PI54286: NEW FUNCTION - Z/OSMF FUNCTION ENHANCEMENTS. 16/02/24 PTF PECHANGE

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Z/OSMF function enhancements.
  
  ******************
  * PE INFORMATION *
  ******************
  
  Users Affected:
  APAR PI41259 / PTF UI28554 is in error. FMID HSMA210 is
  affected.
  
  User Impact:
  APAR PI41259 fixed the problem it reported, but introduced a new
  problem.
  
  When starting the z/OSMF server with PTF UI28554 applied, z/OSMF
  may return the follwing error message in its job log:
  
  CWPKI0028E: SSL handshake protocol ${izu.ssl.Protocol} is not
  valid.  This protocol is specified in the SSL configuration
  alias ${izu.ssl.config} loaded from SSL configuration file null.
  
  The server will be unable to accept incoming connections and not
  be usuable through browsers.
  
  Verification Steps:
  1) The z/OSMF job log shows the above mentioned CWPKI0028E
  message.
  
  2) PTF UI28554 is applied
  
  3) The /etc/zosmf/servers/zosmfServer/bootstrap.properties file
  is missing fields
  
  izu.ssl.config="izuSSLConfig"
  izu.ciphers.list=""
  izu.ssl.Protocol="SSL_TLS"
  
  ******************
  * RECOMMENDATION *
  ******************
  
  DO NOT apply UI28554
  
  
  If you have applied UI28554, please apply APAR PI54286 / PTF
  UI90034 at your earliest convenience
  
  Otherwise, you can perform the following workaround:
  
  1. Delete the symlink bootstrap.properties in
     /etc/zosmf/servers/zosmfServer/bootstrap.properties
     Also delete the file
     /etc/zosmf/servers/zosmfServer/bootstrap.template
     (you should back this file up somewhere else)
  
  2. Copy the default bootstrap.properties from
  
  /usr/lpp/zosmf/V2R1/defaults/servers/zosmfServer/bootstrap.prope
  rties
  
     to the location
     /etc/zosmf/servers/zosmfServer/bootstrap.template
     (note we've renamed the copied properties file to template)
  
  3. You may need to alter the ownership and permissions of the
     new bootstrap.template file to match the following:
  
     PERMS          OWNER    OWNER GROUP      FILE
     ----------     ------   -----------      ----
     -rwxrwxr-x     IZUSVR   IZUADMIN         bootstrap.template
  
  4. Modify the new bootstrap.template you've created to include
     the updated hostname, port numbers and any other
     custimizations you have from your old file.
  
  5. Restart the z/OSMF server STC (IZUSVR1 by default)
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM z/OS Management Facility    *
  *                 Version 2 Release 1, HSMA210.                *
  ****************************************************************
  * PROBLEM DESCRIPTION: This APAR provides function that was    *
  *                      originally provided with z/OSMF V2R2.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This APAR provides function that was originally provided with
  z/OSMF V2R2.
  
  The process for configuring z/OSMF is changed to provide a
  smoother configuration experience, as follows:
  
  1. z/OSMF includes a simplified set of options for creating a
  base configuration, with default values that are suitable for
  most installations. You might find the defaults to be sufficient
  for your environment; if so, use them for a quick-start
  experience with z/OSMF.
  
  2. If z/OSMF requires customization, you can modify the product
  settings by using the IZUPRMxx parmlib member, which is new. A
  sample member, IZUPRM00, is provided with z/OSMF, with settings
  that match the defaults. Using IZUPRM00 as a model, you can
  create a customized IZUPRMxx parmlib member for your
  environment. Previously, you ran an interactive UNIX shell
  script, called izusetup.sh, to create a base configuration on
  your z/OS system.
  
  3. Security authorizations for z/OSMF can be created by using
  sample jobs that are provided with z/OSMF. Previously, the
  configuration scripts created one or more REXX execs with sample
  RACF commands for creating authorizations.
  
  4. After you create the base configuration, you can add
  significant function to z/OSMF through the addition of optional
  plug-ins. Now, you can add plug-ins to z/OSMF by using the
  Configuration Workflow. Previously, you were required to
  customize the host system manually for each plug-in and run the
  izusetup.sh -add script to add the plug-ins.
  
  This APAR also includes the following functional enhancements,
  which were originally provided with z/OSMF V2R2:
  
  1. z/OSMF provides a modern, intuitive interface that is
  consistent with other IBM products.
  
  2. The z/OSMF configuration workflow is further enhanced.
  
  3. Topology Services adds support for central processor
  complexes (CPCs) so that you can retrieve a list of the systems
  included in a CPC.
  
  4. Systems task provides a graphical view -- the system topology
  -- of the systems, sysplexes, CPCs, and groups that have been
  defined to z/OSMF.
  
  5. Support is added to allow the user to change a password or
  passphrase on logging in to z/OSMF.
  

Problem conclusion

Temporary fix

Comments

• -------------  ENHANCEMENTS  ----------------------------------
  This APAR provides function that was originally provided with
  z/OSMF V2R2.
  
  1. The process for configuring z/OSMF is changed to provide a
  smoother configuration experience. In short, configuring an
  instance of z/OSMF is done by running the IBM-supplied jobs
  IZUSEC and IZUMKFS, and then starting the z/OSMF server. The old
  script invocations, such as -config and -finish, are now
  deprecated.
  
  The z/OSMF configuration process occurs in three stages, and in
  the following order: Security setup, Configuration, and Server
  initialization.
  
  a. To set up security for the z/OSMF core functions, you can use
  the supplied sample job IZUSEC, which is shipped in SIZUJCL data
  set. Default SIZUJCL data set is 'IZU.SIZUJCL'.
  
  b. To create the user file system, you can use the sample job
  IZUMKFS, which is shipped in SIZUJCL data set. If z/OSMF
  requires customization, you can modify the product settings by
  creating an IZUPRMxx parmlib member.
  
  c. To start the z/OSMF server, you use the START command.  On
  the START command, you can specify options that control the
  operation of the z/OSMF server on your system. To have the
  server started automatically at IPL, add the START
  command to your active COMMNDxx parmlib member.
  
  2. z/OSMF provides a modern, intuitive interface that is
  consistent with other IBM products.
  
  Most of the UI widgets have the same behavior as before, except
  for the table widget:
  
  a. There are a lot changes in the format of table filter
  settings. Some fields of the filter settings are no longer
  supported. Therefore, there will be an expected one-time loss of
  user customized filters. After applying this APAR, z/OSMF does
  not retain the table filter settings which were set in previous
  release. Default table filter settings will be used. You can
  reset the filter to restore your filter settings.
  
  b. The more/less feature in the tables are not supported.
  
  c. The behavior of the sort in tree table in non-tree view is
  changed. Before, the sort is applied to every row in the table
  and the tree structure may be destroyed after the sort. After
  applying this APAR, the sort is applied to the rows on the same
  level in the tree structure, and the tree structure can not be
  destroyed.
  
  3. The z/OSMF configuration workflow is further enhanced, as
  follows:
  
  a. Workflows for "-config" and "-finished" are removed. New
  instructions for adding plug-ins are provided.
  
  b. New workflow is added for the Software Management plug-in.
  
  c. Discovery workflow for Dump Analysis and Elimination (DAE)
  for the Incident Log plug-in is improved.
  
  d. Workflow for the Common Information Model (CIM) server is
  improved.
  
  e. Parmlib updating is improved.
  
  4. Topology services adds support for central processor
  complexes (CPCs) to allow you to retrieve a list of the systems
  included in a CPC.
  
  5. Systems task provides a graphical view -- the system topology
  -- of the systems, sysplexes, CPCs, and groups that have been
  defined to z/OSMF.
  
  6. Support is added to allow the user to change a password or
  passphrase on logging in to z/OSMF.
  
  -------------  DOCUMENTS UPDATES ------------------------------
  Updated z/OSMF documentation will be available with the March
  refresh of the z/OS V2R1 library.
  
  http://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.
  ibm.zos.v2r1.izu/izu.htm
  
  Interim documentation is available as follows.
  
  ---------------------------------------------------------------
  - IBM z/OS Management Facility Configuration Guide,           -
  - SA38-0657-05, Version 2 Release 1.                          -
  ---------------------------------------------------------------
  http://publibz.boulder.ibm.com/zoslib/pdf/PI54286.izu23150.pdf
  
  ---------------------------------------------------------------
  - IBM z/OS Management Facility Programming Guide,             -
  - SA32-1066-05, Version 2 Release 1.                          -
  ---------------------------------------------------------------
  http://publibz.boulder.ibm.com/zoslib/pdf/PI54286.izu27150.pdf
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PI54291 PI54292 PI54294 PI54324 PI54333 PI54346 PI54351 PI54357
  PI54358 PI54359 PI54360 UI90034

Modules/Macros

• IZUANG1  IZUAUTH  IZUCASEC IZUCLNUP IZUCPSEC
  IZUDELET IZUDELFN IZUDLDDF IZUDMSEC IZUGNAAA IZUGNAAQ IZUGNAAS
  IZUGNAAV IZUGNAAW IZUGNAAX IZUGNABR IZUGNABS IZUGNABT IZUGNABU
  IZUGNABV IZUGNABX IZUGNABY IZUGNACU IZUGNAEY IZUGNAEZ IZUGNAFA
  IZUGNAFB IZUGNAFC IZUGNAFD IZUGNAFE IZUGNAFF IZUGNAFG IZUGNAFH
  IZUGNAFI IZUGNAFJ IZUGNAFK IZUGNAFL IZUGNAFM IZUGNAFN IZUGNAFO
  IZUGNAFP IZUGNAFQ IZUGNAFR IZUGNAFT IZUGNAFU IZUGNAFV IZUGNAFW
  IZUGNAFX IZUGNAFY IZUGNAFZ IZUGNAGA IZUGNAGB IZUGNAGC IZUGNAGD
  IZUGNAGE IZUGNAGF IZUGNAGG IZUGNAGH IZUGNAGI IZUGNBAA IZUGNBAB
  IZUGNBAC IZUGNBAD IZUGNBAG IZUGNBAL IZUGNBAM IZUGNBFA IZUGNBFB
  IZUGNBFC IZUGNBFD IZUGNBFE IZUILSEC IZUIPPVT IZUISALC IZUISDDD
  IZUISHFS IZUISMKD IZUISSEC IZUISZFS IZUMKDIR IZUMKFS  IZUMNTFS
  IZUPARMS IZUPRM00 IZURMSEC IZUSEC   IZUSVR1  IZUWMSEC
  

Fix information

• Fixed component name

  Z/OSMF CORE

• Fixed component ID

  5655S28SM

Applicable component levels

• R210 PSY UI90034

     UP16/01/28 P F601

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.