Feedback
IBM United States
Software Announcement 202-285
October 15, 2002

IBM SCLM Suite Enhanced with Extended Security

 ENUS202-285.PDF (46KB)


At a Glance

The IBM z/OS SCLM Suite functions and new enhancements provide customers with competitive advantages.

  • A new product improves the protection of SCLM-managed application development projects via:
    • Improved granularity and protection for SCLM data sets so that authorized modifications can be made only through SCLM services
    • Addition of new rules that allow application-level granularity by specifying exactly which programs can be used to access which data sets
    • An easy-to-use, menu-driven, CUA®-compliant end-user interface to maintain the security rules needed for this support
    • Improved access control based on IBM Resource Access Control Facility (RACF)
  • Upgrades to SCLM to make the recovery of your application data quicker and easier via:
    • Package backout
    • Version Viewer and Version History Browser
  • Upgrades to Cloud 9 for SCLM allow:
    • Integration with VisualAge for Java (VA/Java) Version 4 for external version control

For ordering, contact:

Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at 800-IBM-CALL (Reference: LE001).

Overview

IBM z/OS™ Software Configuration and Library Manager (SCLM) Suite allows customers to leverage the scalability, security, and reliability of the IBM eServer zSeries™ to store, manage, and control the process of developing applications. The SCLM Suite enables centralized storage, management, and control of both e-business objects as well as legacy application components. The SCLM Suite consists of SCLM, a component of ISPF under OS/390® and z/OS, IBM Breeze for SCLM for z/OS, and IBM Cloud 9 for SCLM for z/OS. With this announcement, IBM introduces additional functions to the SCLM Suite with the inclusion of a new product and enhancements to existing SCLM Suite products via support.

Included in this announcement are:

  • IBM Enhanced Access Control for SCLM for z/OS, a new product in the SCLM Suite family. IBM Enhanced Access Control for SCLM provides improved granularity and protection for SCLM data sets so that modifications can be made only by an authorized SCLM user. Authorization is required for any modification to the SCLM-controlled libraries (whether made via native SCLM, or via tools that use standard SCLM services) to access and update these SCLM data sets. Enhanced Access Control allows the addition of new rules that specify exactly which programs can be used to access which data sets, thereby adding the flexibility to define specific users' read or write access to specific documents. These rules can also be used to define a user's access to specific functions within SCLM. Validation profiles, accessing programs, and user or user group privileges can be defined through a menu-driven end-user interface.
  • Upgrades to the SCLM function of ISPF add important capabilities to SCLM via support, which make the recovery of your application data quicker and easier than ever. Included are:
    • Package backout
    • Version Viewer and Version History Browser
  • Upgrades to Cloud 9 for SCLM to allow integration with VisualAge® for Java™ (VA/Java) Version 4 for external version control. Java parts can be added to or removed from SCLM control and checked in and out of SCLM via Cloud 9 from within the VA/Java environment. You can also launch the Cloud 9 browser interface from within VA/Java to build and promote your completed application.

Key Prerequisites

  • Hardware:
    • IBM server, or compatible system, capable of running z/OS or OS/390
  • Software:
    • IBM OS/390 V2R10, or later (5647-A01)
    • IBM z/OS V1, or later (5694-A01)
    • IBM Resource Access Control Facility (RACF®)

Planned Availability Date

October 18, 2002

Description

The IBM z/OS SCLM Suite functions and new enhancements provide customers with competitive advantages:

  • Web-based developer workbench (platform-independent browser interface)
  • Web-enabled voting/logging and automatic e-mail notification for approvals
  • Automatic package logging/collision detection
  • Long name support (PC files, UNIX® files, Java, HTML)
  • Invocation of all key software configuration and change management (SCM) functions from a Web browser
  • Packaging for distributed objects stored on host
  • Support for remote and mobile development teams
  • Invoke all key SCLM functions from a Web browser
  • No client-side software required

IBM z/OS SCLM Suite provides an integrated solution allowing software configuration management for both traditional and e-business applications built around IBM's Software Configuration and Library Manager (SCLM), which is a part of ISPF, a component of the z/OS operating system. In addition to the basic SCLM component, integrated products in the SCLM Suite include:

  • IBM Cloud 9, which provides a Web-based integrated development environment supporting the management of traditional mainframe code (COBOL, Assembler, PL/I, and so forth) along with Java, HTML, GIF files, PC Documents, and other code and objects required for assembling today's integrated e-business applications. (Refer to Software Announcement 201-192 , dated June 26, 2001.)
  • IBM Breeze, which provides Web-based package routing and approval for application developers, ensuring that development review and approval processes are followed, and allowing access from anywhere. (Refer to Software Announcement 200-405 , dated November 14, 2000.)
  • IBM Enhanced Access Control, which is new in this announcement. This product improves access control of your SCLM resources, prevents accidental damage to SCLM-managed data sets, and offers additional levels of access control granularity over SCLM functions.

SCLM Suite provides a powerful centralized z/OS solution for managing all of the artifacts needed for modern integrated applications, regardless of the platform they ultimately will be deployed on.

Enhanced Access Control

IBM Enhanced Access Control for SCLM is a new addition to the SCLM Suite. Security interfaces and user exit points within IBM Enhanced Access Control for SCLM provide improved granularity and protection for SCLM data sets so authorized modifications can be made only by a native SCLM user. Enhanced Access Control allows the addition of new rules that specify exactly which programs can be used to access which data sets, thereby adding flexibility beyond that found in IBM Resource Access Control Facility (RACF) to define specific users' read or write access to specific documents. Programs, execution libraries, users, or user groups can also be defined with the use of wild cards. The Enhanced Access Control product provides an easy-to-use, CUA-compliant, menu-driven end-user interface to maintain the security rules needed for this support.

IBM Enhanced Access Control for SCLM augments RACF controls. After normal RACF security controls are applied, Enhanced Access Control for SCLM can be used to grant access when a specific set of applications like SCLM are used. The applications can even define various subfunctions of SCLM, such that, for example, an SCLM Promote may be allowed access whereas an SCLM Edit may be denied access.

Without IBM Enhanced Access Control for SCLM, SCLM users operating in a RACF environment must be granted UPDATE access to manipulate SCLM-managed data sets. Otherwise, they would receive RACF data set violations when performing various SCLM functions. However, the UPDATE access applies even if the data set is accessed using facilities other than SCLM, thus allowing access to potential users from facilities other than SCLM.

The central concept of IBM Enhanced Access Control for SCLM is that access to SCLM resources is provided when SCLM programs are used. This avoids the potential for accidental damage or unexpected changes to SCLM data sets resulting from updates using non-SCLM programs. The SCLM programs are described using Applications. The data sets to be controlled and their access rules are described using Profiles.

When IBM Enhanced Access Control for SCLM is active, it monitors RACF data set violations. If a violation occurs for a data set managed according to the Enhanced Access Control for SCLM profiles, then the defined access rules are used to assign access privileges. If sufficient access privilege is not defined, then a RACF data set violation occurs.

Like RACF, IBM Enhanced Access Control for SCLM has its own rules database that describes the conditions under which access is granted. These are contained in the Rule File, a VSAM KSDS that is administered via the ISPF Dialog. From these online panels, the IBM Enhanced Access Control for SCLM administrator can:

  • Define the data sets or generic RACF data set Profiles to be controlled
  • Define SCLM and its subfunctions as Applications
  • Define the users granted access privileges to a Profile via an Application
  • View violation records collected by IBM Enhanced Access Control for SCLM

Related Products

Products closely aligned with SCLM Suite are the IBM Merge Tool and the IBM Migration Utility. The IBM Merge Tool is an ISPF-based merge tool that allows project managers the ability to estimate and control parallel development activities, and provides the tools developers need to evaluate changes and merge code intelligently, controlling the process to meet the organization's needs. The IBM Migration Utility provides users with the capability to convert their CA-Easytrieve Plus programs to standard COBOL. Users have the option to then move the COBOL under library control and maintain COBOL, or continue to maintain their applications in the powerful, intuitive Easytrieve language, converting them to COBOL at run time.

Section 508 of the U.S. Rehabilitation Act

IBM Enhanced Access Control for SCLM is capable as of October 18, 2002, when used in accordance with IBM's associated documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act, provided that any assistive technology used with the product properly interoperates with it.

Value Unit Based Pricing

Value Unit based pricing will help to align the prices of these products to the principle of the PSLC pricing curve which provides for a lower price per MSU (millions of service units per hour) for larger capacities.

There is also a price benefit when customers grow their capacity. Additional capacity will based on the number of Value Units (MSUs) the customer has already installed, for example, additional capacity will not be priced starting at the base with a higher price per unit but on the capacity that is already installed.

Note that Value Units of a given product cannot be exchanged, interchanged, or aggregated with Value Units of another product.

International Program License Agreement (IPLA) and Subscription and Support Considerations

IPLA licenses can be transferred from one machine to another within, but not limited to, an enterprise. The customer may aggregate the capacity for all the processors the product is operated on to achieve a more economic price. This will result in a single Proof of Entitlement. It is the customer's responsibility to manage the distribution of Value Units within the limits of the entitlement of the product license.

Subscription and Support must cover the same capacity as the product license entitlement. Subscription and Support will be available in the country in which the agreement is made.

Product Positioning

The IBM z/OS SCLM Suite, including IBM Enhanced Access Control for SCLM for z/OS, provides SCLM customers with an OS/390- or z/OS-based repository for all enterprise application objects, including HTML, Java code, and documents as well as traditional application development objects. Software Change and Configuration Management (SCM) and package approval processing are provided on a platform-independent basis through standard browser networking technologies. The new IBM Enhanced Access Control product enhances the capabilities of the SCLM Suite by providing for additional protection of SCLM-managed application development projects.

IBM's z/OS SCLM Suite is the best choice for an attractively priced and fully functional centralized System/390® SCM solution that can support S/390® development as well as cross-platform Windows®, UNIX, and AS/400® development. It is a particularly desirable solution for customers that have traditionally performed application development on OS/390 or z/OS and now need to extend their development to additional object types (such as HTML and Java code required for the Web), as well as for additional development and target platforms.

Statement of Direction

In addition to providing improved access control, the SCLM Suite continues to tighten integration with related products. During the third quarter of 2002, IBM will add Cloud 9 integration with VisualAge Java Version 4. IBM plans to continue to explore support for additional Integrated Development Environments (IDEs), such as Visual Basic, Visual C++, and PowerBuilder.

Version Control Manager (VCM) Plug-ins have been developed to enable SCLM to WebSphere® Studio Enterprise Developer (WSED). These plug-ins have been integrated to work with the z/OS IDE component of WSED. This support will enable mainframe developers to easily use WSED with SCLM's powerful and secure SCM support. IBM intends to enhance Cloud 9, adding integration with both WebSphere Studio Application Developer (WSAD) and WSED.

All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice.

Trademarks

 
The e-business logo, z/OS, and zSeries are trademarks of International Business Machines Corporation in the United States or other countries or both.
 
OS/390, VisualAge, RACF, CUA, System/390, S/390, AS/400, and WebSphere are registered trademarks of International Business Machines Corporation in the United States or other countries or both.
 
Windows is a registered trademark of Microsoft Corporation.
 
Java is a trademark of Sun Microsystems, Inc.
 
UNIX is a registered trademark of the Open Company in the United States and other countries.
 
Other company, product, and service names may be trademarks or service marks of others.

Offering Information

Product information is available through Offering Information (OITOOL) at:

Publications

The following printed publications are shipped with this program:

  • Program Directory (GI10-8450-00)
  • License Information (GC27-1592-00)

The IBM Publications Center:

The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card or customer number. A large number of publications are available online in various file formats, and they can all be downloaded free of charge.

The IBM Publications Notification System (PNS):

The PNS enables subscribers to set up profiles of interest by order number or product number. PNS subscribers automatically receive e-mail notifications of all new publications defined in their profiles. These may then be ordered or downloaded via the Publications Center.

Displayable Softcopy Publications

IBM Enhanced Access Control for SCLM publications are offered in displayable softcopy form. The following publication is available:

  • IBM Enhanced Access Control for SCLM User's Guide (SC27-1591-00)

The displayable manual is part of the basic machine-readable material.

This displayable manual can be used with the BookManager® READ licensed programs in any of the supported environments. Terms and conditions for use of the machine-readable files are shipped with the files.

Technical Information

Specified Operating Environment

Hardware Requirements

  • IBM server, or compatible system, capable of running z/OS™ or OS/390® and remaining required software

Software Requirements

  • IBM z/OS V1, or later (5694-A01) or
  • IBM OS/390 V2R10, or later (5647-A01) and
  • IBM Resource Access Control Facility (RACF®)

Both of the following products are required at the level shipped with your choice of the above listed operating systems:

  • IBM Interactive System Productivity Facility with the SCLM feature installed
  • IBM RACF

Planning Information

Detailed planning information is included in the IBM Enhanced Access Control for SCLM User's Guide .

Packaging: The IBM Enhanced Access Control for SCLM Access Control V1R1 (5697-H59) package includes:

  • Basic machine-readable material on the customer-selected distribution medium. This contains the softcopy publications.
  • Program Directory (GI10-8450-00).
  • IBM International Program License Agreement (IPLA) (Z125-3301).
  • License Information (GC27-1592-00).
  • IBM IPLA Pointer Sheet.
  • Proof of Entitlement (PoE).

Ordering Information

The products in this announcement have one charge unit — Value Units.

New Licensees

The CFSW configurator stand-alone path for 5697-H59 will be updated to support price proposals on October 15, 2002. For 5697-H59, media is shipped only via Customized Offerings (ServerPac, Systempac®, and CBPDO). CFSW configuration and order entry capability will commence with CBPDO on October 15, 2002.

Value Unit Exhibit VUE007

                                   Value                 Value
                                   Units/                Units/
Usage Level    Minimum   Maximum   MSU      HW           Machine
 
Base               1       3       1        MP3000 H30    6
PSLC/Level A       4      45       0.45     MP3000 H50    8
PSLC/Level B      46     175       0.36     MP3000 H70   12
PSLC/Level C     176     315       0.27     ESL Models    2
PSLC/Level D     316       +       0.2

The products in this announcement have one charge unit — Value Units.

Value Units for IBM 9672 Processors will be based upon the full capacity of these systems. This is applicable to all S/390®-based systems that are measured on MSU capacity. Information on MSU capacities can be found in the IBM System/370™, System/390®, and zSeries™ Machine Exhibit (Z125-3901).

Value Units for zSeries will be based upon full MSU capacity as defined in the Machine Exhibits.

There will be a tool available that provides support for transforming the MSU-based capacities of S/390 systems to new Value Units by calculating the applicable number of Value Units for a given number of MSUs.

Translation from MSUs to Value Units Example

                                                       Value
                           MSUs                        Units/MSU
 
Base                       1-3                         1
Tier A                     4-45                        0.45
Tier B                     46-175                      0.36
Tier C                     176-315                     0.27
Tier D                     316+                        0.2

Note: For the actual translation from MSUs to Value Units for this product, see below.

Ordering Example: The total number of Value Units is calculated according to the following example.

If the customer has installed 1,200 MSUs, the applicable Value Units would be:

Translation from MSUs to Value Units

                                    Value
                                    Units/                Value
             MSUs         *         MSU          =        Units
 
Base             3        *         1            =          3.00
Tier A          42        *         0.45         =         18.90
Tier B         130        *         0.36         =         46.80
Tier C         140        *         0.27         =         37.80
Tier D         885        *         0.2          =        177.00
 
Total        1,200                                        284

When calculating the total number of Value Units, the sum is to be rounded up to the next integer.

                                    Feature
 
1 Value Unit                        0001
250 Value Units                     0002

Example: For a product running on machines with 1,200 MSUs requiring 284 Value Units, order feature number 0001, quantity 34, and feature number 0002, quantity 1.

Note: For actual feature numbers, see below.

Value Units for Non-MSU-Based S/390 Processors

MP3000 Models
 
H30                    = 6.00 Value Units
H50                    = 8.00 Value Units
H70                    = 12.00 Value Units
 
P/390, R/390, IBM 3006 = 2.00 Value Units

Basic License: To order, specify the program number, feature number 9001 for asset registration, and the one-time charge (OTC) feature number. Also specify the feature number of the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW.

                                      OTC       Medium
                           Program    Feature   Feature
Description                Number     Number    Number    Medium
 
IBM Enhanced Access        5697-H59             5802      3480
 Control for SCLM V1.1                                     Tape
 
  1 Value Unit                        0001
  250 Value Units                     0002

Subscription and Support: To receive voice technical support via telephone during normal business hours and future releases and versions at no additional charge, you must order Subscription and Support as part of the initial product order. The capacity of Subscription and Support (Value Units) must be the same as the capacity ordered for the product licenses.

To order, specify the support program number and feature number 9001 for asset registration. IBM is also providing Subscription and Support for these products via a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Support (IAAS). This offering:

  • Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
  • Entitles customers to future releases and versions at no additional charge.

    Note: Customers are not entitled to new products.

Once Subscription and Support is ordered, the charges will renew automatically annually unless cancelled by the customer.

To decline, specify the support program number and the Decline (no charge) feature number listed below.

                                      Annual
                                      Support
                                      Charge   Medium
                            Program   Feature  Feature
Description                 Number    Number   Number   Medium
 
Subscription and Support    5697-H81           6676     Hardcopy
 for IBM Enhanced Access                                 Pub
 Control for SCLM
 
  1 Value Unit                        0001
  250 Value Units                     0002
  Decline (no charge)                 0003

Single-Version Charging: To elect single-version charging, the customer must notify and identify to IBM the prior program and replacement program and the machine the programs are operating on.

Customized Offerings

Product media is shipped only via Customized Offerings (for example, CBPDO, ServerPac, SystemPac). Noncustomized items (CDs, diskettes, source media, media kits) will continue to be shipped via the stand-alone product.

Terms and Conditions

Sub-Capacity Charges Terms and Conditions

IBM zSeries software charges at less than full machine capacity for eligible Data Management (DM) and Application Development (AD) Tools apply when z/OS is running in z/Architecture™ (64 bit) mode on a zSeries 900, no other MVS™-based operating system is licensed to that server, and the required information is provided by the customer in accordance with the applicable terms.

Sub-capacity charges for an eligible AD or DM Tool is based on the z/OS product defined capacity. To obtain charges at less than full machine capacity for eligible AD and DM Tools, the customer is required to:

  • Determine the MSUs needed for each machine on which the tools will run. Only machines on which the customer has implemented sub-capacity Workstation License Charges (WLC) according to the above terms and conditions are eligible for charges at less than full machine capacity for the tools.
  • Use the product defined capacity for z/OS (as specified on the Sub-Capacity Reports submitted to IBM for sub-capacity WLC) as the sub-capacity (MSUs) for each tool.
  • Submit any additional MSUs and/or Value Units required for each product along with the current entitlement in Value Units for each product.

Sub-Capacity Charges for AD and DM Tools

To be eligible for sub-capacity charges for AD and DM Tools, the machine on which the AD and DM Tools are running must be eligible for WLC sub-capacity charges terms and conditions. The customer must have signed the Attachment for zSeries Workload License Charges Pre-ILM (Z125-6516) and submitted at least one Sub-Capacity Report to IBM as defined in the attachment.

With sub-capacity charges, the charge for an eligible AD or DM Tool is based on the z/OS product defined capacity. To obtain charges at less than full machine capacity for each eligible AD and DM Tool for each machine, the customer should:

  • Determine the MSUs needed for the machine on which the tools will run. In a data sharing environment, determine the aggregate MSUs needed on the machine where the tools run. Use the product defined capacity (MSUs) for z/OS (as specified on the Sub-Capacity Reports submitted to IBM for sub-capacity WLC) as the sub-capacity (MSUs) for each Tool.
  • Submit any additional MSUs and/or Value Units required for each product along with the current entitlement in Value Units for each product.
  • If the use of sub-capacity pricing terms for AD and DM Tools results in a reduced requirement for Value Units, thus freeing up entitlements, customers can reallocate the entitlement difference by distributing the Value Units across a larger or different set of systems, or reserve them for future growth. There will be no refunds for these freed up Value Units. Subscription and Support volumes and entitlements for existing contracts will continue to be at the same levels as the acquired licenses.

Management of the Value Unit entitlements continues to be a customer responsibility. If one of the following occur on a machine to which AD or DM Tools are licensed, the customer must determine if additional Value Units and Subscription and Support need to be ordered for those tools to cover the increase:

  • The z/OS defined capacity is increased.
  • The requirements for WLC sub-capacity charges are no longer met.

Licensing: IBM International Program License Agreement. Proofs of Entitlement (PoEs) are required for all authorized use.

The following agreement applies for maintenance and does not require customer signature:

  • IBM Agreement for Acquisition of Support (Z125-6011)

These products are licensed under the IBM Program License Agreement (IPLA), the associated Agreement for Acquisition of Support, and the Addendum for Support (Z125-6312), which provides for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an ongoing recurring charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours) as well as access to updates, releases, and versions of the program as long as support is in effect. S/390 and zSeries IBM Operational Support Services — Support Line is an option for those customers who desire added services.

Limited Warranty Applies: Yes

Program Services: Base support for the products in this announcement is included as part of the one-time charge for the product and is provided by the IBM Support Center. This support is subject to the terms of the IBM IPLA contained in the program package. This base support includes resolution of defects in the IBM program. This support is provided via mail or fax and is available until the end of service date, October 31, 2004.

IBM is also providing Subscription and Support for these products via a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Support (IAAS). This offering:

  • Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
  • Entitles customers to future releases and versions at no additional charge.

    Note: Customers are not entitled to new products.

To take full advantage of Subscription and Support, it must be ordered in the same quantity as the base product license.

Money-Back Guarantee: If for any reason you are dissatisfied with the program, return it within 30 days from the invoice date, to the party (either IBM or its reseller) from whom you acquired it, for a refund. This applies only to your first acquisition of the program.

Copy and Use on Home/Portable Computer: No

Volume Orders (IVO): No

Passport Advantage Applies: No

Software Maintenance Applies: No

For operating system software, the revised IBM Operational Support Services — Support Line offering will provide support for those operating systems and associated products that are not available with the newly announced Software Maintenance offering. This will ensure total support coverage for your enterprise needs, including IBM and selected non-IBM products. For complete lists of products supported under both the current and revised Support Line offering, refer to our Web site at:

For additional information on the revised IBM Operational Support Services, refer to Services Announcement 601-023 , dated July 10, 2001.

IBM Operational Support Services — Support Line: Yes

AIX®/UNIX® Upgrade Protection Applies: No

Entitled Upgrade for Current AIX/UNIX Upgrade Protection Licensees: No

iSeries™ Software Subscription Applies: No

Variable Charges Apply: No

Educational Allowance Available: Yes, a 15% education allowance applies to qualified education institution customers.

Prices

Contact your IBM representative for charges information for this announcement.

Order Now

 Use Priority/Reference Code: LE001
 
 Phone:     800-IBM-CALL
 Fax:       800-2IBM-FAX
 Internet:  ibm_direct@vnet.ibm.com
 Mail:      IBM Atlanta Sales Center
            Dept. LE001
            P.O. Box 2690
            Atlanta, GA  30301-2690

You can also contact your local IBM Business Partner or IBM representative. To identify them, call 800-IBM-4YOU.

Note: Shipments will begin after the planned availability date.

Trademarks

 
z/OS, System/370, zSeries, z/Architecture, MVS, and iSeries are trademarks of International Business Machines Corporation in the United States or other countries or both.
 
BookManager, OS/390, RACF, Systempac, S/390, System/390, and AIX are registered trademarks of International Business Machines Corporation in the United States or other countries or both.
 
UNIX is a registered trademark of the Open Company in the United States and other countries.
 
Other company, product, and service names may be trademarks or service marks of others.