Feedback

IBM Tivoli Identity Manager for z/OS V5.0 marries leading identity management to a time-tested, secure, scalable, and reliable platform — z/OS

IBM United States Software Announcement 208-202
July 8, 2008

 

 ENUS208202.PDF (63KB)

 

Table of contents  Document options  
TOC link At a glance TOC link Offering Information
TOC link Overview TOC link Publications
TOC link Key prerequisites TOC link Technical information
TOC link Planned availability date TOC link Ordering information
TOC link Description TOC link Terms and conditions
TOC link Product positioning TOC link IBM Electronic Services
TOC link Reference information TOC link Prices
TOC link Education support TOC link Order now
 
Printable version Printable version

 
At a glance

IBM Tivoli Identity Manager for z/OS V5.0 helps you:

  • Increase user and IT efficiency
    • Can cut elapsed turn-on time for new accounts and improve productivity by allowing end users to rapidly reset and synchronize their own passwords.
  • Can reduce IT administration costs
    • Can decrease help desk calls by providing Web self-care interfaces to perform password and personal information changes.
    • Simulate policy changes with powerful "what if" scenarios.
  • Address policy compliance needs
    • Can produce centralized reports on security policy, access rights, and audit events to quickly respond to internal audits and regulatory mandates.
    • Can obtain intelligence and recommended actions on policy compliance issues, which can eliminate the need to manually review policies.

For ordering, contact:

Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at 800-IBM-CALL (Reference: LE001).
 
Back topBack to top
 

Overview

IBM Tivoli® Identity Manager for z/OS® V5.0 leverages System z™ to provide centralized management and automation of user identities, credentials, accounts, access permissions, and audit information. Tivoli Identity Manager for z/OS is a core piece of Tivoli's end-to-end security solution and underscores System z as the platform of choice for enterprise security management.

IBM Tivoli Identity Manager for z/OS V5.0 enhancements help to bridge the gap between how business users want to view their IT resources such as sales reports and how they are actually deployed across the IT infrastructure as shared resources on servers, with the details only known by the IT staff. This helps maximizes the productivity of the business users and decreases the cost of the ongoing administration by the IT staff.
 
Back topBack to top
 

Key prerequisites

For details, refer to the Hardware requirements and Software requirements sections.


 
Back topBack to top
 

Planned availability date

August 1, 2008
 
Back topBack to top
 

Description

Tivoli Identity Manager for z/OS V5.0

Key new features in IBM Tivoli Identity Manager for z/OS V5.0:

  • Request-based provisioning for end users, managers, or delegated administrators to easily request (with approval workflow) user access to roles, accounts, or fine-grained Access Entitlements such as shared folders and Web portlets
  • Streamlined self-service interface for end users that can be easily customized to your organization's look and feel, and integrated with corporate portals, to help improve user productivity and reduce administrative cost
  • Enhanced access rights recertification provides more granular, auditor-friendly details for compliance and policies that can be easily configured using wizards and templates
  • Has new "read only" mode for auditors, additional compliance-related reports, custom report builder, and integration with Tivoli Compliance Insight Manager for audit reports
  • Redesigned management console with out-of-the-box wizards, templates, and best practices to accelerate deployments and reduce the learning curve of new users
  • Highly customizable user interface helps improve productivity and includes out-of-the box configurations for auditors, end users, managers, help desk, application owners, and administrators

Overall features and benefits

Dynamic policy management engine:

  • Helps increase efficiency and speed of policy-based provisioning by defining policy-based privileges and quickly assigning users to their roles
  • Helps free IT staff from access rights administration tasks through automation
  • Allows an organization to enforce a consistent set of business rules for the creation of user access privileges, account IDs, and passwords on provisioned resources
  • Applies role-based access control through association of user roles with policies, enabling them to be effectively applied to groups of users
  • Dynamically detects the changes and automatically modifies user access privileges to help ensure that the latest policies are correctly enforced

Access request management:

  • Centralizes and controls internal and external user access rights in a unified repository
  • Monitors enterprise-wide access rights across all platforms and business resources, constantly enforcing policy

Password self-service:

  • Allows new or existing users to synchronize and reset their own passwords
  • Frees help desk to pursue other initiatives

Intelligent approval routing:

  • Creates streamlined, accurate, automated workflow
  • Helps eliminate archaic paper trail methods
  • Helps quickly identify security breaches and unauthorized access

Access rights reconciliation:

  • Can automatically load and reconcile account data from existing sources; for example, Windows® and Oracle
  • Provides "closed loop" reconciliation which can automatically detect and repair access policy violations that occur due to erroneous changes made directly on a managed resource's administrative console

Audit and history tracking:

  • Helps simplify auditing and reporting with automated report generation
  • Maintains records of changes, deletions, additions, and other information related to access rights for auditing purposes

Scalable, fault tolerant architecture:

  • Is based on application server technology that provides a highly scalable and fault-tolerant platform for IBM's enhanced provisioning technology
  • Can be deployed on redundant servers in a software cluster that supports failover and load balancing for scalability
  • Delivers scalability for large communities, extending the reach of Tivoli Identity Manager to the virtual enterprise to include not only employees, but also contractors and business partners

Graphical workflow designer:

  • Allows a graphical drag-and-drop workflow designer to quickly organize and easily develop workflow processes to support the organization's provisioning policies
  • Supports the creation of both parallel and serial approval processes, as well as checkpoints in a workflow process to allow the input of additional provisioning information

Broad support for system adapters:

  • Delivers broad support of system adapters, which facilitates the provisioning of user accounts to computing resources
  • Supports many system adapters so you can add, delete, change, suspend, restore, and reconcile user accounts
  • Promotes SSL-based, Internet-friendly, adapter-server communications to help protect against "man in the middle" attacks on the system

Adapters for Tivoli Identity Manager for z/OS V5.0

To provision and maintain user accounts in systems, Tivoli Identity Manager for z/OS relies on adapters. The adapters use APIs to remotely manage user accounts in systems such as operating systems, relational databases, PKI registration authorities, enterprise resource planning packages, and other security systems.

IBM offers a core set of adapters for Tivoli Identity Manager for z/OS server, at no additional charge, to help improve customer time to value and decrease deployment times. These adapters work with some of the most common IT infrastructure components including:

  • IBM AIX® V5.2, and V5.3 5.3
  • Entrust PKI 7 trol Server (ACS) 3.2
  • HP-UX 11i, 11iv2, 11iv3
  • HP-UX NIS 11i, 11iv2, 11iv3
  • LDAP Directories
  • Red Hat Enterprise Linux™ 4.0, 5.0
  • SUSE Linux Enterprise Server 9, 10
  • IBM Lotus Notes® 6.5, 7.0, 8.0
  • Novell eDirectory (NDS) 8.8
  • Oracle Database 9i, 10g
  • RSA ACE Server 6.1, 6.2
  • Sun Solaris 8, 9, 10
  • Sun Solaris NIS 8, 9, 10
  • Sybase Adaptive Server Enterprise 12.5
  • IBM Tivoli Access Manager V5.1, V6.0
  • IBM DB2 Universal Database® V8.1, V8.2
  • Microsoft® Windows Active Directory 2003
  • Microsoft Windows Local Account 2003, XP, Vista

For download details, refer to the Ordering information section.

IBM Tivoli Identity Manager for z/OS also has two other groups of adapters that you can purchase to provision and maintain user accounts on additional applications and systems.

The first group contains adapters that interface with common enterprise resource planning applications and other commercial off-the-shelf applications as well as adapters that enable the development of customized adapters for home grown applications. These are downloadable adapters. For download details, refer to the Ordering information section.

The second group of adapters provision and maintain user accounts on systems such as IBM RACF® and IBM i5/OS™. These are downloadable adapters. For download details, refer to the Ordering information section.

Due to the constantly changing nature of these systems, adapters are updated frequently and are available through download only. For a current list of available adapters, go to

IBM reserves the right to add or remove adapters from a group, move adapters between groups, and add or remove adapter groups at any time without prior notice.

Accessibility by people with disabilities

A U.S. Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at

Section 508 of the U.S. Rehabilitation Act

IBM Tivoli Identity Manager for z/OS V5.0 is capable as of August 1, 2008, when used in accordance with IBM's associated documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act, provided that any assistive technology used with the product properly interoperates with it. A U.S. Section 508 Voluntary Product Accessibility Template (VPAT) can be requested on the following Web site


 
Back topBack to top
 
Product positioning

Tivoli Identity Manager for z/OS V5.0 is based on IBM Tivoli Identity Manager V5.0 but leverages the performance and strength of the IBM System z middleware to provide a centralized hub for identity management on z/OS. Tivoli Identity Manager for z/OS is an integral part of IBM's identity management solution. It provides policy-based automation to manage user identities and their access to heterogeneous information resources throughout the user lifecycle, while supporting key policy compliance and audit readiness requirements. IBM Tivoli Identity Manager for z/OS integrates with IBM Tivoli Access Manager, IBM Tivoli Federated Identity Manager, IBM Tivoli Directory Integrator, and IBM Tivoli Directory Server, which are the other key parts of the IBM identity management solution:

  • Identity lifecycle management (user self-care, enrollment, and provisioning) — IBM Tivoli Identity Manager
  • Identity control (access and privacy control, single sign-on, and auditing) — IBM Tivoli Access Manager and IBM Tivoli Access Manager for Enterprise Single Sign-on
  • Identity federation (sharing user authentication and attribute information between trusted Web services applications) — IBM Tivoli Federated Identity Manager
  • Identity foundation (directory, directory integration, and workflow) — IBM Tivoli Directory Integrator and IBM Tivoli Directory Server

The above solutions support IBM's IT Service Management strategy to help you automate and standardize the way they design and integrate information technology management processes and the underlying management products that support them across separate departments within their enterprises.

Services with IBM Tivoli Identity Manager for z/OS

IBM Software Group offers consulting services for Tivoli Identity Manager for z/OS. IBM Global Services also offers identity management services that include Tivoli Identity Manager for z/OS.
 
Back topBack to top
 

Reference information

Refer to Software Announcement 207-347 , dated December 11, 2007.

Business Partner information

If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld ID and password are required (use IBM ID).

BP Attachment for Announcement Letter 208-202

Trademarks

 
System z and i5/OS are trademarks of International Business Machines Corporation in the United States or other countries or both.
 
z/OS, Tivoli, AIX, Lotus Notes, DB2 Universal Database, and RACF are registered trademarks of International Business Machines Corporation in the United States or other countries or both.
 
Windows and Microsoft are registered trademarks of Microsoft Corporation.
 
Linux is a trademark of Linus Torvalds in the United States, other countries or both.
 
Other company, product, and service names may be trademarks or service marks of others.

 
Back topBack to top
 
Education support

Comprehensive education for IBM Tivoli® products is offered through Worldwide Tivoli Education Delivery Services. A wide range of training options are available, including classes led by instructors, learning on demand, on-site training, and blended learning solutions.

For additional information, visit


 
Back topBack to top
 
Offering Information

Product information is available via the Offering Information Web site


 
Back topBack to top
 
Publications

The following English publications can be downloaded from the following Web site at general availability

Title                                           Form number
 
IBM Tivoli Identity Manager for z/OS(R)         SC23-6143-00
 Installation and Configuration Guide
IBM Tivoli Identity Manager                     SC23-6594-01
 Performance and Tuning Guide
IBM Tivoli Identity Manager for z/OS            GC23-6144-00
 Program Directory

 
Back topBack to top
 
Technical information

Specified operating environment

Hardware requirements

Minimum processor, disk space, and memory requirements for Tvioli Identity Manager for z/OS follow:

                   Minimum for single      Minimum for cluster node
System             z990 2084               z990 2084
 
Processor          2                       2
 
Memory             4 GB                    4 GB for each member
 
Tivoli Identity    300 MB for              300 MB cylinders for
Manager for z/OS   READ-ONLY directory     READ-ONLY directory
installation       (/usr/lpp/itim)         (/usr/lpp/itim)
disk space         and about 5 MB          and about 5 MB
                   cylinders for           for each member
                   READ-WRITE directory    READ-WRITE directory
                                           of each member
 
Disk space for     20 GB                   20 GB on the LPAR
product data                               where DB2(R) for z/OS
stores*                                    and z/OS LDAP server reside
 
* Based on 20K users plus 60K Windows(R) local accounts.

Software requirements

  • z/OS V1R8 and V1.9
  • WebSphere® Application Server for z/OS V6.1 with fix pack 6.1.0.9
  • DB2 for z/OS V8.1 with PTF UK21593 or DB2 for z/OS V9.1

The following product is included with IBM Tivoli Identity Manager for z/OS V5.0 for use restricted to Tivoli Identity Manager for z/OS:

  • IBM Tivoli Directory Integrator V6.1.1

Note: Minimum values are listed for hardware and software prerequisites. These values enable a very basic use of Tivoli Identity Manager. You may need to use larger values that are appropriate for your production.

The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a README file, or other information published by IBM, such as an announcement letter. Documentation and other program content may be supplied only in the English language.

Planning information

Direct customer support: Direct customer support is provided by IBM Operational Support Services — SoftwareXcel. This fee service enhances your productivity by providing voice and electronic access into the IBM support organization. IBM Operational Support Services — SoftwareXcel helps answer questions pertaining to usage and suspected software defects for eligible products.

Installation and technical support is provided by Global Services. For more information, call 800-IBM-4YOU (426-4968).

Packaging

IBM Tivoli Identity Manager for z/OS is distributed with:

  • International Program License Agreement (Z125-3301)
  • License Information document
  • Tape with Tivoli Identity Manager for z/OS
  • CD-ROM for IBM Tivoli Directory Integrator V6.1.1
  • CD-ROM for publications

Security, auditability, and control

IBM Tivoli Identity Manager for z/OS uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.

Software Services

IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.

To learn more about IBM Software Services or to contact a Software Services sales specialist, visit

IBM Tivoli Enhanced Value-Based Pricing

IBM Tivoli software products are priced using IBM Tivoli's Enhanced Value-Based Pricing. The Enhanced Value-Based Pricing system is based upon the IBM Tivoli Environment-Managed Licensing Model, which uses a managed-environment approach — whereby price is determined by what is managed rather than the number and type of product components installed.

For example, all servers monitored with IBM Tivoli's monitoring product (IBM Tivoli Monitoring) require entitlements sufficient for those servers. Other IBM Tivoli products may manage clients, client devices, agents, network nodes, users, or other items, and are licensed and priced accordingly.

Unlike typical systems management licensing models that require entitlements of specific software components to specific systems, the IBM Tivoli Environment-Managed Licensing Model provides the customer flexibility to deploy its IBM Tivoli software products within its environment in a manner that can address and respond to the customer's evolving architecture. That is, as the architecture of a customer's environment changes, the customer's implementation of IBM Tivoli software can be altered as needed without affecting the customer's license requirements (as long as the customer does not exceed its entitlements to the software).

Under Enhanced Value-Based Pricing, licensing and pricing of server-oriented applications are determined based upon the server's use in the customer's environment. Typically, such applications are licensed and priced in a manner that corresponds to each installed and activated processor of the server managed by the IBM Tivoli application to help correlate price to value while offering a simple solution.

Where a server is physically partitioned, this approach is modified. This partitioning technique is the approach used with systems that have either multiple cards or multiple frames, each of which can be configured independently. For servers capable of physical partitioning (for example, IBM's System p Scalable POWERparallel Systems® servers, Sun Ultra servers, and HP Superdome servers), an entitlement is required for each processor in the physical partition being managed by the Tivoli application. For example, assume that a server has 24 processors installed in aggregate. If this server is not partitioned, entitlements are required for all 24 processors. If, however, it is physically partitioned into three partitions each containing eight processors, and Tivoli products were managing only one of the three partitions, then entitlements would be required for the eight processors on the physical partition managed by the IBM Tivoli application.

For servers with virtual or logical partitions, entitlements are required for all installed and activated processors on the server. For each IBM Tivoli application managing a clustered environment, licensing is based on the cumulative number of installed and activated processors on each server in the cluster. Where the cluster includes physically partitioned servers, the considerations described above concerning physically partitioned servers apply as well.

Enhanced Value-Based Pricing recognizes the convergence of RISC/UNIX® and Microsoft® Windows/Intel® technologies, in order to simplify the customers licensing requirements, and to provide a smoother, more scalable model. Pricing and licensing does not differentiate between non-System z server platforms or operating systems. For some products, this platform neutrality extends to System z and other host servers as well.

Scalable usage model tiering for z/OS

The following nonlinear scalable usage table is used to determine the required Value Units per 1,000 users for Tivoli Identity Manager for z/OS V5.0. It is the same table that is used for the distributed version of Tivoli Identity Manager V5.0. As with the distributed version, each tier is converted, and all tiers are then totaled to calculate the User Value Units.

As with other z/OS products, Tivoli Identity Manager for z/OS V5.0 requires a license entitlement, and a Subscription and Support (S&S) entitlement. Each tier is converted and all tiers are then added.

Scalable usage level   1         2       3       4
 
Chargeable users       1K - 5K   >5K     >15K    >50K
                                 - 15K   - 50K   - 150K
 
Value Units per user   1.0       0.50    0.30    0.20

Scalable usage level   5         6       7       8
 
Chargeable users       >150K     >500K   >1M     >3M
                       - 500K    - 1M    -3M
 
Value Units per        0.10      0.05    0.025   0.01
chargeable user

The pricing model for Tivoli Identity Manager for z/OS is enhanced to reduce the price for many customers whose systems support a large number of external users. The price for these external users is not the same as for internal users. The external user charge will be based on a set ratio of five external users to one internal user, so that the charge is lower than, and proportional to, the typical internal user charge.

IBM Tivoli Enhanced Value-Based Pricing terminology definitions

Enterprise A person or single entity and the subsidiaries owned by more than 50%.

Authorized user for IBM Tivoli Identity Manager for z/OS An authorized user is one and only one individual, machine, program, or device with a specific identity (ID) within or outside your enterprise. A Proof of Entitlement (PoE) is required for each user accessing the program or any program component

Notes:

  1. The program can be accessed by multiple users provided that a user authorization has been obtained for each individual user.
  2. Authorized users have unique specific identity and IDs cannot be shared.
  3. An ID can establish one or more connections and count as a single authorized user.
  4. An authorized user of IBM Tivoli Identity Manager for z/OS is any ID that accesses an application or service managed or protected by IBM Tivoli Identity Manager for z/OS.

Standby or backup systems

For programs running or resident on backup machines, IBM defines three types of situations: cold, warm, and hot. In the cold and warm situations, a separate entitlement for the copy on the backup machine is normally not required and typically no additional charge applies. In a hot backup situation, the customer needs to acquire another license or entitlements sufficient for that server. All programs running in backup mode must be solely under the customer's control, even if running at another enterprise's location.

As a practice, the following are definitions and allowable actions concerning the copy of the program used for backup purposes.

Cold — A copy of the program may reside, for backup purposes, on a machine as long as the program is not started. There is no additional charge for this copy.

Warm — A copy of the program may reside for backup purposes on a machine and is started, but is idling, and is not doing any work of any kind. There is no additional charge for this copy.

Hot — A copy of the program may reside for backup purposes on a machine, is started, and is doing work. The customer must acquire a license or entitlements for this copy and there will generally be an additional charge.

Doing work includes, for example, production, development, program maintenance, and testing. It also could include other activities such as mirroring of transactions, updating of files, synchronization of programs, data or other resources (for example, active linking with another machine, program, database, or other resource, and so on), or any activity or configurations that would allow an active hot switch or other synchronized switch over between programs, databases, or other resources to occur.

In the case of a program or system configuration that is designed to support a high availability environment by using various techniques (for example, duplexing, mirroring of files or transactions, maintaining a heartbeat, active linking with another machine, program, database, or other resource, and so on), the program is considered to be doing work in the hot situation and a license or entitlement must be purchased.

Value Units

A Value Unit is a metric used to compute license quantities, is program specific, and is typically only used on products managing System z systems.

Product and licensing Web sites

A complete list of IBM Tivoli products is available at Web site

IBM Tivoli product licensing documents are available at Web site

Scalable usage model table

Tivoli Identity Manager for z/OS will use the following scalable usage table to determine the required Value Units per 1,000 chargeable users. As with other z/OS products, Tivoli Identity Manager for z/OS V5.0 requires a License entitlement, and a Subscription and Support (S&S) entitlement, if support is needed. (Refer to the Ordering information section for part numbers).

Scalable usage level      1         2       3       4
 
Chargeable users          1K - 5K   >5K     >15K    >50K
                                    - 15K   - 50K   - 150K
 
User Value Units per      100       50      25      10
1,000 users

Scalable usage level      5         6       7       8
 
Chargeable users          >150K     >500K   >1M     >3M
                          - 500K    - 1M    -3M
 
Value Units per           100       50      25      10
1,000 chargeable users

The pricing model for IBM Tivoli Identity Manager for z/OS is enhanced to significantly reduce costs for many customers whose systems support a large number of external users. The price for these external users is not the same as for internal users. Select Tivoli Security offerings now use a ratio of 15 external users equaling 1 chargeable user for the purpose of calculating User Value Units. Each internal user equals one chargeable user for the purpose of calculating User Value Units. Infrequent internal users that utilize their IDs less than 5 times a year, and are grouped so as to be trackable and auditable, will be granted a ratio of 15 infrequent internal users equals 1 chargeable user for the purpose of calculating Value Units.

Chargeable users are added up and the volume tiering table then is utilized to calculate the total User Value Units required to cover entitlements. With the release of Tivoli Identity Manager for z/OS V5.0, customers may mix internal users, external users and infrequent internal users within their total User Value Units.

Examples of mixing and matching to a total User Value Units

             A        B          C         D          E
 
Pricing   Internal Chargeable External  Chargeable  Total      User
metric    users    internal   and       external    chargeabl  Value
example            users      infreq.   and         users      Units
                   at 1:1     internal  infrequent  (B+D)      to
                              users     int'l users            order
                                        at 15:1
 
Identity  57,000   57,000        0          0       57,000    21,900
Manager
Example 1
 
Identity  50,000   50,000     105,000    7,000      57,000    21,900
Manager
Example 2
 
Identity  30,000   30,000     405,000   27,000      57,000    21,900
Manager
Example 3

Example 4

Assume customer GREEN initially has 12,000 company employees and 1,500,000 external users. All of these are authorized users. The total chargeable users are calculated as follows:

  • 12,000 internal users = 12,000 chargeable users.
  • 1,500,000 external users = 1,500,000/15 = 100,000 chargeable users.
  • Customer GREEN must sum these chargeable users together and purchase the Value Units required for a total of 112,000 chargeable users.

If customer GREEN grows to 20,000 company employees and finds that it only needs to entitle approximately 1,380,000 external users (customers, business partners, suppliers), then the total chargeable users are calculated as follows:

  • 20,000 internal users = 20,000 chargeable users (20,000 chargeable users at 1:1).
  • 1,380,000 external users = 1,380,000/15 = 92,000 chargeable users (at 15:1).
  • Customer GREEN would still be covered with their entitlements, as their chargeable user total of 112,000 has not changed. This allows the customer flexibility to accommodate changes in their environment over time.

Pricing examples

Scenario

Customer ABC wants to initially secure access for the following adapters through one 8-way server for its 12,000 internal users (2,000 onsite employees and 10,000 remote employees):

  • 12,000 employees as authorized users of LDAP.
  • 12,000 employees as authorized users of Lotus Notes®.
  • 12,000 employees as authorized users of AIX®.

First, total the users for the class of adapters within a part number. Since all of these authorized users are internal users (part of ABC's enterprise), each user is counted when calculating Value Units.

Transaction 1

In this example, LDAP, Lotus Notes, and AIX are infrastructure adapters which are no longer separately priced adapters and are included in the purchase price of Tivoli Identity Manager for z/OS. Therefore, the environment is 12,000 chargeable users of base.

User Value Unit     Chargeable user   User Value Units  Value Units
pricing metric      qty. in customer  per chargeable    required
                    environment (A)   user (B)          (A) * (B)
 
Tier 1:   1K-  5K      5,000            1.00              5,000
 
Tier 2:  >5K- 15K      7,000            0.50              3,500
 
Totals                12,000                              8,500

Note: There is a minimum order quantity of 1,000 users.

Transaction 2

After the initial purchase, customer ABC wants to secure access for 1,500,000 external authorized users using the LDAP adapter — an increase of 100,000 chargeable users of Tivoli Identity Manager for z/OS based on the 15 to 1 ratio. The new environment for ABC would look as follows.

The LDAP and Lotus Notes adapters are included in the purchase price of Tivoli Identity Manager for z/OS. Therefore, the new customer environment is 112,000 chargeable users of base (1,500,000 / 15 = 100,000 new + 12,000 previous = 112,000).

To be compliant in the new environment, customer ABC must purchase additional User Value Units of Tivoli Identity Manager for z/OS base, which includes the adapters needed. As with other z/OS products, Tivoli Identity Manager for z/OS V5.0 requires a license entitlement, and a Subscription and Support (S&S) entitlement, if support is needed. (Refer to the Ordering information section for part numbers.)

User Value Unit       Chargeable user   User Value Units  User VUs
tier and chargeable   qty. in customer  per chargeable    required
users range           environment (A)   user (B)          (A) * (B)
 
Tier 1:   1K-   5K       5,000           1.0                5,000
 
Tier 2:  >5K-  15K      10,000           0.50               5,000
 
Tier 3: >15K-  50K      35,000           0.30              10,500
 
Tier 4: >50K- 150K      62,000           0.20              12,400
 
New total              112,000                             32,900
chargeable users
 
Previous chargeable     12,000           Less user VUs
user total                               licensed from     (8,500)
                                         transaction 1
 
 
                                         Additional User
                                         Value Units
                                         required          24,400

Additional host (such as RACF®) and application (such as SAP R3) adapters are available for purchase through Passport Advantage®. A current list of adapters is available at


 
Back topBack to top
 
Ordering information

The programs in this announcement all have Value Unit-Based pricing.

Program
number          Program name              Value Unit exhibit
 
5698-A97        IBM Tivoli Identity       VUE030
                 Manager for z/OS

For each System z™ IPLA program with Value Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity . Your required license capacity is based upon the following factors:

  • The System z IPLA program you select
  • The applicable Value Unit Exhibit
  • The applicable terms
  • Whether your current mainframes are full capacity or sub-capacity

Ordering z/OS through the Internet

ShopzSeries provides an easy way to plan and order your z/OS ServerPac or CBPDO. It will analyze your current installation, determine the correct product migration, and present your new configuration based on z/OS. Additional products can also be added to your order (including determination of whether all product requisites are satisfied). ShopzSeries is available in the U.S. and several countries in Europe. In countries where ShopzSeries is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order via the traditional IBM ordering process. For more details and availability, visit the ShopzSeries Web site at

New licensees

Orders for new licenses will be accepted now.

Shipment will begin on the planned availability date.

Basic license

To order, specify the program product number and the appropriate license or charge option. Also, specify the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW.

Program name: IBM Tivoli Identity Manager for z/OS
Program PID: 5698-A97

Entitlement                         License option/
identifier   Description            pricing metric
 
S01521W      Tivoli Identity        Basic OTC, per Value Unit
             Manager for z/OS

Orderable Supply ID:   Language          Distribution Medium
 
S01521V                English           3480 tape cartridge

Subscription and Support PID: 5698-R20

Entitlement                     License option/
identifier   Description        pricing metric
 
S015220      Tivoli Identity    Basic ASC, per Value Unit SW S&S
              Manager for z/OS   no charge, decline SW S&S

Orderable Supply ID:   Language          Distribution Medium
 
S01521Z                English           Hardcopy pub

Ordering information for adapters for Tivoli Identity Manager for z/OS

Infrastructure adapters

IBM now provides a core set of adapters available for the Tivoli Identity Manager for z/OS server, at no additional charge, to help increase user time to value and decrease deployment times.

These adapters are downloadable from an IBM Web Membership Web site upon request. You can request access to the IBM Web Membership Web site by contacting support as you normally would, such as by calling the support line or by opening an electronic PMR. You can also send an e-mail to tivzos@us.ibm.com. If you choose to send an e-mail to tivzos@us.ibm.com, be sure to provide your customer number, customer name, phone number, and preferred e-mail address.

Due to the constantly changing nature of these systems, adapters are updated frequently. For a current list of available adapters, go to

Application adapters and host adapters

Application and host adapters may be ordered from Passport Advantage. Passport Advantage allows you to have a common anniversary date for Software Maintenance renewals, which can simplify management and budgeting for eligible new versions and releases (and related technical support) for your covered products. The anniversary date, established at the start of your Passport Advantage Agreement, will remain unchanged while your Passport Advantage Agreement remains in effect. New software purchases will initially include twelve full months of maintenance coverage. Maintenance in the second year (the first year of renewal) can be prorated to be coterminous with your common anniversary date. Thereafter, all software maintenance will renew at the common anniversary date and include twelve full months of maintenance.

Refer to the IBM International Passport Advantage Agreement and to the IBM Software Maintenance Handbook for specific terms relating to, and a more complete description of, technical support provided through Software Maintenance.

The quantity to be specified for the Passport Advantage part numbers in the following table is per number of required authorized users.

IBM Tivoli Identity Manager application adapters

You will need to purchase the appropriate license part numbers listed below. This will enable you to receive IBM Tivoli Identity Manager for applications' adapters as downloadable images from Passport Advantage.

                                                              Part
Part description                                              number
 
IBM Tivoli Identity Manager Application Adapters              D61VSLL
 User Value Unit License and SW S&S 12 Months
 
IBM Tivoli Identity Manager Application Adapters              E047PLL
 User Value Unit Annual SW S&S Renewal
IBM Tivoli Identity Manager Application Adapters              D61VTLL
 User Value Unit SW S&S Reinstatement 12 Months

IBM Tivoli Identity Manager host adapters

You will need to purchase the appropriate license part numbers listed below. This will enable you to receive IBM Tivoli Identity Manager Host Edition adapters as downloadable images.

                                                              Part
Part description                                              number
 
IBM Tivoli Identity Manager Host Adapters User Value Unit     D61VGLL
 License and SW S&S 12 Months
IBM Tivoli Identity Manager Host Adapters User Value Unit     E047JLL
 Annual SW S&S Renewal
IBM Tivoli Identity Manager Host Adapters User Value Unit     D61VHLL
 SW S&S Reinstatement 12 Months

Due to the constantly changing nature of these systems, adapters are updated frequently and are available through download only. For a current list of available adapters, go to

IBM reserves the right to add or remove adapters from a group, move adapters between groups, and add or remove adapter groups at any time without prior notice.

Subscription and Support

Subscription and Support must be ordered to receive voice technical support via telephone during normal business hours, and future releases and versions, at no additional charge. The capacity of Subscription and Support (for example, Value Units or number of processors) must be the same as the capacity ordered for the product licenses.

To order, specify the Subscription and Support program product number and the appropriate license or charge option.

IBM is also providing Subscription and Support for these products via a separately purchased offering, under the terms of the IBM International Agreement for Acquisition of Support Maintenance (IAASM). This offering:

  • Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
  • Entitles customers to future releases and versions at no additional charge. Note that the customer is not entitled to new products.

When Subscription and Support is ordered, the charges will renew automatically annually unless cancelled by the customer.

Customization option for z/OS

Select the following feature number to customize your order if running on the z/OS platform. This feature can be specified on the initial or MES orders.

Feature number          Description
 
3450                    Satellite Electronic Delivery

Customized Offerings

Product deliverables are shipped only via Customized Offerings (for example, CBPDO, ServerPac, SystemPac®).

CBPDO and ServerPac are offered for Internet delivery, where ShopzSeries product ordering is available. Internet delivery of ServerPac may help improve automation and software delivery time. For more details on Internet delivery, refer to the ShopzSeries help information at

Media type for this software product is chosen during the Customized Offerings ordering process. Based on your customer environment, it is recommended that the highest possible density tape media is selected. Currently offered media types are:

  • CBPDOs — 3480, 3480 Compressed, 3490E, 3590, 3592*
  • ServerPacs — 3480, 3480 Compressed, 3490E, 3590, 3592*
  • SystemPacs — 3480, 3480 Compressed, 3490E, 3590, 3592*
*
3592 is highest density media. Selecting 3592 will ship the fewest number of media.

Once a product becomes generally available, it will be included in the next ServerPac and SystemPac monthly update.

Production of software product orders will begin on the planned general availability date.

  • CBPDO shipments will begin one week after general availability.
  • ServerPac shipments will begin two weeks after inclusion in ServerPac.
  • SystemPac shipments will begin four weeks after inclusion in SystemPac due to additional customization, and data input verification.

 
Back topBack to top
 
Terms and conditions

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

Licensing: IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use.

Agreement for Acquisition of Software Maintenance

The following agreement applies for maintenance and does not require customer signatures:

  • IBM Agreement for Acquisition of Software Maintenance (Z125-6011)

These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.

S/390® and System z IBM Operational Support Services — SoftwareXcel is an option if you desire added services.

License Information form number: L-JSCK-6ZNU69

The program's License Information will be available for review on the IBM Software License Agreement Web site

Limited warranty applies: Yes

Limited warranty: IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at

IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).

Program support: Enhanced support, called Subscription and Support, includes telephone assistance, as well as access to updates, releases, and versions of the program as long as support is in effect. You will be notified of discontinuance of support with 12 months' notice.

Money-back guarantee: If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.

For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.

Authorization for use on home/portable computer: You may not copy and use this program on another computer without paying additional license fees.

Other terms

Volume orders (IVO): No

IBM International Passport Advantage Agreement

Passport Advantage applies: No

Usage restriction: Yes. Usage is limited to the quantity of Value Units licensed.

For additional information, refer to the License Information document that is available on the IBM Software License Agreement Web site

Software Maintenance applies

No. For operating system software, the revised IBM Operational Support Services — SoftwareXcel offering will provide support for those operating systems and associated products that are not available with the newly announced Software Maintenance offering.

This will ensure total support coverage for your enterprise needs, including IBM and selected non-IBM products. For complete lists of products supported under both the current and revised offering, visit

IBM Operational Support Services — SoftwareXcel: Yes

System i™ Software Maintenance applies: No

Variable charges apply: No

Educational allowance available

Yes. A 15% education allowance applies to qualified education institution customers.
 
Back topBack to top
 

IBM Electronic Services

IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a Web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent.

The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.

The Electronic Service Agent™ is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM. Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server.

To learn how Electronic Services can work for you, visit


 
Back topBack to top
 
Prices

Information on charges is available at Web site

In the Electronic tools category, select the option for Purchase/upgrade tools.

Pricing for 5698-A97 non-MSU-based System z offerings

Program name: IBM Tivoli Identity Manager for z/OS
Program PID: 5698-A97

Entitlement                           License option/
identifier   Description              Pricing metric
 
S01521W      Tivoli Identity Manager  Basic OTC, per Value Unit
              for z/OS

Subscription and Support PID: 5698-R20

Entitlement                     License option/
identifier   Description        Pricing metric
 
S015220      Tivoli Identity    Basic ASC per Value Unit SW S&S
              Manager for z/OS   No charge, decline SW S&S

Passport Advantage

For Passport Advantage and charges, contact your IBM representative or your authorized IBM Business Partner. Additional information is also available at

Business Partner information

If you are an IBM Business Partner — Distributor for Workstation Software acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBM ID and password are required.


 
Back topBack to top
 
Order now

To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business Partner.

To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968).

 Phone:      800-IBM-CALL (426-2255)
 Fax:        800-2IBM-FAX (242-6329)
 Internet:   callserv@ca.ibm.com
 Mail:       IBM Teleweb Customer Support
             ibm.com Sales Execution Center, Americas North
             3500 Steeles Ave. East, Tower 3/4
             Markham, Ontario
             Canada
             L3R 2Z1
 
 Reference:  LE001

The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.

Note: Shipments will begin after the planned availability date.

Trademarks

 
System z, System i, and Electronic Service Agent are trademarks of International Business Machines Corporation in the United States or other countries or both.
 
Tivoli, z/OS, DB2, WebSphere, pSeries, Scalable POWERparallel Systems, zSeries, Lotus Notes, AIX, RACF, Passport Advantage, SystemPac, S/390, and PartnerWorld are registered trademarks of International Business Machines Corporation in the United States or other countries or both.
 
Intel is a registered trademark of Intel Corporation.
 
Windows and Microsoft are registered trademarks of Microsoft Corporation.
 
UNIX is a registered trademark of the Open Company in the United States and other countries.
 
Other company, product, and service names may be trademarks or service marks of others.

Back to topBack to top
 

 
Printable version Printable version