z/os customer forum presentation 030507

z/OS 1.7 Migration Technical Overview

March 5, 2007

DTS IntroductionDTS IntroductionWelcome!Welcome!

• Robert Jenkins - SupervisorRobert Jenkins - SupervisorDTS Engineering Division Platform Branch z/OS 1 DTS Engineering Division Platform Branch z/OS 1

• Presentation Slides will be available on the DTS websitePresentation Slides will be available on the DTS website

• Evaluation Survey Evaluation Survey

Upcoming DTS Technology Days and Customer ForumsUpcoming DTS Technology Days and Customer Forums• Network Customer Forum (March 7, 2007)Network Customer Forum (March 7, 2007)• Cal Net II Customer Forum (March 8, 2007)Cal Net II Customer Forum (March 8, 2007)• Gartner Technology Day on Industry Trends (tentative April)Gartner Technology Day on Industry Trends (tentative April)

• Look for more DTS events coming soon at Look for more DTS events coming soon at http://www.dts.ca.gov/news_events/

CoexistenceCoexistence

• Starting with z/OS 1.6, IBM has aligned the coexistence, Starting with z/OS 1.6, IBM has aligned the coexistence, fallback, and migration policy with the service policy. fallback, and migration policy with the service policy.

• z/OS 1.4, z/OS 1.5, z/OS 1.6, and z/OS 1.7 are z/OS 1.4, z/OS 1.5, z/OS 1.6, and z/OS 1.7 are supported for coexistence, migration, and fallback. supported for coexistence, migration, and fallback.

• The lowest release planned for coexistence, migration, The lowest release planned for coexistence, migration, and fallback support on z/OS 1.8 is z/OS 1.5.and fallback support on z/OS 1.8 is z/OS 1.5.

End of Service

General AvailabilityGeneral Availability Service ExpirationService Expirationz/OS 1.4 z/OS 1.4 September 27, 2002 September 27, 2002 [1] March 31, 2007

z/OS 1.5 z/OS 1.5 March 26, 2004March 26, 2004 March 31, 2007 March 31, 2007

z/OS 1.6 z/OS 1.6 September 24, 2004September 24, 2004 Planned for September 2007 Planned for September 2007

z/OS 1.7 z/OS 1.7 September 30, 2005 September 30, 2005 [2] Planned for September 2008

z/OS 1.8 z/OS 1.8 September 2006September 2006 Planned for September 2009 Planned for September 2009

[1] Current Operating System @ Gold Camp[2] Planned Operating System @ Gold Camp

z/OS 1.7 Improvementsz/OS 1.7 Improvements

Ease of useEase of use Health Checker for z/OS -More checks, Health Checker for z/OS -More checks,

integrated in z/OS, and new user interface integrated in z/OS, and new user interface Hardware Configuration Manager –can simplify Hardware Configuration Manager –can simplify

I/O configuration and planningI/O configuration and planning SMP/E Internet Service Delivery -can simplify SMP/E Internet Service Delivery -can simplify

and automate service acquisition and automate service acquisition z/OS Network Security Configuration Assistant z/OS Network Security Configuration Assistant IBM OMEGAMON®z/OS Management Console IBM OMEGAMON®z/OS Management Console

(separate product (separate product


Networking and SecurityNetworking and Security Encryption Facility for z/OS to help protect data Encryption Facility for z/OS to help protect data

shared with partners, suppliers, and customersshared with partners, suppliers, and customers RACF enhancementsRACF enhancements 64-bit cryptography support in ICSF, AES (128) 64-bit cryptography support in ICSF, AES (128)

support for TLS and SSL appssupport for TLS and SSL apps Application Transparent TLSApplication Transparent TLS IPSecsupport planned for z/OS 1.8IPSecsupport planned for z/OS 1.8*


ScalabilityScalability 32-way z/OS image32-way z/OS image Support for MIDAW and Multiple Channel Support for MIDAW and Multiple Channel

Subsys (with System z9)Subsys (with System z9) Support for larger sequential data sets, more Support for larger sequential data sets, more

then 255 extents per VSAMthen 255 extents per VSAM


AvailabilityAvailability z/OS Load Balancing Advisor z/OS Load Balancing Advisor Improved management with WLM and Sysplex Improved management with WLM and Sysplex

Distributor Distributor IP Automatic Takeover when IP stack is not IP Automatic Takeover when IP stack is not

healthy healthy z/OS UNIX System Services dynamic service z/OS UNIX System Services dynamic service

activation may reduce the need to IPLactivation may reduce the need to IPL Improved GDPS options for high volume apps Improved GDPS options for high volume apps

with XRC+ with XRC+


Application and Data Serving SupportApplication and Data Serving Support Improvements to Language Environment®, Improvements to Language Environment®,

zSeries File System (zFS), C/C++, z/OS UNIX zSeries File System (zFS), C/C++, z/OS UNIX System ServicesSystem Services

Support for zAAP and ZIIPSupport for zAAP and ZIIP

"Big Migs" from z/OS 1.4 to z/OS 1.7"Big Migs" from z/OS 1.4 to z/OS 1.7

Migration Actions You SHOULD NOT Overlook:Migration Actions You SHOULD NOT Overlook:

• z/OS 1.6 Architecture Level Set - must be z/Architecture™ modez/OS 1.6 Architecture Level Set - must be z/Architecture™ mode– – Use the z/Architecture checklist provided.Use the z/Architecture checklist provided.

• z/OS 1.7 BCP most of the 1-byte Console ID support removedz/OS 1.7 BCP most of the 1-byte Console ID support removed– – Use the Console ID Tracking Facility, introduced in z/OS V1R4 Use the Console ID Tracking Facility, introduced in z/OS V1R4

Consoles Enhancement feature with the latest exclusion list now.Consoles Enhancement feature with the latest exclusion list now.• z/OS 1.7 XL C/C++ does not ship the OS/390 2.10 Compilersz/OS 1.7 XL C/C++ does not ship the OS/390 2.10 Compilers

– – Move to the ISO C/C++ compilers now, may still use OS/390 2.10 Move to the ISO C/C++ compilers now, may still use OS/390 2.10 compilers from prior system.compilers from prior system.• z/OS 1.7 HCD IODF V5Coexistence considerations with lowerz/OS 1.7 HCD IODF V5Coexistence considerations with lower systems.systems.• z/OS 1.7 DFSMS JOBCAT/STEPCAT support removed.z/OS 1.7 DFSMS JOBCAT/STEPCAT support removed.

z/OS 1.5 Enhancements z/OS 1.5 Enhancements

Multi-Level SecurityMulti-Level Security• Combined with IBM’s DB2 UDB for z/OS Version 8, z/OS provides Combined with IBM’s DB2 UDB for z/OS Version 8, z/OS provides

multilevel security on the zSeries mainframe to help meet the stringent multilevel security on the zSeries mainframe to help meet the stringent security requirements of government agencies and financial security requirements of government agencies and financial institutions, and can help open up new options for e-hosting facilities. institutions, and can help open up new options for e-hosting facilities.

• Multilevel security technology allows IT administrators to give users Multilevel security technology allows IT administrators to give users access to information based on their need to know, or clearance level. access to information based on their need to know, or clearance level. It is designed to prevent individuals from accessing unauthorized It is designed to prevent individuals from accessing unauthorized information and to prevent individuals from declassifying information. information and to prevent individuals from declassifying information.

• With multilevel security support in IBM’s z/OS 1.5 and DB2 V8, With multilevel security support in IBM’s z/OS 1.5 and DB2 V8, customers can enable a single repository of data to be managed at customers can enable a single repository of data to be managed at the row level and accessed by individuals based on their need to the row level and accessed by individuals based on their need to know. For example, a person with a top secret clearance can be know. For example, a person with a top secret clearance can be enabled to access more information in a database than someone enabled to access more information in a database than someone without that clearance levelwithout that clearance level.

z/OS 1.5 Enhancementsz/OS 1.5 Enhancements

Self OptimizingSelf Optimizing• z/OS 1.5 simplifies WLM control for WebSphere. z/OS 1.5 simplifies WLM control for WebSphere.

Customers now have the choice to manually Customers now have the choice to manually define WebSphere application environments for define WebSphere application environments for WLM or have WebSphere define them as and WLM or have WebSphere define them as and when required.when required.

z/OS 1.5 Enhancements z/OS 1.5 Enhancements PerformancePerformance• DFSMS can significantly enhance application backup by DFSMS can significantly enhance application backup by

enabling DFSMShsm to utilize volume level fast replication. enabling DFSMShsm to utilize volume level fast replication. The fast backup is designed to exploit the FlashCopy® and The fast backup is designed to exploit the FlashCopy® and virtual concurrent copy capability of IBM TotalStorage® virtual concurrent copy capability of IBM TotalStorage® Enterprise Storage Server® and IBM RAMAC® Virtual Array Enterprise Storage Server® and IBM RAMAC® Virtual Array (RVA) respectively. (RVA) respectively.

• DFSMShsm Fast Replication in z/OS 1.5 also provides a fast, DFSMShsm Fast Replication in z/OS 1.5 also provides a fast, easy to use backup and recovery solution specifically easy to use backup and recovery solution specifically designed for DB2 Universal Database™ (UDB) for z/OS V8. It designed for DB2 Universal Database™ (UDB) for z/OS V8. It is designed to allow fast, non-disruptive backups to be taken is designed to allow fast, non-disruptive backups to be taken at appropriate events when there is minimum activity at the at appropriate events when there is minimum activity at the application level or when a fast point-in-time backup is application level or when a fast point-in-time backup is desired.desired.


SecuritySecurity• Intrusion Detection Services were introduced in Intrusion Detection Services were introduced in

z/OS 1.2. The scope of these services are z/OS 1.2. The scope of these services are extended in z/OS 1.5.extended in z/OS 1.5.


Simplified ManagementSimplified Management• Infoprint Central is a graphical user interface for

managing print jobs and printers across systems. The Library Center for z/OS is a new internet facility to access the z/OS library, with enhanced search facilities.

• Managed System for Setup (msys for Setup) is Managed System for Setup (msys for Setup) is an element of z/OS that makes it easier to define an element of z/OS that makes it easier to define and configure technologies on z/OS. With z/OS and configure technologies on z/OS. With z/OS 1.5 four new technologies are supported by 1.5 four new technologies are supported by msys for Setup: RMF, FTP, ISPF and DB2 UDB msys for Setup: RMF, FTP, ISPF and DB2 UDB for z/OS V8.for z/OS V8.


Application IntegrationApplication Integration• Increased scale and performance Increased scale and performance • 64-bit C/C++ application development and deployment 64-bit C/C++ application development and deployment • 64-bit JAVA (available as separate product) 64-bit JAVA (available as separate product) • Improved performance Improved performance • New C/C++ compiler options to exploit z890 and z990 New C/C++ compiler options to exploit z890 and z990

servers servers • Unicode performance improvements in z/OS UNIX Unicode performance improvements in z/OS UNIX • Improvements to z/OS UNIX Improvements to z/OS UNIX • New commands supported (clear, uptime) New commands supported (clear, uptime) • Enhanced Euro symbol support Enhanced Euro symbol support • Pre-built UNICODE environmentPre-built UNICODE environment


Improved TCP/IP Network ManagementImproved TCP/IP Network Management• Sysplex support for IPv6 industry standard Sysplex support for IPv6 industry standard • High availability - TCP/IP Sysplex enhancements High availability - TCP/IP Sysplex enhancements • Automatic Takeover when TCPIP stack is not Automatic Takeover when TCPIP stack is not

healthy healthy • Monitor key heath indicators Monitor key heath indicators • Option to manage TN3270 in separate address Option to manage TN3270 in separate address

space from TCP/IP space from TCP/IP • Enterprise Extender enhancements for SNA over Enterprise Extender enhancements for SNA over

TCP/IP TCP/IP


Simplified Management of z/OS Security FeaturesSimplified Management of z/OS Security Features• RACF RACF • Support for recoverable passwords Support for recoverable passwords • Improved interoperability with LDAP change log Improved interoperability with LDAP change log • Ability to update most RACF classes without IPL Ability to update most RACF classes without IPL • LDAP 64bit and IPv6 support LDAP 64bit and IPv6 support • SSL enhanced certificate managementSSL enhanced certificate management


Increased Optimization of ResourcesIncreased Optimization of Resources• WLM enhanced for DB2 stored procedures (can WLM enhanced for DB2 stored procedures (can

prioritize dependent requests) prioritize dependent requests) • DFSMS improved placement of critical datasets DFSMS improved placement of critical datasets

on ESS/PAV on ESS/PAV • Allows the sharing of a single tape inventory Allows the sharing of a single tape inventory

across multiple sysplexes (DFSMSrmm) across multiple sysplexes (DFSMSrmm)


Increased Scale of z/OS WorkloadsIncreased Scale of z/OS Workloads• 32-way single image in z990 logical partition32-way single image in z990 logical partition• 24-way single image supported at general 24-way single image supported at general

availability availability


Improved AvailabilityImproved Availability• Resource Recovery Services (RRS) restart Resource Recovery Services (RRS) restart

enhancements in sysplex enhancements in sysplex • Exploiting resource managers (eg: DB2) can be Exploiting resource managers (eg: DB2) can be

restarted on another z/OS 1.6 system without restarted on another z/OS 1.6 system without necessarily impacting other applications necessarily impacting other applications

• Reduce the need to IPL Reduce the need to IPL • PDSE restartable address space PDSE restartable address space • Can reduce the need to re-IPL a system due to a hang, Can reduce the need to re-IPL a system due to a hang,

deadlock condition, or out of storage condition deadlock condition, or out of storage condition • Rename LPAR without IPL (requires z890 and z990 Rename LPAR without IPL (requires z890 and z990

server) server) • Add and update most RACF classes without an IPLAdd and update most RACF classes without an IPL


Simplifying z/OS ManagementSimplifying z/OS Management • To help simplify systems management, the IBM Health Checker for To help simplify systems management, the IBM Health Checker for

z/OS is now a base component of z/OS, providing an integrated tool z/OS is now a base component of z/OS, providing an integrated tool for checking on best practices for configuration values. Significantly for checking on best practices for configuration values. Significantly more checking is provided and the tool has a simplified user more checking is provided and the tool has a simplified user interface.interface.

• IBM intends to provide a new user interface for z/OS management IBM intends to provide a new user interface for z/OS management that is planned to help the new generation of Information Technology that is planned to help the new generation of Information Technology workers by automating, eliminating, and simplifying many z/OS workers by automating, eliminating, and simplifying many z/OS management tasks. management tasks.

• The first phase of the new user interface is planned to provide real-The first phase of the new user interface is planned to provide real-time health check information executed by the IBM Health Checker time health check information executed by the IBM Health Checker for z/OS and configuration status information for z/OS systems and for z/OS and configuration status information for z/OS systems and sysplex resources. The new interface contains built-in automation sysplex resources. The new interface contains built-in automation and expert advice capabilities that provide detailed contextual and expert advice capabilities that provide detailed contextual information on alerts and corrective actions. information on alerts and corrective actions.


Simplifying Network Security Simplifying Network Security (continued)(continued)• As security concerns continue to increase, more enterprises are As security concerns continue to increase, more enterprises are

deploying network security protocols, such as IP Security (IPSec) deploying network security protocols, such as IP Security (IPSec) and Transport Layer Security (TLS) on z/OS to protect their mission-and Transport Layer Security (TLS) on z/OS to protect their mission-critical data as it crosses the network. critical data as it crosses the network.

• However, the programming changes needed to enable applications However, the programming changes needed to enable applications for security, and the complexity of security configuration can for security, and the complexity of security configuration can increase the cost and deployment time for network security. In z/OS increase the cost and deployment time for network security. In z/OS V1R7, we add the following new functions to z/OS Communications V1R7, we add the following new functions to z/OS Communications Server to address these issues by simplifying the requirements for Server to address these issues by simplifying the requirements for implementing network security on z/OS:implementing network security on z/OS:

– Application Transparent Transport Layer Security (AT-TLS). This Application Transparent Transport Layer Security (AT-TLS). This function provides TLS for TCP applications without requiring function provides TLS for TCP applications without requiring application modification for TLS enablement. application modification for TLS enablement.

– Communications Server IPSec (CS IPSec). This function Communications Server IPSec (CS IPSec). This function provides an alternative to z/OS Firewall Technologies for host-provides an alternative to z/OS Firewall Technologies for host-based IPSec and IP filtering.based IPSec and IP filtering.


Simplifying Network SecuritySimplifying Network Security (continued)(continued)

Both AT-TLS and CS IPSec feature a policy-basedBoth AT-TLS and CS IPSec feature a policy-basedconfiguration that:configuration that:

• Requires less definition Requires less definition • Uses existing z/OS Communications Server Uses existing z/OS Communications Server

infrastructure, such as the policy agentinfrastructure, such as the policy agent• Is optimized for host-based security scenariosIs optimized for host-based security scenarios• To help you implement these new functions, z/OS V1R7 To help you implement these new functions, z/OS V1R7

includes a new configuration tool, the Network Security includes a new configuration tool, the Network Security Configuration Assistant (NSCA). This tool combines the Configuration Assistant (NSCA). This tool combines the configuration activities for AT-TLS and IPSec into a configuration activities for AT-TLS and IPSec into a single administrative task single administrative task


Other EnhancementsOther EnhancementsTo help customers build and extend their z/OS applications, z/OS V1.7 To help customers build and extend their z/OS applications, z/OS V1.7

delivers C/C++ enhancements and enhanced support for TLS delivers C/C++ enhancements and enhanced support for TLS (Transport Layer Security) designed to be transparent to (Transport Layer Security) designed to be transparent to applications. applications.

• The dynamic capabilities of z/OS are also extended with the TCP/IP The dynamic capabilities of z/OS are also extended with the TCP/IP Sysplex Load Balancing Advisor for better interaction with network-Sysplex Load Balancing Advisor for better interaction with network-based load balancers and integration between Sysplex Distributor based load balancers and integration between Sysplex Distributor and Workload Manager. and Workload Manager.

• z/OS V1.7 provides advances in business resiliency and security z/OS V1.7 provides advances in business resiliency and security with extensions to GDPS for system recovery and improvements in with extensions to GDPS for system recovery and improvements in RACF interoperability, including support for mixed-case passwords. RACF interoperability, including support for mixed-case passwords.

• Customers also may see a reduction in their need for IPLs with Customers also may see a reduction in their need for IPLs with dynamic service activation for z/OS UNIX® System Services. dynamic service activation for z/OS UNIX® System Services.

• In addition, z/OS V1.7 can simplify network management with JES2 In addition, z/OS V1.7 can simplify network management with JES2 NJE support for TCP/IP (planned to be available in 1Q2006).NJE support for TCP/IP (planned to be available in 1Q2006).

z/OS Support for the z/OS Support for the IBM System z9-109IBM System z9-109

• The new System z9-109, designed to provide The new System z9-109, designed to provide systems leadership in an integrated systems leadership in an integrated heterogeneous infrastructure, is supported by heterogeneous infrastructure, is supported by z/OS V1.4 and above. z/OS V1.4 and above.

• The powerful combination of z/OS V1.7 and z9-The powerful combination of z/OS V1.7 and z9-109 can provide significantly increased I/O 109 can provide significantly increased I/O addressability and bandwidth, designed to help addressability and bandwidth, designed to help improve availability, performance, cryptography, improve availability, performance, cryptography, and problem diagnosis while providing more and problem diagnosis while providing more options for network connectivity. options for network connectivity.


(continued)(continued)

These new functions include:These new functions include:• Multiple subchannel sets support: Provides a second set Multiple subchannel sets support: Provides a second set

of subchannels for defining Parallel Access Volume of subchannels for defining Parallel Access Volume (PAV) aliases. This new function can help provide relief (PAV) aliases. This new function can help provide relief from the 64K device limit by allowing PAV aliases to be from the 64K device limit by allowing PAV aliases to be defined without making device numbers unavailable for defined without making device numbers unavailable for defining additional devices.defining additional devices.

• Support for additional subchannels on the z9-109: The Support for additional subchannels on the z9-109: The z9-109 makes an additional 768 subchannels available, z9-109 makes an additional 768 subchannels available, making it possible to define up to 65,280 devices for making it possible to define up to 65,280 devices for each z/OS LPAR.each z/OS LPAR.



• Wild branch diagnosis improvement.Wild branch diagnosis improvement.• MIDAW (modified indirect addressing words) support: MIDAW (modified indirect addressing words) support:

The z9-109 implements a new function for channel The z9-109 implements a new function for channel programming, modified indirect addressing words programming, modified indirect addressing words (MIDAWs). MIDAWs can be used to move data over (MIDAWs). MIDAWs can be used to move data over FICON and ESCON (R) channels. For FICON channels, FICON and ESCON (R) channels. For FICON channels, this support can provide substantially better response this support can provide substantially better response time while increasing overall channel bandwidth. time while increasing overall channel bandwidth. MIDAWs exploitation by z/OS is expected to improve MIDAWs exploitation by z/OS is expected to improve performance for some DB2 table scan, DB2 sequential performance for some DB2 table scan, DB2 sequential prefetch, BSAM, and extended-format data set prefetch, BSAM, and extended-format data set operations by reducing system overhead for I/O operations by reducing system overhead for I/O requests, with no application changes.requests, with no application changes.



• z/OS V1.7 requires the z/Architecture, and runs z/OS V1.7 requires the z/Architecture, and runs only on the IBM System z9-109 and zSeries only on the IBM System z9-109 and zSeries (z890, z990, z800, z900) servers. (z890, z990, z800, z900) servers.

• z/OS V1.7 is an important release for all z/OS z/OS V1.7 is an important release for all z/OS V1.4 customers, because it is the last z/OS V1.4 customers, because it is the last z/OS release that they can migrate to in a single step. release that they can migrate to in a single step. End of service for z/OS V1.4 is March 31, 2007, End of service for z/OS V1.4 is March 31, 2007, and customer plans to migrate to z/OS V1.7 and customer plans to migrate to z/OS V1.7 should be in place to ensure migration is should be in place to ensure migration is complete by this date.complete by this date.

Questions?Questions?

Thank You! Thank You!

Your participation today is greatly Your participation today is greatly appreciated.appreciated.

z/os customer forum presentation 030507

Documents

ibms zos

zos v8

zos version

way zos image support

support improvements

multilevel security

fallback support

application level