporary storage model that was used when the temporary storage queue was created.
CEMT PERFORM STATISTICS	CHANGED: New option SECURITY to write security domain statistics and new option USER to write user domain statistics.
CEMT SET DUMPDS	CHANGED: New value ALL supported for SWITCHSTATUS keyword to allow switching of transaction dump data sets every time one fills.
CEMT SET SYSTEM	CHANGED: New cvda value TABLEONLY supported for DUMPING keyword to allow suppression of all sdumps except those that have an entry in the dump table that allows sdumps.

Changes to CICS SPI

System programmers

Table 12. Changes to the system programming interface commands in this release
Command	This release
CREATE DUMPCODE	NEW: To create a DUMPCODE resource definition in the CICS region.
DISCARD TRANSACTION	CHANGED: Transactions beginning with C can now be discarded as long as the name of the initial program does not begin with DFH, EYU, or CJ`x` (where `x` is A through J).
EXTRACT STATISTICS	CHANGED: New option SECURITY for requesting security domain statistics New option USER for requesting user domain statistics
INQUIRE ASSOCIATION	Service CHANGED (APAR PH42306): Enhanced support for Liberty. The association data user ID value now reflects the final user ID value used in secure Liberty transactions, instead of the initial user ID.
INQUIRE DUMPDS	CHANGED: New cvda SWITCHALL returned for SWITCHSTATUS keyword.
INQUIRE JVMENDPOINT	NEW: Retrieves information about a JVM server endpoint.
INQUIRE SYSDUMPCODE	CHANGED: Resource signature keywords CHANGEAGENT, CHANGEAGREL, CHANGETIME, CHANGEUSRID, DEFINESOURCE, DEFINETIME, INSTALLAGENT, INSTALLTIME, and INSTALLUSRID added.
INQUIRE SYSTEM	CHANGED: New cvda TABLEONLY returned for DUMPING keyword.
INQUIRE TCPIPSERVICE	CHANGED: New optional output parameter, OPTIONSPGM, returning the name of the HTTP OPTIONS handler program used for this TCPIPSERVICE.
INQUIRE TRANDUMPCODE	CHANGED: Resource signature keywords CHANGEAGENT, CHANGEAGREL, CHANGETIME, CHANGEUSRID, DEFINESOURCE, DEFINETIME, INSTALLAGENT, INSTALLTIME, and INSTALLUSRID added.
INQUIRE TSQUEUE / TSQNAME	CHANGED: New option TSMODEL, returning the name of the temporary storage model that was used when the temporary storage queue was created.
PERFORM JVMSERVER	NEW: Improved JVM server administration.
PERFORM STATISTICS	CHANGED: New option SECURITY to record global statistics on the security domain New option USER to record global statistics on the user domain
SET DUMPDS	CHANGED: New cvda value SWITCHALL supported for SWITCHSTATUS keyword to allow switching of transaction dump data sets every time one fills.
SET JVMENDPOINT	NEW: Enable or disable a Liberty JVM server endpoint.
SET SYSTEM	CHANGED: New cvda value TABLEONLY supported for DUMPING keyword to allow suppression of all sdumps except those that have an entry in the dump table that allows sdumps.
SET TRANSACTION	CHANGED: Transactions beginning with C can now be set disabled as long as the name of the initial program does not begin with DFH, EYU, or CJ`x` (where `x` is A through J).

Changes to JVM profiles

System programmers

Table 13. Changes to JVM profiles in this release
JVM profile	This release
EYUCMCIJ.jvmprofile	Service CHANGED (APAR PH41256): The supplied sample profile for a CMCI JVM server in a WUI region is changed to add `-Dcom.ibm.ws.zos.core.angelRequiredServices=SAFCRED,PRODMGR,ZOSAIO`.
EYUSMSSJ.jvmprofile	Service NEW (APAR PH35122): A new supplied sample profile for a CMCI JVM server in a single CICS region. This new supplied sample profile for a CMCI JVM server in a single CICS region also has the `angelRequiredServices` property set as follows: `-Dcom.ibm.ws.zos.core.angelRequiredServices=SAFCRED,PRODMGR,ZOSAIO`.

Changes to CICS utilities

Application programmers System programmers

Table 14. Changes to CICS utilities in this release
Utility	This release
DFH0STAT	CHANGED: New reports provided: User report Security report MVS user region and extended user region storage report The System Status report includes new fields Frequency and MCT program name in the Monitoring section. The following fields are now removed from the Storage above 16 MB report: MVS storage request waits (SMSMVSSTGREQWAITS) Total time waiting for MVS storage (SMSTIMEWAITMVS) The TCP/IP services report includes a new field TCPIPSERVICE OPTIONSPGM, showing the name of the HTTP OPTIONS handler program used for this service.
DFHSTUP	CHANGED: New fields added to user domain statistics: Delete count due to sign off (USGDESOF) Delete count due to ENF (USGDEENF) Current instances in directory (USGDRCUR) Peak instances in directory (USGDRPK) Current instances in timeout (USGTOCUR) Peak instances in timeout (USGTOPK) ENF events matched (USGENFK) ENF events not matched (USGENFUN) Now provides security domain statistics. New option SECURITY added to SELECT TYPE and IGNORE TYPE control parameters. New fields added to monitoring domain statistics: RMI Option (MNGRMI) Application naming (MNGAPPNS) MCT program name (MNGMCTNM) Frequency (MNGFREQ) The Dispatcher Statistics - CICS TCB Mode Statistics report has been enhanced to print the QR TCB CPU Dispatch Ratio. New field added to TCP/IP resource statistics: Name of the HTTP OPTIONS handler program (OPTIONSPGM) New fields reflecting MVS user region and extended user region storage added to Storage manager: Global statistics, indicating: The time the MVS monitor system task last sampled MVS storage State of the user region or extended user region The current total amount of unallocated user region or extended user region storage Low water mark of the total amount of unallocated user region or extended user region storage The size of the current largest contiguous storage area available in unallocated user region or extended user region storage Low water mark of the size of the largest contiguous storage area available in unallocated user region or extended user region storage The time the last SOS condition was detected The time tasks waited because of the SOS or constrained state The current, peak, and total number of tasks that are waiting because of the SOS or constrained state
DFHPD730	CHANGED: The TRS KE_NUM parameter has been enhanced to format out the most recent trace entries information for the specified task. The new output is in addition to any entries for the task in the internal trace table.

Changes to GLUEs and TRUEs

System programmers

Table 15. Changes to global user exits and task-related user exits in this release
Exit	This release
XDUCLSE	CHANGED: UERCSWCH return code has no effect if DUMPSW=ALL is already set. DUMPSW=ALL means that dump data sets will always switch.
XRSINDI	CHANGED: New value UEIDDMPC returned for parameter UEPIDTYP when a DUMPCODE is installed or discarded.

Changes to XPI functions

System programmers

No changes in this release.

Changes to user-replaceable programs

System programmers

Table 16. Changes to the user-replaceable programs in this release
Program	This release
DFHWBOPT	NEW: Handler program that can be invoked to process HTTP OPTIONS requests.

Changes to control tables

System programmers

Table 17. Changes to control tables in this release
Control table	This release
DFHXCOPT	CHANGED: The EXCI SURROGCHK parameter has been removed. Surrogate checking is always done. Specifying SURROGCHK=YES in the EXCI options table, DFHXCOPT, is accepted for compatibility. The default for the CONFDATA parameter has changed to HIDE. The HIDE option replaces HIDETC, which means that all transport data is subject to CONFDATA. If the deprecated CONFDATA=HIDETC is specified in DFHXCOPT, CONFDATA=HIDE is assumed, and no message will be issued.

Changes to CICS policies

System programmers

Table 18. Changes to policy system rules in this release
System rule	This release
All	NEW ACTION: Set z/OS WLM health open status
DBCTL connection status	NEW
IBM MQ connection status	NEW
Pipeline enable status	NEW
Transaction dump threshold	Service NEW (APAR PH34348)

Table 19. Changes to policy task rules in this release
Task rule	This release
All	Service CHANGED (APAR PH26145): Introduced support for setting Transaction ID and User ID conditions for task rules.
Container storage	Service NEW (APAR PH29187)

Changes to event processing adapters and formats

System programmers

No changes in this release.

CICSPlex System Manager

Changes to installation and definition of CICSPlex SM

System programmers

The record size of EYUHIST* data sets is increased from RECORDSIZE(3620 3624) to RECORDSIZE(3680 3684). The EYUJHIST sample is updated to reflect this change.

Changes to configuration and initialization of CICSPlex SM

System programmers

Table 20. Changes to CICSPlex SM system parameters (EYUPARM) in this release
EYUPARM parameter	This release
	No changes in this release.

Table 21. Changes to CICSPlex SM WUI server initialization parameters (WUIPARM) in this release
WUIPARM parameter	This release
TCPIPHOSTNAME	Service DEPRECATED (APAR PH47103): The hostname of the WUI server is the name of the host where the WUI is executing. It is no longer set by the TCPIPHOSTNAME WUI initialization parameter. The WUI uses relative URLs, and not embedded host names. TCPIPHOSTNAME is still required, but the value is ignored. This parameter is retrained for compatibility and will be removed in a later release.
TCPIPHTTPHOST	Service DEPRECATED (APAR PH47103): The hostname of the WUI server is the name of the host where the WUI is executing. The WUI uses relative URLs, and not embedded host names. If a value is specified on TCPIPHTTPHOST, it is ignored. This parameter is retrained for compatibility and will be removed in a later release.

Table 22. Changes to CMCI in this release
Change	This release
Default enablement of the CMCI JVM server	CHANGED: The CMCI interface now uses the CMCI JVM server by default. This means that if you don't specify the feature toggle `com.ibm.cics.cmci.jvmserver=false` in your feature toggle configuration, the CMCI JVM server is enabled. The feature toggle `com.ibm.cics.cmci.jvmserver` will be removed in a future release of CICS TS. If you have not upgraded the CMCI interface in the CICSPlex SM WUI regions to the CMCI JVM server, follow the upgrade instruction in Upgrading CICSPlex SM. See Setting up CMCI with CICSPlex SM for detailed CMCI setup instructions.

Changes to CICSPlex SM behavior and operation

System programmers

Table 23. Changes to CICSPlex SM behavior and operation in this release
CICSPlex SM feature	This release
CICSPlex SM BAS	CHANGED: Improved usage of BAS data space storage for large CICSplex environments The CICSPlex SM BAS component can now use all available BAS data space storage by spreading large resource deployment lists for BAS across multiple data spaces instead of being constrained to a single data space. This is controlled by the feature toggle `com.ibm.cics.cpsm.bas.largecicsplex`.
CICSPlex SM workload management	Service CHANGED (APAR PH30768): CICSPlex SM sysplex optimized workload routing behavior The default behavior of CICSPlex SM workload management routing algorithms has been updated to increase the likelihood that work is routed to healthy, local target regions. This change applies only to the QUEUE and GOAL algorithms, not to the link neutral variants (LNQUEUE and LNGOAL). See Changes to CICSPlex SM sysplex optimized workload routing behavior for details.

Changes to CICSPlex SM resource tables

System programmers

Enhancements to CICSPlex SM resource tables are typically populated to related CICSPlex SM views. In Table 24, where applicable, the changed CICSPlex SM views are also listed.

Table 24. Changes to the resource tables provided by CICSPlex SM in this release
Resource table	Related view	This release
CICSRGN	CICS region (CICSRGN) view	CHANGED: New cvda value SWITCHALL for DDSSSTAT field. New cvda value TABLEONLY for SYSDUMP field.
HTASK	Completed tasks (history) (HTASK) view	CHANGED: New field SMMVSSWT.
RULE	Not applicable	CHANGED: New field OPENSTATUS. New value WLMHEALTH added to ACTION field. New values dbctlConnection, mqConnection and pipelineEnable added to RULETYPE field. CHANGED with APAR: Service APAR PH29187: New values containerstorage added to RULETYPE field Service APAR PH34348: New values transactionDump added to RULETYPE field Service APAR PH45119: Attributes COUNT and TIME are changed to indicate the values since the region started instead of within the current statistics interval. New resource table attributes COUNTSTAT and TIMESTAT are added to indicate the values within the current statistics interval.
SYSDUMP	CICS system dump code (SYSDUMP) view	CHANGED: New resource signature fields CHANGEAGENT, CHANGEAGREL, CHANGETIME, CHANGEUSRID, DEFINESOURCE, DEFINETIME, INSTALLAGENT, INSTALLTIME, and INSTALLUSRID added.
TASK	Active tasks (TASK) view	CHANGED: New field SMMVSSWT.
TCPDEF	TCP/IP service definitions (TCPDEF) view	CHANGED: New field OPTIONSPGM.
TRANDUMP	CICS transaction dump codes (TRANDUMP) view	CHANGED: New resource signature fields CHANGEAGENT, CHANGEAGREL, CHANGETIME, CHANGEUSRID, DEFINESOURCE, DEFINETIME, INSTALLAGENT, INSTALLTIME, and INSTALLUSRID added.

Security

Changes to security

System programmers

Table 25. Changes to security in this release
Area	This release
Auditing	NEW: Monitoring capability introduced for the security domain
Authentication	NEW: VERIFY TOKEN support for JWT Java EE 8 Security-1.0 API with JSR 375 CHANGED: CICS Explorer support for MFA is ON by default. New DISCONNECT option on GMTRANT for terminal sign-on security control. Support extended to CESF.
Confidentiality	NEW: SNI support in CICS TS communications with an HTTP server over TLS connections Service (APAR PH38091) Default cipher file for outbound web requests Service (APAR PH50175) The feature toggle `com.ibm.cics.tls.minimumkeystrength` allows CICS to set the minimum key size during TLS handshakes for increased key strength. CHANGED: CONFDATA system initialization parameter: The default is changed from SHOW to HIDE. The HIDE option replaces HIDETC. Service (APAR PH49253) KEYRING system initialization parameter: Accepts more formats of key ring names to allow use of key rings that are not owned by the region user ID.
Integrity	Service NEW (APAR PH55369): HTTP strict transport security (HSTS) is supported when CICS acts as a server.
EXCI SURROGCHK option	REMOVED:Surrogate checking is always done. Specifying SURROGCHK=YES in the EXCI options table, DFHXCOPT, is accepted for compatibility.

Changes to RACF classes

System programmers

Table 26. Changes to RACF classes related to command security. These changes are new resource identifiers for SPI commands. See CICS resources subject to command security checking and Resource and command check cross-reference for a list of all of the SPI commands and the RACF ACCESS required for each one.
Command	This release
CREATE DUMPCODE	NEW: resource identifier DUMPCODE
INQUIRE JVMENDPOINT SET JVMENDPOINT	NEW: resource identifier JVMENDPOINT
PERFORM JVMSERVER	NEW: resource identifier JVMSERVER ACCESS(UPDATE) is required for the command. ACCESS(UPDATE) is required for the named JVMSERVER resource identifier.

Table 27. Changes to RACF classes related to CICS user IDs
User ID	This release
Default user ID	Default user no longer needs command authority for any CAT 3 CICS transactions.

Table 28. Changes to other RACF classes
Class	Profile	This release
IDTDATA	JWT.applid.userid.SAF	NEW: support for JWT with RACF
SURROGAT	userid.DFHEXCI	NEW: surrogate user checking for EXCI

Monitoring

Changes to CICS monitoring

System programmers

Table 29. Changes to monitoring data in this release
Data	This release
Performance data in group DFHCICS	Service CHANGED (APAR PH42306): Field 089 (USERID) is changed for Liberty such that the user ID value now reflects the final user ID value used in secure Liberty transactions, instead of the initial user ID.
Performance data in group DFHTASK	NEW FIELDS: New field SMMVSSWT, containing the time that the user task waited because MVS user region or extended user region was short on storage and the number of times the task waited. New field XSVFYPWD, displaying the total elapsed time that the user task spent verifying passwords, password phrases, PassTickets and MFA tokens. New field XSVFYBAS, displaying the total elapsed time that the user task spent verifying basic authentication tokens. New field XSVFYJWT, displaying the total elapsed time that the user task spent verifying JSON web tokens. New field XSVFYKER, displaying the total elapsed time that the user task spent verifying Kerberos tokens.
Exception class data	Service CHANGED with APAR: APAR PH29187: New exception resource type CONTAINR, which means that the threshold of a container storage policy task rule has been exceeded. APAR PH34348: New exception resource type TRANDUMP, which means that the threshold of a transaction dump threshold policy system rule has been exceeded.

Changes to statistics

System programmers

In Table 30, the field name is a unique identifier for each statistic field, and where applicable, the DFHSTUP name is also given.

Table 30. Changes to statistics in this release
Statistics	This release
Monitoring domain	CHANGED: New fields: RMI Option (MNGRMI) Application naming (MNGAPPNS) MCT program name (MNGMCTNM) Frequency (MNGFREQ)
Security domain	NEW
Sockets domain	CHANGED: New field: Name of the HTTP OPTIONS handler program (OPTIONSPGM)
Storage manager	CHANGED: Statistics are provided respectively for MVS user region and extended user region storage, indicating: The time the MVS monitor system task last sampled MVS storage State of the user region or extended user region The current total amount of unallocated user region or extended user region storage Low water mark of the total amount of unallocated user region or extended user region storage The size of the current largest contiguous storage area available in unallocated user region or extended user region storage Low water mark of the size of the largest contiguous storage area available in unallocated user region or extended user region storage The time the last SOS condition was detected The time tasks waited because of the SOS or constrained state The current, peak, and total number of tasks that are waiting because of the SOS or constrained state
User domain	CHANGED: New fields: Delete count due to sign off (USGDESOF) Delete count due to ENF (USGDEENF) Current instances in directory (USGDRCUR) Peak instances in directory (USGDRPK) Current instances in timeout (USGTOCUR) Peak instances in timeout (USGTOPK) ENF events matched (USGENFK) ENF events not matched (USGENFUN)

Troubleshooting

Changes to messages

System programmers

Table 31. Changes to messages in this release
New messages	Changed messages	Removed messages
DFHAM4968 indicates that one or more attributes of a resource were overridden. DFHAM4969 indicates that a resource failed to install because overrides resulted in an invalid resource definition. DFHAM4970 indicates that an override was applied to a resource definition attribute. DFHAM4971 indicates that resource overrides applied during GRPLIST installation resulted in invalid resource definitions. DFHAM4972 indicates that a resource override action is not valid because an attribute is null. DFHAM4973 indicates that a resource override action makes an attribute too long. DFHAP0605 indicates that a Db2 cancel thread request has been issued as part of CICS purge or forcepurge processing.
DFHCA4968 indicates that one or more attributes of a resource were overridden. DFHCA4969 indicates that a resource failed to install because overrides resulted in an invalid resource definition. DFHCA4970 indicates that an override was applied to a resource attribute. DFHCA4972 indicates that a resource override action is not valid because an attribute is null. DFHCA4973 indicates that a resource override action makes an attribute too long.
DFHDS0102 indicates the current CPU / dispatch ratio for the QR TCB. DFHDS0103 indicates an invalid INITPARM setting that specifies how often the DFHDS0102 message is to be issued. DFHDU0311 indicates automatic switching of dump data sets specified by DUMPSW=ALL has been overridden because the dump data sets are too small.	DFHDB8111 now shows an `rs` reason code to more accurately identify the reason for the IMS connection failure. DFHDB8222 now shows an `rs` reason code to more accurately identify the reason for the IMS connection failure.
Service DFHIS2013 (APAR PH52870) indicates the server APPLID that is used in a High Availability (HA) IPCONN connection.
DFHMP3015 indicates that a system rule defined in a policy that is installed in a stand-alone region is triggered and the z/OS WLM health open status is set. DFHMP3016 indicates that a system rule defined in a policy that is installed on a platform is triggered and the z/OS WLM health open status is set. DFHMP3017 indicates that a system rule defined in a policy that is installed in a stand-alone region is triggered but the z/OS WLM health open status could not be set because WLMHEALTH=OFF is specified as a system initialization parameter. DFHMP3018 indicates that a system rule defined in a policy that is installed on a platform is triggered but the z/OS WLM health open status could not be set because WLMHEALTH=OFF is specified as a system initialization parameter.
DFHMQ0126 indicates that a temporary error occurred when a CKTI trigger monitor attempted to issue an MQOPEN of an initiation queue. The trigger monitor will retry in one minute. DFHMQ0127 indicates that a temporary error occurred when a CKTI trigger monitor attempted to issue an MQGET from an initiation queue. The trigger monitor will retry in one minute. DFHMQ0128 indicates that following a temporary error, a CKTI trigger monitor has resumed normal processing. DFHMQ0393 indicates that an abend occurred when CICS attempted to start the transaction defined in a trigger message. DFHMQ0794 indicates the SMFMQGET start option of the CICS-MQ bridge. DFHMQ0795 indicates that the CICS-MQ bridge has retrieved a message that has been previously marked and the mark browse interval has expired. DFHMQ0796 indicates that following a temporary error, a CKBR bridge monitor has resumed normal processing. Service DFHMQ0797E (APAR PH42282) is issued when temporary storage queue DFHCKBR is required but its TSMODEL definition has not been defined or installed in the system.
DFHPA2001 indicates insufficient 64-bit storage to process resource overrides. DFHPA2002 indicates that the resource overrides file is being read. DFHPA2003 indicates that resource overrides file could not be found. DFHPA2004 indicates that the resource overrides file could not be opened. DFHPA2005 indicates that the resource overrides file could not be read. DFHPA2007 indicates that the USSCONFIG value cannot be determined. DFHPA2008 indicates that the resource overrides file is too large. DFHPA2009 indicates insufficient 31-bit storage to process resource overrides. DFHPA2010 indicates that the feature toggle specifies an invalid resource overrides file name
Service DFHRM0240 (APAR PH03691) indicates the local log name that is set during CICS initialization and sent to a remote system when CICS establishes an APPC or IRC connection. Service DFHRM0241 (APAR PH03691) indicates a log name that has been set for an APPC or IRC connection. Service DFHRM0242 (APAR PH03691) indicates a log name that has been deleted for an APPC or IRC connection.
DFHRV0002 indicates that a severe error (code X'code') occurred in a module. DFHRV1000 indicates that the resource overrides file failed to parse. DFHRV1001 indicates that an override rule is for an obsolete resource type. DFHRV1002 indicates that an override rule specifies an invalid resource name. DFHRV1003 indicates that an override rule specifies an invalid attribute. DFHRV1004 indicates that an override rule specifies an invalid attribute value. DFHRV1005 indicates that an override rule specifies an invalid value for an integer attribute. DFHRV1006 indicates that an override rule specifies an integer attribute value outside its valid range. DFHRV1007 indicates that an override rule specifies an invalid CVDA attribute value. DFHRV1008 indicates that an override rule specifies an invalid override action. DFHRV1009 indicates that an override rule specifies an unsupported resource type. DFHRV1010 indicates that an override rule specifies an invalid symbol format in the attribute value.
DFHRV1011 indicates that an override rule specifies an unsupported symbol name in the attribute value. DFHRV1012 indicates that an override rule specifies an invalid symbol substring in the attribute value. DFHRV1013 indicates that an override rule specifies an unsupported escape character in the attribute value. DFHRV1014 indicates that an override rule specifies an invalid null string in the attribute value. DFHRV1015 indicates that an override rule specifies an obsolete attribute. DFHRV1016 indicates that a resource overrides file with updated content was loaded during CICS restart. DFHRV1017 indicates that a resource overrides file is empty.
DFHSI1610 indicates that DFHAMIO is not on the load library and resource overrides cannot be processed. DFHSI1611 indicates an error in DFHAMIO during resource override processing. DFHSI1612 indicates errors in the resource overrides file during resource override processing. DFHSJ0007 indicates that an unexpected signal has been received by the JVM server. DFHSJ0008 indicates that the JVM server has unexpectedly terminated and is now in an unusable state.	DFHSJ1007 is updated to reflect changed system action when CICS detects that an abend has left a JVM in an inconsistent state.
DFHSM0144 indicates that the CICS region is short on 24-bit MVS unallocated storage. DFHSM0145 indicates that the CICS region is no longer short on 24-bit MVS unallocated storage. DFHSM0146 indicates that the 24-bit MVS unallocated storage of the CICS region is constrained. DFHSM0147 indicates that the 24-bit MVS unallocated storage of the CICS region is no longer constrained. DFHSM0148 displays the total amount of unallocated storage and the amount of the largest contiguous unallocated storage area within the MVS user region. DFHSM0149 indicates that the CICS region is short on 31-bit MVS unallocated storage. DFHSM0150 indicates that the CICS region is no longer short on 31-bit MVS unallocated storage. DFHSM0151 indicates that the 31-bit MVS unallocated storage of the CICS region is constrained. DFHSM0152 indicates that the 31-bit MVS unallocated storage of the CICS region is no longer constrained. DFHSM0153 displays the total amount of unallocated storage and the amount of the largest contiguous unallocated storage area within the MVS extended user region.
Service DFHSO0200I (APAR PH40930) is issued when the CICS sockets listener task starts accepting inbound TCP/IP connections. Service DFHSO0201I (APAR PH40930) is issued when the CICS sockets listener task stops accepting new inbound HTTP connections. Service DFHSO0202I (APAR PH40930) is issued when the CICS sockets listener task stops accepting all inbound TCP/IP connections.
Service DFHTP4175 (APAR PH43431) indicates a message routing failure due to an invalid or unlocatable remote system ID.
DFHTR0125 indicates that the getmain for storage to use for a trace table failed during CICS initialization. The CICS initialization is terminated.	DFHTF0200 now shows the row number and column number to indicate the position of a field on the screen, replacing the `field` insert used in earlier releases.
Service DFHTS1316 (APAR PH28145) indicates that auxiliary temporary storage data set usage has reached 75% or more of the capacity. Service DFHTS1317 (APAR PH28145) indicates that auxiliary temporary storage data set usage has fallen below 70% of the capacity. Service DFHTS1610 (APAR PH40863) indicates that a scan of shared temporary storage queues has completed. The message shows the numbers of shared temporary storage queues scanned and deleted.
Service DFHWB0112 (APAR PH38091) indicates that there was a problem processing the defaultciphers.xml file. DFHWB0770 indicates that an HTTP OPTIONS handler program has abended. DFHWB0771 indicates that a program named as an HTTP OPTIONS handler could not be linked to.
Service DFHXQ0420 (APAR PH28145) indicates that the percentage of entries in use in the pool structure dropped below a specified threshold. Service DFHXQ0421 (APAR PH28145) indicates that the percentage of elements in use in the pool structure dropped below a specified threshold. Service DFHXQ0422 (APAR PH28145) indicates that the percentage of entries in use in the pool structure reached a specified threshold. Service DFHXQ0423 (APAR PH28145) indicates that the percentage of elements in use in the pool structure reached a specified threshold.
DFHYM1000 indicates that a resource type in the resource overrides file is too long or missing a delimiter. DFHYM1001 indicates that an override rule in the resource overrides file is missing the selector or overrides value. DFHYM1002 indicates that an attribute name in the resource overrides file is too long or missing a delimiter. DFHYM1003 indicates that an override action in the resource overrides file must start on a new line. DFHYM1004 indicates that a find override action in the resource overrides file is missing an associated replace action. DFHYM1005 indicates that an overrides mapping in the resource overrides file does not specify any attributes. DFHYM1006 indicates an invalid selector condition or override action for an attribute in the resource overrides file. DFHYM1007 indicates that a line delimiter is missing from the resource overrides file. DFHYM1008 indicates incorrect indentation in the resource overrides file. DFHYM1009 indicates that an attribute value must be enclosed in quotes in the resource overrides file. DFHYM1010 indicates a missing space before a comment in the resource overrides file.
DFHYM1011 indicates unexpected data in the resource overrides file. DFHYM1012 indicates an invalid character because of a character encoding error in the resource overrides file. DFHYM1013 indicates an unsupported escape character in the resource overrides file. DFHYM1014 indicates an invalid override action-operator in a selector mapping in the resource overrides file. DFHYM1015 indicates an invalid selector condition-operator in an overrides mapping in the resource overrides file. DFHYM1016 indicates a duplicate attribute in a selector or overrides mapping in the resource overrides file. DFHYM1017 indicates that a resource override find action is missing a value in the resource overrides file. DFHYM1018 indicates an unsupported multiline indicator in the resource overrides file. DFHYM1019 indicates that the schemaVersion mapping is missing from the resource overrides file. DFHYM1020 indicates that the resourceOverrides mapping is missing from the resource overrides file. DFHYM1021 indicates that the schemaVersion mapping specifies an invalid schema name or version in the resource overrides file. DFHYM1022 indicates that a resource overrides schema version in the resource overrides file is not supported. DFHYM1023 indicates that the resource overrides file uses an unsupported code page.
EYUCP0208E indicates that the delete and re-add of a CMAS failed. Service EYUNX0110W (APAR PH35122) indicates that resources to be installed conflicted with existing URIMAP or TCPIPSERVICE resources. EYUXC0028 indicates that the data space usage for a CICSPlex SM component exceeds 70%, 80%, 90% or 95%.	Service EYUNX0013E (APAR PH35122) is changed to also indicate invalid definition options for resources in a single CICS region configured with the CMCI JVM server (SMSS).

Changes to abend codes

System programmers

Table 32. Changes to abend codes in this release
New abend codes	Changed abend codes	Removed abend codes
Service AITQ (APAR PH51503) occurs when a transaction is purged, during the processing of a request, while waiting for a response from a connected subsystem over an IPIC connection.
Service AMQT (APAR PH42282) occurs when temporary storage queue DFHCKBR is required but the TSMODEL definition for it does not exist.
AXG1 AXG2 AXG3 AXG4
Service ARZR (APAR PH30791) occurs when a request stream task encountered a failure while trying to join with an existing target request stream task.