 |
|
||||
|
|||||
|
|||||
|
|
|
||||||||||||||
|
|||||||||||||||
|
(Corrected on October 28, 2004)
Unnecessary information was removed under Software requirements.
Introducing on z890 and z990:
Customer Initiated Upgrade Capacity — Technology on demand:
For S/390 G6 servers and zSeries:
For ordering, contact: Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at
800-IBM-CALL
(Reference: YE001).
Today, IBM is announcing a new generation of features in support of cryptography and Local Area Networks (LANs). This refresh of technology for an on demand world demonstrates IBM's commitment to a balanced system design, helping to satisfy the requirements of your growing applications. A new cryptographic feature, Crypto Express2, is being introduced to continue to help satisfy your high-end security requirements and to help balance the workload generated by your applications. New Gigabit Ethernet features, designed to deliver line speed, are being made available, as is 10 Gigabit Ethernet — a new member of the Ethernet family for use in your enterprise backbone, between campuses, to connect server farms to your zSeries® 890 and 990, and to consolidate file servers onto zSeries 890 and 990.
Today IBM is also announcing that the zSeries 990 has received the Common Criteria Evaluation
Assurance Level 5 (EAL5) certification for the security of its logical partitions (LPARs). The
z990, along with the z900 and z800, continues the zSeries leadership as currently the only servers
to achieve this prestigious assurance level for partitioning as of August 2004.
Refer to the Hardware requirements and Software requirements sections of this announcement.
Refer to the Planned availability dates section of this announcement.
Planned availability datesThe following is planned to be available September 24, 2004, on zSeries:
The following is planned to be available October 29, 2004:
The following features and functions are planned to be available October 29, 2004, on z890 and z990:
The following features are planned to be available October 29, 2004, on S/390® G6 servers and zSeries (z800, z900, z890, z990):
The following is planned to be available October 29, 2004, on z800 and z900:
The following features and functions are planned to be available January 28, 2005, on z890 and z990:
The following features and functions are planned to be available in the z/VM V5.1 environment January 28, 2005:
The zSeries 890 and 990 advantageIBM continues to demonstrate the viability of its zSeries platform with the fourth announcement of new function on zSeries 990 (first introduced in May 2003) and the second announcement of new function on zSeries 890 (first introduced in April 2004). Today, IBM is introducing Crypto Express2, combining the functions of the PCI Cryptographic Accelerator and the PCIX Cryptographic Coprocessor in one feature, and at the same time introducing several new functions. New Gigabit Ethernet features with enhanced functions are also being introduced along with 10 Gigabit Ethernet for your enterprise backbones and server farms. This refresh of technology may help to satisfy the server consolidation connectivity requirements of on demand businesses. zSeries 990 achieves prestigious EAL5 certification
Facilitating server consolidation
: The IBM EAL5 certification provides a high degree of assurance that Processor Resource/Systems Manager™ (PR/SM™) may be configured and used in environments where separation of workloads is a requirement, but where the use of a single server platform is desirable for reasons of economy, flexibility, security, or management. PR/SM™ is designed to prevent the flow of information among logical partitions, providing highly secure isolation. This isolation allows images of zSeries supported operating systems, including z/OS, z/VM, and Linux™ on zSeries, to run in different logical partitions on a single zSeries server. The z990 EAL5 certification demonstrates that the zSeries server continues to be an essential building block for the integration of on demand business applications as well as traditional corporate workloads on a single server. The z890 is designed to offer many of the features and functions of the z990 and is currently under evaluation for EAL5 certification. Crypto Express2 for on demand business and securityIn December 2000, IBM delivered the PCI Cryptographic Coprocessor (PCICC), followed by the PCI Cryptographic Accelerator (PCICA) in October 2001. The PCIX Cryptographic Coprocessor (PCIXCC) feature was made available in September 2003. With this announcement, the functions of the PCICA and PCIXCC features are being delivered in one feature, Crypto Express2 . Like its predecessors, the Crypto Express2 feature has been designed to satisfy high-end server security requirements. The Integrated Cryptographic Service Facility (ICSF), a component of z/OS and z/OS.e, is designed to transparently use the available cryptographic functions — the CP Assist for Cryptographic Function (CPACF) as well as the PCICA, PCIXCC, and Crypto Express2 features — to balance the workload and satisfy the requirements of the applications. The Crypto Express2 feature is designed for Federal Information Processing Standard (FIPS) 140-2 Level 4 Certification and has two coprocessors for improved system throughput. A performance benefit is expected with multitasking applications. A performance benefit may not be realized with single-threaded applications, which can utilize only one of the two coprocessors. The Crypto Express2 feature supports the following:
All logical partitions (LPARs) in all Logical Channel Subsystems (LCSSs) have access to the Crypto Express2 feature, up to 30 LPARs per feature. While it occupies an I/O slot it does not use Channel Path Identifiers (CHPIDs). The Crypto Express2 feature replaces the PCICA and PCIXCC features, is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, z/VM, VSE/ESA™, and Linux on zSeries. z/VM, VSE/ESA, and Linux on zSeries offer support for clear key SSL transactions only. Refer to the Standards section and to the Hardware requirements and Software requirements sections. Refer also to the Special features section of the Sales Manual on the Web for further information. Cryptographic support for 19-digit PANs: Crypto Express2 and PCIXCC now offer CVV generation and verification services for 19-digit PANs: Industry practices for use of the Card Validation Value (CVV) are moving to base CVV computations on a 19-digit Personal Account Number (PAN) instead of the 13-digit and 16-digit PANs currently in use and supported by ICSF and the PCIXCC feature. ICSF, Crypto Express2, and PCIXCC now support use of a 19-digit PAN in the CVV generation and verification services (CSNBCSG and CSNBCSV respectively). Support of CVV generation and verification services for 19-digit PANs, an anti-fraud security feature, is supported by the Crypto Express2 and PCIXCC features on z890 and z990 and by z/OS and z/OS.e. Refer to the Hardware requirements and Software requirements sections for further information. Enabling use of less than 512-bit keys for clear key RSA operations: The Crypto Express2 and PCIXCC features are designed to support applications that require clear key RSA operations using keys less than 512 bits, including ICSF Callable services and their corresponding verbs: Digital Signature Verify (CSNDDSV), Public Key Encrypt (CSNDPKE), and Public Key Decrypt (CSNDPKD). All other ICSF Callable services that require a Crypto Express2 or PCIXCC feature continue to require keys of more than 511 bits. Enabling the lower limit for clear key RSA operations may allow the migration of some additional cryptographic applications to z890 and z990 servers without requiring the applications to be rewritten. Support of applications that require clear key RSA operations using keys less than 512 bits applies to the Crypto Express2 and PCIXCC features, to z890 and z990, and is supported by z/OS, z/OS.e, and z/VM. Use of less than 512-bit keys for clear key RSA operations is currently available on the PCICC feature offered on z900 and z800. Refer to the Hardware requirements and Software requirements sections for further information. 2048-bit key RSA operations for PCICC on z800, z9002048-bit key (clear and secure) RSA operations capability for z800 and z900 servers, in support of new Automated Teller Machine (ATM) standards, is planned to be available via 2048-bit key RSA operations for the PCICC (#0867) feature. 1024-bit key RSA operations is available today via a Functional Control Vector (FCV) on the PCI Cryptographic Coprocessor (PCICC) Enablement diskette (#0865). This capability is unique to PCICC and does not apply to the CMOS Cryptographic Coprocessor Facility (CCF). The 2048-bit FCV is designed to support four ICSF services:
Applications that require 2048-bit key RSA operations are expected to be able to migrate with ease. 2048-bit key RSA operations support for the PCICC features on z800 and z900 is transparent to the hardware and is supported by z/OS, z/OS.e, z/VM, and Linux on zSeries. z/VM and Linux on zSeries offer support for clear key RSA operations only. Refer to the Software requirements section for further information. This is an integrated capability on the Crypto Express2 and PCIXCC features on z890 and z990. There is no unique feature. TKE 4.2 Smart Card Reader for security and convenienceTKE 4.2 workstation with Smart Card Reader support: The Trusted Key Entry (TKE) workstation with the 4.2 level of Licensed Internal Code is an optional feature of the zSeries that provides a secure key management system. The key management system provides authorized persons a method of key identification, exchange, separation, update, and management. Support for an optional Smart Card Reader attached to the TKE 4.2 workstation allows the use of smart cards, which resemble credit cards in size and shape, but contain an embedded microprocessor and associated memory for data storage. Access to and the use of confidential data on the smart cards are protected by a user-defined personal identification number (PIN). The TKE 4.2 Smart Card Reader feature (#0887) has four major functions:
For example, the smart card is able to store one or more 4758 PCI Cryptographic Coprocessor master key parts. The parts are stored in the "clear" on the smart card. The master key parts are generated by the 4758 PCI Cryptographic Coprocessor within the TKE workstation and are transferred to the smart card for storage and later read back to the 4758 for processing. The master key parts are encrypted, for added security, during transport between the smart card and the 4758. The TKE 4.2 Smart Card Reader support does not remove any of the mechanisms available in the current TKE LIC. That is, with the smart card support, it is still possible to store key parts on diskettes or paper, or to use a TKE authority key stored on a diskette, and to log on to the 4758 using a passphrase. The following optional features are associated with the TKE 4.2 workstation Smart Card Reader support:
The optional Smart Card Reader, which can be attached to a TKE workstation with the 4.2 level of LIC, is available on S/390 G6 servers as well as zSeries 800, 900, 890, and 990. Currently installed TKE workstations can be upgraded to the TKE 4.2 code to allow use of the Smart Card Reader. Support for an optional Smart Card Reader attached to a TKE workstation satisfies the Statement of General Direction in Hardware Announcement 103-142 , dated May 13, 2003. TKE 4.2 code: The TKE 4.2 level of LIC (#0853) includes support for the Smart Card Reader. The TKE 4.2 code is designed to provide a secure local and remote method of operational and master key entry. The TKE 4.2 code applies to the TKE workstation and is available on S/390 G6 servers as well as zSeries 800, 900, 890, and 990. Currently installed TKE workstations can be upgraded to the TKE 4.2 code to allow use of the Smart Card Reader. FICON Express enhancements for Storage Area NetworksPreview — FCP LUN Access Control: IBM zSeries is previewing Fibre Channel Protocol (FCP) Logical Unit Number (LUN) Access Control, which is designed to provide host-based control of access to storage controllers and their devices as identified by their LUNs. It can allow read-only sharing of FCP SCSI devices among multiple operating system images. If a host channel is shared among multiple operating system images, the access control mechanism would provide for either none or all of these images to have access to a particular storage controller or device (logical unit). FCP LUN Access Control will allow you to define, via an access control table, individual access rights to storage controller ports and devices for each operating system image. A system configuration using FCP LUN Access Control may significantly reduce the number of FCP channels (FICON Express features) that are needed to provide controlled access to the data on FCP SCSI devices. FCP LUN Access Control complements the zoning and LUN masking schemes that exist in open storage environments. All of these types of access control can be used together. FCP LUN Access Control will allow read-only sharing of FCP SCSI devices among multiple operating system images via a shared FCP Channel. A device to be used in shared read-only mode must be defined accordingly in the access control table. Configuration Utility: The Configuration Utility for FCP LUN Access Control is expected to be a Linux user space application which will be used to configure the FCP LUN Access Control. To define and activate LUN Access Control, you would create an access control table that describes the access rights in XML format. In this table, you would define access rights to storage controllers and devices in the SAN and identify devices to be shared in read-only mode. The Configuration Utility for FCP LUN Access Control is expected to be required to process the access control table, verify proper specification of the rules, and activate the access control functions in the FCP channel. The Configuration Utility for FCP LUN Access Control is planned to be a package consisting of user documentation and sample files with a skeleton to help you generate an XML-format access control table, and the utility program itself. The program is intended to provide a command line interface (CLI) and be supported by Linux on zSeries. It is expected that the Configuration Utility will be provided for download by registered users via Resource Link™ When available, FCP LUN Access Control will be supported by the FICON Express features when configured as CHPID type FCP, will be exclusive to z890 and z990, and is planned to be available in the z/VM and Linux on zSeries environments. Refer to the Hardware requirements and Software requirements sections for further information. This statement represents IBM's current intentions. IBM development plans are subject to change or withdrawal without further notice. IBM zSeries is interested in obtaining customers to participate in an Early Support Program (ESP) to exploit the FCP LUN Access Control function on a z990 or z890. If you have an interest in participating, contact Kathy Kulchock at 845-433-3028, or kathyk@us.ibm.com. All inquiries should be received by November 15, 2004, to be considered for this program. Responses to this notice do not imply a commitment to be a participant in this ESP, but rather allow you to be considered for selection. FICON purge path extended: The new purge path extended function provides enhanced capability for FICON problem determination. FICON purge path error-recovery function is extended so that it transfers error-related data and statistics between the channel and entry switch, and from the control unit and its entry switch to the host operating system. z/OS can now record this information so that it can be used to more quickly isolate the source of link-related errors by both channel and control unit field personnel. FICON purge path extended applies to the FICON Express features when configured as CHPID type FC (native FICON), is exclusive to z890 and z990, and is supported by z/OS and z/OS.e. Refer to the Hardware requirements and Software requirements sections for further information. Hardware withdrawal — ESCON® Director Model 5 and featuresOn April 7, 2004, IBM announced the hardware withdrawal from marketing of the IBM ESCON Director Model 5 (9032-005) and all of its associated features, including the Bridge card which enables ESCON control units to be attached to FICON channels on Generation 5 and beyond servers. After December 30, 2004, orders for the ESCON Director and all of its associated features will no longer be accepted. It is highly recommended that you evaluate your current and future requirements prior to the final order acceptance date. It is recommended that each ESCON Director has a console, other than the Hardware Management Console (HMC), to perform operator and service tasks. If you do not have a console, you may order a console (#5900) prior to December 31, 2004. Refer to Hardware Announcement 904-055 , dated April 7, 2004. OSA-Express2 — A new generation for LANsIBM is introducing a new generation of OSA-Express Gigabit Ethernet features, as well as a 10 Gigabit Ethernet feature. This refresh of technology, OSA-Express2, can help to satisfy the bandwidth demands of your applications. Like their predecessors, the OSA-Express2 features continue to be hot-pluggable, support the Multiple Image Facility (MIF) — sharing of channels across logical partitions (LPARs), and can be defined as a spanned channel to be shared among LPARs within and across LCSSs. Whether OSA-Express2 or OSA-Express, the total number of features per server is 20 on z890, and 24 on z990. The Gigabit Ethernet features each have two ports and the 10 Gigabit Ethernet LR (Long Reach) feature has one port. Both OSA-Express2 Gigabit Ethernet (GbE) and 10 Gigabit Ethernet (10 GbE) support the Queued Direct Input/Output (QDIO) mode, carrying TCP/IP traffic only. QDIO continues to be the preferred architecture on zSeries for high-speed communication, helping to reduce host interruptions and improve response time. For SNA traffic, when in QDIO mode, use Enterprise Extender or TN3270E. Also like the predecessor features, OSA-Express2 GbE and 10 GbE support the direct SNMP subagent, all of the SNMP enhancements previously announced, Virtual Local Area Networks (VLANs — IEEE 802.1q), Internet Protocol Version 4 (IPv4), and IPv6. The OSA-Express2 features support all of the functions previously announced for the QDIO mode (CHIPD type OSD). Refer to the z890 and z990 Software requirements section of the Sales Manual on the Web and to the January 28, 2005, update to the z890 and z990 Open Systems Adapter-Express Customer's Guide and Reference (SA22-7935). OSA-Express2 Gigabit Ethernet: The third generation of Gigabit Ethernet features is designed to deliver line speed, 1 Gbps in each direction, and support the following new functions (described in more detail later in this section).
OSA-Express2 GbE continues to operate in QDIO mode only (CHPID type OSD), supporting full duplex operation, and jumbo frames (8992 byte frame size). The new OSA-Express2 GbE features continue to be dual-port features occupying a single I/O slot, and utilize one CHPID per port (two CHPIDs per feature). The new OSA-Express2 Gigabit Ethernet SX (short wavelength) (#3365) and OSA-Express2 Gigabit Ethernet LX (long wavelength) (#3364) features replace the OSA-Express Gigabit Ethernet features (#1364, #1365) currently offered on z890 and z990. The OSA-Express2 GbE features continue to support Checksum Offload (in the z/OS, z/OS.e, and Linux on zSeries environments — refer to the Software requirements section). They have the same connector type, LC Duplex, as the current OSA-Express Gigabit Ethernet features (#1364, #1365). The OSA-Express2 GbE features support the QDIO mode only (CHPID type OSD), are exclusive to z890 and z990, and are supported by z/OS, z/OS.e, z/VM, VSE/ESA, TPF, and Linux on zSeries. Refer to the Standards section and to the Hardware requirements and Software requirements sections for further information. Also refer to the Special features section of the Sales Manual on the Web. Introducing OSA-Express2 10 Gigabit Ethernet LR: The newest member of the family of LAN adapters, OSA-Express2 10 Gigabit Ethernet LR (Long Reach), is for use in your enterprise backbone, between campuses, to connect server farms to your zSeries 890 and 990, and to consolidate file servers onto zSeries 890 and 990. OSA-Express2 10 Gigabit Ethernet LR (#3368) supports:
Checksum offload is supported in the z/OS, z/OS.e, and Linux on zSeries environments. Refer to the Software requirements section for further information. The 10 Gigabit Ethernet (10 GbE) feature does not support auto-negotiation to any other speed. The 10 GbE supports 64B/66B coding, whereas GbE supports 8B/10B coding. Therefore, auto-negotiation is not possible. Note: The OSA-Express2 10 Gigabits per second (Gbps) link data rate does not represent the actual throughput of the OSA-Express2 10 GbE LR feature. Actual throughput is dependent upon many factors, including traffic direction, the pattern of acknowledgement traffic, packet size, the application, TCP/IP, the network, the disk subsystem, and the number of clients being served. The OSA-Express2 10 Gigabit Ethernet LR feature supports the QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, z/VM, VSE/ESA, TPF, and Linux on zSeries. Refer to the Standards section for conformance information as well as additional information on the features. Refer to the Hardware requirements and Software requirements sections for further information. Also refer to the Special features section of the Sales Manual on the Web. Layer 2 support for flexible and efficient data transfer For IP and non-IP workloads: Now, the new OSA-Express2 features and the current OSA-Express features on z890 and z990 can support two transport modes: Layer 2 (Link Layer) as well as the current Layer 3 (Network or IP Layer). Traffic can be IP (IPv4, IPv6) or non-IP (AppleTalk, DECnet, IPX, NetBIOS, or SNA). OSA and the z/VM virtual switch are now protocol independent and Layer-3 independent. Layer 2 support can help facilitate server consolidation. With support of the new Layer 2 interface, packet forwarding decisions are now based upon Layer 2 information, instead of Layer 3 information. z/VM guests no longer need to share a Medium Access Control (MAC) address with OSA — each operating system attached to the Layer 2 interface has its own MAC address. Complexity can be reduced, network configuration is simplified and intuitive, and LAN administrators can configure and maintain the mainframe environment the same as they do a nonmainframe environment. An OSA-Express2 or OSA-Express Ethernet feature can filter inbound datagrams by Virtual Local Area Network identification (VLAN ID, IEEE 802.1q), the Ethernet destination MAC address, or both. Filtering can reduce the amount of inbound traffic being processed by the operating system, helping to reduce CPU utilization. OSA port sharing is supported only between virtual switches that are using the same transport mode (Layer 2 with Layer 2 and Layer 3 with Layer 3). A Layer 2 guest cannot communicate directly with a Layer 3 guest. Another mechanism for helping to reduce host CPU utilization is the z/VM virtual switch. The virtual switch can help to eliminate the requirement for router virtual machines. The virtual switch currently supports IPv4 transport only. With z/VM V5.1, the virtual switch exploits the Layer 2 support within the z/VM Control Program. The z/VM Control Program owns the connection to the OSA feature and manages the MAC addresses and VLAN connectivity of the attached guests. The virtual switch performs automatic MAC address generation and assignment to allow uniqueness within and across z/VM images, LPARs, and servers. MAC addresses can also be locally administered. z/VM V5.1 virtual switch support will exploit the Layer 2 support within the z/VM Control Program. Layer 2 support, for flexible and efficient data transfer of IP and non-IP workloads, is applicable to OSA-Express2 Gigabit Ethernet (#3364, #3365) and 10 Gigabit Ethernet LR (#3368), OSA-Express 1000BASE-T Ethernet (#1366), and Gigabit Ethernet LX and SX (#1364, #1365, #2364, #2365) and is supported in QDIO mode only (CHPID type OSD). Layer 2 support is exclusive to z890 and z990, and is supported by z/VM and Linux on zSeries. Refer to the Hardware requirements and Software requirements sections for further information. Announcement of OSA-Express Layer 2 support satisfies the Statement of General Direction in Hardware Announcement 104-117 , dated April 7, 2004, and Hardware Announcement 104-118 , dated April 7, 2004. Improved virtualization — now 640 TCP/IP stacks For OSA-Express2: If you have a need to host more Linux images, increasing the number of TCP/IP stacks may be of benefit. The OSA-Express2 features support 640 TCP/IP stacks/connections per dedicated CHPID, or 640 total stacks across multiple LPARs using a shared or spanned CHPID. The OSA-Express features support 160 TCP/IP stacks. If multiple priorities for queues is disabled, the maximum number of devices allowed is 1920 (1920 devices / 3 = 640 stacks). If multiple priorities for queues is enabled (one to four QDIO priorities), the maximum number of devices is 480 (480 devices / 3 = 160 stacks). Support for 640 TCP/IP stacks is applicable to the OSA-Express2 features (Gigabit Ethernet SX, Gigabit Ethernet LX, 10 Gigabit Ethernet LR) which support the QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, z/VM, and Linux on zSeries. Refer to the Hardware requirements and Software requirements sections for further information. Large send for TCP/IP traffic — Designed for efficiency For OSA-Express2: Large send, also referred to as TCP segmentation offload, can improve performance by offloading TCP packet processing from the host to the OSA-Express2 features. Offload allows the host to send large blocks of data (64 kilobytes), instead of 1492 byte packets, to the OSA-Express2 feature. The OSA-Express2 feature then separates the 64 KB blocks into standard Ethernet packets (1492 bytes) to be sent out on the LAN. This applies to outbound traffic only, IPv4 or IPv6, and applies only to unicast datagrams. Large send support can help reduce host processor utilization, returning CPU cycles for application use while increasing network efficiencies. Large send support applies to the OSA-Express2 features (Gigabit Ethernet SX, Gigabit Ethernet LX, 10 Gigabit Ethernet LR) which support QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by Linux on zSeries. Refer to the Hardware requirements and Software requirements sections for further information. OSA-Express2 concurrent LIC update — An availability enhancement: The OSA-Express2 features have increased memory to facilitate concurrent application of LIC updates, allowing the application of LIC updates without requiring a configuration off/on, thereby minimizing the disruption of networking traffic during the update. Concurrent LIC update applies to the OSA-Express2 features (Gigabit Ethernet SX, Gigabit Ethernet LX, 10 Gigabit Ethernet LR), is offered for the QDIO mode only (CHPID type OSD), and is exclusive to z890 and z990. Refer to the Hardware requirements section for further information. There are no operating system dependencies. OSA-Express TCP/IP stack utilization improvement: The OSA-Express features support 160 TCP/IP stacks. Previously, in order to use all those stacks, the CHPID had to be shared by multiple logical partitions (LPARs). There was a restriction (only allowing a single control unit definition per CHPID) that limited the number of stacks to 84 per LPAR. That restriction is lifted. Now, a single LPAR can contain all 160 stacks offered by OSA-Express. The TCP/IP stack utilization improvement applies to OSA-Express Gigabit Ethernet, 1000BASE-T Ethernet, Fast Ethernet, and Token Ring (#1364, #1365, #1366, #2364, #2365, #2366, #2367), is supported in QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, and z/VM. Refer to the Hardware requirements and Software requirements sections for further information. Enhancing Parallel Sysplex®Coupling Facility Control Code (CFCC) Dispatcher Modifications: CFCC level 14 contains modifications to the CF dispatcher and internal serialization mechanisms to better manage coupled workloads in all Parallel Sysplex environments under certain circumstances. CFCC level 14 with CFCC Dispatcher Modifications is exclusive to z890 and z990. Refer to the Hardware requirements and Software requirements sections for further information. GDPS enhancementsGDPS/PPRC Multiplatform Resiliency for zSeries: In April 2004, an announcement was made that GDPS planned to exploit the new z/VM HyperSwap™ function to provide a coordinated near continuous availability and disaster recovery solution for z/OS and Linux guests running under z/VM. Refer to Hardware Announcement 104-118 , dated April 7, 2004. GDPS/PPRC Multiplatform Resiliency for zSeries became available September 24, 2004. z/VM 5.1 provides a new HyperSwap function, so that the virtual devices associated with one real disk are capable of being swapped transparently to another disk. HyperSwap can be used to switch to secondary disk storage subsystems mirrored by Peer-to-Peer Remote Copy (PPRC). This solution is especially valuable for customers who share data and storage subsystems between z/OS and Linux on zSeries — for example, a SAP application server running on Linux on zSeries and a SAP DB server running on z/OS. HyperSwap can also be helpful in data migration scenarios to allow applications to migrate to new disk volumes without requiring them to be quiesced. GDPS/PPRC can now provide the reconfiguration capabilities for the Linux on zSeries servers and data in the same manner as it does for z/OS systems and data. To support planned and unplanned outages, GDPS provides the following recovery capabilities:
This innovative near continuous availability and disaster recovery solution requires IBM Tivoli® System Automation for Multiplatforms V1.2 and later and z/VM V5.1, in addition to the other GDPS/PPRC prerequisites. z/VM V5.1 is supported on zSeries 800, 900, 890, and 990. Additional z800 to z890 upgrade pathsAdditional upgrade paths from z800 models to z890 Model A04 are now available. z800 Models 0A2, 0X2, and 003 can now be upgraded to z890 Model A04. These additional z800 to z890 upgrades support the 28 capacity settings as well as the features and functions offered on the z890 Model A04. On/Off CoD testIBM continues to enhance On/Off CoD to be more responsive to your on demand business requirements. On/Off CoD has been enhanced to allow for a no-charge test. No IBM charges are assessed for the test, including IBM charges associated with temporary hardware capacity, IBM software, or IBM maintenance. This test can be used to validate the processes to download, activate, and deactivate On/Off CoD capacity nondisruptively. Each On/Off CoD-enabled server is entitled to one no-charge test, per contract. This test may last up to a maximum duration of 24 hours commencing with the download and activation of an On/Off CoD order. On/Off CoD tests which do exceed 24 hours in duration will be treated in their entirety as billable On/Off CoD upgrades. In addition to validating the On/Off CoD function within your environment, you may choose to use this test as a training session for your personnel who are authorized to activate On/Off CoD. On/Off CoD no-charge test can be requested and downloaded from the Web at Resource Link. Refer to On/Off CoD test is exclusive to z890 and z990. Extended staging of CIU-Express and On/Off CoD ordersAll CIU-Express and On/Off CoD orders may now be staged for greater than 30 days. In fact, the orders may be staged for an extended period of time, unless one of the following conditions occurs:
Refer to Extended staging of CIU-Express orders is available on z800, z900, z890, and z990. Extended staging of On/Off CoD orders is exclusive to z890 and z990. Nondisruptive capacity change of z890 CPs: Nondisruptive capacity change of z890 Central Processors (CPs) to a different capacity setting, on subcapacity models, is now being offered in the z/OS, z/OS.e, and z/VM environments. Linux may also take advantage of the change when running as a guest under z/VM. z890 currently has the capability of concurrent upgrades, providing additional capacity with no server outage or IPL when CPs of the same capacity setting are added. Previously, for a z890 with a subcapacity setting, a change to a different CP capacity required up to two IPLs — one to implement the increased capacity, and for an On/Off Capacity on Demand (On/Off CoD) upgrade, one to go back to the original capacity. This new capability eliminates up to two planned outages which improves overall system availability. There is no hardware dependency. Refer to the Software requirements section for further information on z/OS, z/OS.e, z/VM, and Linux as a guest under z/VM. Section 508 of the U.S. Rehabilitation Act
IBM z890 and z990 are capable on delivery, when used in accordance with IBM's associated
documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act of
1973, 29 U.S.C. Section 794d, as implemented by 36 C.F.R. Part 1194, provided that any Assistive
Technology used with the product properly interoperates with it.
With the introduction of a new generation of features in support of cryptography and networking, IBM
The Common Criteria Evaluation Assurance Level 5 (EAL5) certification for the security of the Logical Partitions (LPARs) of the zSeries 990 continues to demonstrate zSeries leadership in an on demand world. zSeries 890
IBM brings the advanced mainframe technology of the z990 to your IT world with the IBM With the z890, you can start at the capacity setting you need to meet your IT infrastructure requirements and easily add additional capacity to meet your changing needs as you grow. The single model provides up to four processors with seven capacity settings each, a total of 28 capacity settings. zSeries 990
With a choice of four models, the largest z990 can be configured with up to three times the
processing power, four times the memory, four times the HiperSockets, up to four times the number of
ESCON channels, up to 25% more FICON, and up to twice the number of external coupling links of a
z900 Model 216 server. Each model adds to the system's total resources so you'll have the
ability to scale up with z/OS and reliably handle your most critical business transactions.
OSA-Express Token Ring not to be offeredThe zSeries 890 and 990 are expected to be the last zSeries servers to offer a Token Ring feature. It is intended that the OSA-Express Token Ring feature will not be available for ordering on a new build or upgraded server, or for carrying forward on an upgrade. A migration from a Token Ring to an Ethernet environment should be a part of all strategic LAN planning. All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice.
Trademarks
Publications for z890 and z990 can be obtained via Resource Link™ by accessing the following Web site Using the instructions on the Resource Link panels, obtain a user ID and password. Resource Link has been designed for easy access and navigation. The following publication is available now:
The following updated publication is available now:
The following updated publications will be available at planned availability:
zSeries 990 publicationsThe following updated publication is available now in the Library section of Resource Link:
The following z990 updated publications will be available at planned availability in the Library section of Resource Link:
zSeries 890 publicationsThe following updated publication is available now in the Library section of Resource Link:
The following z890 updated publications will be available at planned availability in the Library section of Resource Link:
 Back to top
Integrated Technology ServicesIBM services include business consulting, outsourcing, hosting services, applications, and other technology management. These services help you learn about, plan, install, manage, or optimize your IT infrastructure for e-business. They can help you integrate your high-speed networks, storage systems, application servers, and wireless protocols, and an array of platforms, middleware, and communications software for IBM and many non-IBM offerings. IBM is your one-stop shop for IT support needs. For details on available services, contact your IBM representative or visit For details on education offerings related to specific products, visit
Select your country, and then select the product as the category.
Specified operating environmentStandards: The OSA-Express2 Gigabit Ethernet features conform to the following standards:
The OSA-Express2 10 Gigabit Ethernet LR (10GBASE-LR) feature conforms to the following standards:
The OSA-Express2 Gigabit Ethernet features have the following characteristics: OSA-Express2 Gigabit Ethernet LX (#3364)
OSA-Express2 Gigabit Ethernet SX (#3365)
OSA-Express2 10 Gigabit Ethernet LR (#3368)
Hardware requirementsThe hardware requirements for the features and functions contained in this announcement are identified. Support Element (SE) drivers and Hardware Management Console/Support Element (HMC/SE) versions are identified. Machine Change Levels (MCLs) are required. Descriptions of the MCLs are available now via Resource Link at MCLs are designed to be applied concurrently. Contact IBM service personnel for further information. Note: TKE 4.2 code and the TKE 4.2 Smart Card Reader do not have SE driver dependencies. TKE 4.2 is supported on S/390® G6 servers and zSeries (z800, z900, z890, z990) when one or more of the following are present (depending upon servers): CMOS Cryptographic Coprocessor Facility (CCF), PCICC, PCIXCC, Crypto Express2.
SE HMC/SE
driver version Servers Description
55 1.8.2 z990, z890 October 29, 2004, content
19-digit PANs, PCIXCC
less than 512-bit keys,
clear key RSA, PCIXCC
FICON(TM) purge path
extended Layer 2 support,
OSA-Express TCP/IP stack
util. improvement,
OSA-Express CFCC level
14 with CFCC Dispatcher
Modifications
55 1.8.2 z990, z890 January 28, 2005, content
Crypto Express2 19-digit
PANs, Crypto Express2
less than 512-bit keys,
clear key RSA, Crypto
Express2 OSA-Express2
Gigabit Ethernet SX and
LX OSA-Express2 10
Gigabit Ethernet LR
Layer 2 support,
OSA-Express2 640 TCP/IP
stacks, OSA-Express2
Large send support,
OSA-Express2 Concurrent
LIC update, OSA-Express2
When available, FCP LUN Access Control will have the following hardware requirements:
SE HMC/SE driver version Servers Description 55 1.8.2 z990, z890 FCP LUN Access Control Peripheral hardware and device attachments For the appropriate peripheral hardware and device attachments, contact your IBM representative. IBM devices previously attached to IBM S/390 and zSeries servers are supported for attachment to z890 and z990 ESCON® and FICON channels, unless otherwise noted. The subject I/O devices must meet ESCON or FICON architecture requirements to be supported. I/O devices that meet OEMI architecture requirements are supported only via an external converter. Prerequisite Engineering Change Levels may be required. For further detail, contact IBM service personnel. While z890 and z990 support devices as described above, IBM does not commit to provide support or service for an IBM device that has reached its End of Service effective date as announced by IBM. Note: IBM cannot confirm the accuracy of performance, compatibility, or any other claims related to non-IBM products. Questions regarding the capabilities of non-IBM products should be addressed to the suppliers of those products. Software requirementsNote: z/OS.e is a specially priced offering of z/OS® for z800 and z890. z/OS.e cannot run on a z900 or z990. Software requirements for Crypto Express2: Crypto Express2 on z890 and z990, and all of the functions introduced with this feature (unless otherwise noted), requires at a minimum:
Note: z/VM, VSE/ESA, and Linux on zSeries support clear key RSA operations only. CVV generation and verification services for 19-digit PANs for the Crypto Express2 and PCIXCC features on z890 and z990 requires at a minimum:
Enabling use of less than 512-bit keys for clear key RSA operations for the Crypto Express2 and PCIXCC features on z890 and z990 requires at a minimum:
2048-bit key (clear and secure) RSA operations for the PCICC feature on z800 and z900 and the PCIXCC feature on z890 and z990 requires at a minimum:
Note: z/VM, VSE/ESA, and Linux on zSeries support clear key RSA operations only. Software requirements for FICON Express: FCP LUN Access Control , when available, applies to the FICON Express features on z890 and z990 when configured as CHPID type FCP.
FICON purge path extended applies to the FICON Express features on z890 and z990 when configured as CHPID type FC (native FICON) and requires at a minimum:
Software requirements for OSA-Express2 and OSA-Express: OSA-Express2 Gigabit Ethernet (GbE) SX and LX on z890 and z990 supports TCP/IP only (CHPID type OSD) and requires at a minimum:
OSA-Express2 10 Gigabit Ethernet LR on z890 and z990 supports TCP/IP only (CHPID type OSD) and requires at a minimum:
Checksum offload for IPv4 Packets for the OSA-Express2 Gigabit Ethernet on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
Layer 2 support for the OSA-Express2 (Gigabit Ethernet LX and SX [#3364, #3365] and 10 Gigabit Ethernet LR [#3368]) and OSA-Express features 1000BASE-T Ethernet (#1366), and Gigabit Ethernet LX and SX (#1364, #1365, #2364, #2365) on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
640 TCP/IP stacks for the OSA-Express2 Gigabit Ethernet and 10 Gigabit Ethernet LR features on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
Large send support for the OSA-Express2 Gigabit Ethernet and 10 Gigabit Ethernet LR features on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
Stack utilization improvement for the OSA-Express features on z890 and z990 — Gigabit Ethernet, 1000BASE-T Ethernet, Fast Ethernet, Token Ring (#1364, #1365, #1366, #2364, #2365, #2366, #2367) applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
Note: The OSA-Express2 features support all of the functions previously announced for the QDIO mode (CHIPD type OSD). Refer to the z890 and z990 Software requirements section of the Sales Manual on the Web and to the October 2004 update to the z890 and z990 Open Systems Adapter-Express Customer's Guide and Reference (SA22-7935). Software requirements for CFCC level 14: CFCC level 14 with CFCC Dispatcher Modifications on z890 and z990 requires at a minimum:
Software requirements for GDPS™ enhancement: GDPS/PPRC Multiplatform Resiliency for zSeries on z800, z900, z890, and z990 requires at a minimum:
For additional GDPS/PPRC prerequisites refer to the following Web site Software requirements for nondisruptive capacity change: Nondisruptive capacity change of z890 CPs to different capacity settings requires at a minimum:
Planning informationCustomer responsibilities Customer responsibilities for site preparation: Information on customer responsibilities for site preparation can be found in publications available in the Library section of Resource Link at Cable orders Fiber optic cable orders: Fiber optic cables for z800, z900, z890, and z990 are available via IBM Networking Services. IBM Networking Services has a comprehensive set of scalable solutions to address IBM cabling requirements, from product level to enterprise level. IBM Network Integration and Deployment Services for zSeries fiber cabling provides planning and installation services for individual fiber optic connections. IBM Network Integration and Deployment Services for enterprise fiber cabling provides planning, IBM Fiber Transport System trunking components, and installation services for small, medium, and large enterprises. IGS has the expertise and personnel available to effectively plan and deploy the appropriate cabling with the future in mind. These services may include planning, consultation, cable selection, installation, and documentation, depending upon the services selected. These services are designed to be right-sized for your products or the end-to-end enterprise, and to take into consideration the requirements for all of the protocols and media types supported on zSeries (for example, ESCON, FICON, Coupling Links, OSA) whether the focus is the data center, the Storage Area Network (SAN), the Local Area Network (LAN), or the end-to-end enterprise. IBM Networking Services are designed to deliver convenient, packaged services to help reduce the complexity of planning, ordering, and installing fiber optic cables. The appropriate fiber cabling is selected based upon the product requirements and the installed fiber plant. The services are packaged as follows: Under the zSeries fiber cabling services umbrella there are three options to provide individual fiber optic cables (jumper cables, conversion kits, and MCP cables) for connecting to z800, z890, z900, and z990, each option incorporating a specific set of services.
Options 1 and 2 can be combined within one statement of work to provide comprehensive upgrade coverage. Under the enterprise fiber cabling services umbrella there are two options to provide IBM Fiber Transport System (FTS) trunking commodities (fiber optic trunk cables, fiber harnesses, and panel-mount boxes) for connecting to the z800, z900, z890, and z990.
Refer to the services section of Resource Link for further details. Access Resource Link at Cabling responsibilities: Fiber optic cables, cable planning, labeling, and placement are all customer responsibilities for new installations and upgrades. Fiber optic conversion kits and Mode Conditioning Patch (MCP) cables are not orderable as features on z890 and z990. Installation Planning Representatives (IPRs) and System Service Representatives (SSRs) will not perform the fiber optic cabling tasks without a services contract. The following tasks are required to be performed by the customer prior to machine installation:
Additional service charges may be incurred during the server installation if the above cabling tasks are not accomplished as required. The table lists the connectors and cabling supported for each of the features available for ordering on the z890 and z990. For convenience, those features brought forward on an upgrade from z800 and z900 are also listed.
Feature Connector
number Feature name type Cable type
0219 ISC-3 link LC Duplex 9 micron SM
6154 ETR MTRJ 62.5 micron MM
2324 ESCON channel MTRJ 62.5 micron MM
2319 FICON Express LC Duplex 9 micron SM
LX
2320 FICON Express LC Duplex 50, 62.5 micron
SX MM
3364 OSA-X2 GbE LX LC Duplex 9 micron SM
3365 OSA-X2 GbE SX LC Duplex 50, 62.5 micron
MM
3368 OSA-X2 10 GbE SC Duplex 9 micron SM
LR(1)
1364 OSA-X GbE LX LC Duplex 9 micron SM
1365 OSA-X GbE SX LC Duplex 50, 62.5 micron
MM
1366 OSA-X RJ-45 Category 5 UTP
1000BASE-T
2364 OSA-X GbE LX SC Duplex 9 micron SM
2365 OSA-X GbE SX SC Duplex 50, 62.5 micron
MM
2366 OSA-X Fast RJ-45 Category 5 UTP
Ethernet
2367 OSA-X Token RJ-45 UTP or STP
Ring
MM is multimode fiber. SM is single mode fiber. OSA-X refers to OSA-Express. OSA-X2 refers to OSA-Express2. 1000BASE-T refers to the 10/100/1000 Mbps Ethernet feature. UTP is Unshielded Twisted pair. STP is Shielded Twisted Pair. Fiber Quick Connect (FQC), a fiber harness integrated in the zSeries frame for "quick" connect, is offered as a feature on zSeries for connection to ESCON channels. Cables for ICB links continue to be available as features. Refer to the Special features section of the Sales Manual on the Web for a list of these features and cables for ICB links. For further details also refer to z890 and z990 Installation Manual for Physical Planning (IMPP), available on Resource Link. Note: IBM Networking Services can satisfy your fiber optic as well as your copper cabling requirements. Security, auditability, and controlThis product uses the security and auditability features of, for example, host hardware, host software, and application software.
The customer is responsible for evaluation, selection, and implementation of security features,
administrative procedures, and appropriate controls in application systems and communications
facilities.
IBM Global Services has transformed its delivery of hardware and software support services to put
you on the road to higher systems availability. IBM Electronic Services is a Web-enabled solution
that provides you with an exclusive, no-additional-charge enhancement to the service and support on
the IBM IBM Electronic Services news page provides you with a single Internet entry point that replaces the multiple entry points traditionally used by customers to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.
The IBM Electronic Service Agent is no-additional-charge software that resides on your IBM To learn how IBM Electronic Services can work for you, visit Back to top
This product is available for purchase under the terms of the IBM Customer Agreement. Each IBM machine is manufactured from parts that may be new or used. In some cases, a machine may not be new and may have been previously installed. Regardless, IBM's appropriate warranty terms apply. Field-installable feature: Yes Warranty period: One year Customer setup: No Licensed Internal Code: IBM Licensed Internal Code (LIC) is licensed for use by a customer on a specific machine, designated by serial number, under the terms and conditions of the IBM Agreement for Licensed Internal Code, to enable a specific machine to function in accordance with its specifications, and only for the capacity authorized by IBM and for which the customer has acquired. You can obtain the agreement at the following Web site or by contacting your IBM representative.
Prices are available upon request.
Machine Feature MMMC Init/
Description type Model number indicator MES
IBM eServer(R) 2084 A08
zSeries 990 B16
C24
D32
TKE 4.2 code 0853 N Both
Crypto Express2 0863 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
OSA-Express2 GbE LX 3364 N Both
OSA-Express2 GbE SX 3365 N Both
OSA-Express2 10 GbE LR 3368 N Both
IBM eServer 2086 A04
zSeries 890
TKE 4.2 code 0853 N Both
Crypto Express2 0863 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
OSA-Express2 GbE LX 3364 N Both
OSA-Express2 GbE SX 3365 N Both
OSA-Express2 10 GbE LR 3368 N Both
Machine Feature MMMC Init/
Description type Model number indicator MES
IBM eServer 2064 101-109
zSeries 900 1C1-1C9
110-116
210-216
2C1-2C9
TKE 4.2 code 0853 N Both
2048-bit key mgmt for PCICC 0867 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
IBM eServer 2066
zSeries 800
0E1
0A1
0B1
0C1
0X2
001
0A2
002
003
004
TKE 4.2 code 0853 N Both
2048-bit key mgmt for PCICC 0867 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
S/390 Parallel 9672
Enterprise
Servers (G6) X17, Z17
X27, Z27
X37, Z37
X47, Z47
X57, Z57
X67, Z67
X77, Z77
X87, Z87
X97, Z97
XX7, ZX7
XY7, ZY7
XZ7, ZZ7
TKE 4.2 code 0853 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
N = No
Model conversions
From To
Type Model Type Model
2066 0A2 2086 A04
2066 0X2 2086 A04
2066 003 2086 A04
Parts removed or replaced become the property of IBM and must be returned. Feature conversions
Feature Returned Continuous From To parts maintenance 4598 6070 Y Y 4598 6110 Y Y 4598 6120 Y Y Feature Returned Continuous From To parts maintenance 4598 6130 Y Y 4598 6140 Y Y 4598 6150 Y Y 4598 6160 Y Y 4598 6170 Y Y 4598 6210 Y Y 4598 6220 Y Y 4598 6230 Y Y 4598 6240 Y Y 4598 6250 Y Y 4598 6260 Y Y 4598 6270 Y Y 4598 6310 Y Y 4598 6320 Y Y 4598 6330 Y Y 4598 6340 Y Y Feature Returned Continuous From To parts maintenance 4598 6350 Y Y 4598 6360 Y Y 4598 6370 Y Y 4598 6410 Y Y 4598 6420 Y Y 4598 6430 Y Y 4598 6440 Y Y 4598 6450 Y Y 4598 6460 Y Y 4598 6470 Y Y 4604 6070 Y Y 4604 6110 Y Y 4604 6120 Y Y 4604 6130 Y Y 4604 6140 Y Y 4604 6150 Y Y 4604 6160 Y Y 4604 6170 Y Y 4604 6210 Y Y 4604 6220 Y Y 4604 6230 Y Y 4604 6240 Y Y 4604 6250 Y Y 4604 6260 Y Y 4604 6270 Y Y 4604 6310 Y Y 4604 6320 Y Y 4604 6330 Y Y 4604 6340 Y Y 4604 6350 Y Y 4604 6360 Y Y 4604 6370 Y Y 4604 6410 Y Y 4604 6420 Y Y 4604 6430 Y Y 4604 6440 Y Y 4604 6450 Y Y 4604 6460 Y Y 4604 6470 Y Y 4606 6070 Y Y 4606 6110 Y Y 4606 6120 Y Y 4606 6130 Y Y 4606 6140 Y Y 4606 6150 Y Y 4606 6160 Y Y 4606 6170 Y Y 4606 6210 Y Y 4606 6220 Y Y 4606 6230 Y Y 4606 6240 Y Y 4606 6250 Y Y 4606 6260 Y Y 4606 6270 Y Y 4606 6310 Y Y 4606 6320 Y Y 4606 6330 Y Y 4606 6340 Y Y 4606 6350 Y Y 4606 6360 Y Y 4606 6370 Y Y 4606 6410 Y Y 4606 6420 Y Y 4606 6430 Y Y 4606 6440 Y Y 4606 6450 Y Y 4606 6460 Y Y 4606 6470 Y Y Y = Yes
Parts removed or replaced become the property of IBM and must be returned.
To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business Partner. To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968).
Phone: 800-IBM-CALL (426-2255)
Fax: 800-2IBM-FAX (242-6329)
Internet: ibm_direct@vnet.ibm.com
Mail: IBM Americas Call Centers
Dept: IBM CALL, 11th Floor
105 Moatfield Drive
North York, Ontario
Canada M3B 3R1
Reference: YE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.
Note: Shipments will begin after the planned availability date.
Trademarks
Back to top
 
Printable version
|
|
|
| |
| |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
zSeries
mainframe security, SAN, and LAN innovations
At a glance
zSeries 990 has
received the Common Criteria Evaluation Assurance Level 5 (EAL5) certification for the security
of its logical partitions (LPARs). The z990's logical partitioning was evaluated against the ISO
15408 Common Criteria standard, recognized in the global IT market. The z990, along with the z900
and z800, continues the zSeries leadership as currently the only servers to achieve this prestigious
assurance level for partitioning as of August 2004.