|
IBM United States
Software Announcement 201-010 January 23, 2001 Tivoli SecureWay Security Manager V3.7.1 Delivers Increased Functionality for UNIX Environments
At a GlanceReplacing the security engine provides a number of enhancements for Tivoli SecureWay Security Manager:
OverviewNew Security Engine This release provides a major enhancement to management of UNIX® security in the form of a new UNIX security engine. The new engine is being offered as a replacement technology to provide the Tivoli® Access Control Facility (TACF) function. The prior security engine provided in Tivoli SecureWay® Security Manager was based on an engine known as the Security Operating System (or SeOS) licensed from Memco Software, a Computer Associates company. The new engine is based around Tivoli SecureWay Policy Director. Providing a security engine based on Tivoli SecureWay Policy Director allows Tivoli to make rapid future enhancements in the functions of the engine in the UNIX environment. In this release, the primary goal is to provide a functionally comparable alternative to SeOS. The new security engine provided in this release implements TACF using a component known as Policy Director for Operating Systems (PDOS). Simplifies Migration to PDOS Another major focus of this release is to minimize the effort required to migrate from the SeOS UNIX engine to the PDOS UNIX engine. The simplest form of migration will be the re-distribution of a security profile previously used for SeOS to a PDOS endpoint. Migration tools and additional assistance will be available for those that require them.
DescriptionTivoli SecureWay Security Manager provides a role-based, centralized mechanism for managing and implementing access control policy. Through the consistent configuration of access rights on operating systems from PC LANs to mainframes, Tivoli SecureWay Security Manager helps to ensure your own house is in order before exposing your applications to support e-business. Tivoli SecureWay Security Manager can:
The product user interface or the command line can be used to "teach" your policy to Tivoli SecureWay Security Manager. Various tools are included to speed up this process, such as a role-based population function which helps configure a role-based access control model based on the existing configuration of one or more users and/or groups. Tivoli SecureWay Security Manager provides a single, manageable interface to the variety of access control engines provided by different platforms, modifying native data, thus allowing local management tools to continue to operate. For most platforms, Tivoli SecureWay Security Manager manipulates the native security system of the platform. For example we provide a single interface for managing Windows NT™ domain security, altering records in the OS/390® Security Server (RACF®) and so on. Native tools will show the results of modification made by Tivoli SecureWay Security Manager. For UNIX, Tivoli SecureWay Security Manager provides a unique security engine. This engine allows us to treat all variations of UNIX in the same way. In addition, it resolves many security problems introduced by the user of a super user administrator such as root. This release provides a major enhancement to Tivoli's management of UNIX security in the form of a new UNIX security engine. The new engine is being offered as an alternative technology to provide the Tivoli Access Control Facility (TACF) function. The prior security engine provided in Tivoli SecureWay Security Manager was based on an engine known as the Security Operating System (or SeOS) licensed from Memco Software, a Computer Associates company. The new engine is based around Tivoli SecureWay Policy Director. Providing a security engine based on Tivoli SecureWay Policy Director allows Tivoli to make rapid future enhancements in the functions of the engine in the UNIX environment. In this release, the primary goal is to provide a functionally comparable alternative to SeOS. The new security engine provided in this release implements TACF using a component known as Policy Director for Operating Systems (PDOS). Another major focus of this release is to minimize the effort required to migrate from the SeOS UNIX engine to the PDOS UNIX engine. The simplest form of migration will be the redistribution of a security profile previously used for SeOS to a PDOS endpoint. Migration tools and additional assistance will be available for those that require them. Main Features of this Release Version 3.7.1 of Tivoli SecureWay Security Manager:
Euro CurrencyThis program is not impacted by euro currency. Statement of DirectionAs a future enhancement to the national language support capability of PDOS, it is the intention of Tivoli Systems to translate PDOS in the next Tivoli SecureWay Security Manager release, currently targeted for June 2001. Reference InformationRefer to:
Trademarks
Education SupportTraining is available for all Tivoli® products, Education is offered through IBM Education and Training, and through Tivoli Systems. Worldwide information about education offerings is available on the IBM Education and Training home page on the Internet at: For current information on Tivoli Systems education, call 512-436-8000 or visit the Tivoli Systems home page on the Internet at Offering InformationProduct information will be available on day of announcement through Offering Information (OITOOL) at: PublicationsThe following publications can be ordered immediately after planned availability.
Order
Title Number
Tivoli SecureWay(R) Security Manager
V3.7 User's Guide GC32-0706
Tivoli SecureWay Security Manager
V3.7 Release Notes(TM) GI11-0802
Tivoli SecureWay Security Manager
V3.7 Supplement for MS Windows(TM)
2000 GC32-0474
Tivoli SecureWay Security Manager
V3.7 Supplement for AS/400(R) GC32-0658
Tivoli SecureWay Security Manager
Redbook SG24-5101
Tivoli SecureWay Security Manager
Supplement for Policy Director
V3.7.1 GC32-0473
Tivoli SecureWay Security Manager
for Policy Director Release Notes
V3.7.1 GI11-0759
Technical InformationSpecified Operating EnvironmentHardware RequirementsTivoli Management Region Server Platforms: Tivoli SecureWay Security Manager requires a Tivoli Management Region (TMR) Server running Tivoli Management Framework Version 3.6.3. The standard requirements for a TMR server are: Hardware Platforms:
Software Platforms:
Tivoli Gateway Platforms: Tivoli SecureWay Security Manager exploits the capabilities of a Tivoli Gateway. Depending on the configuration, the Gateway may be the same system as the TMR server or it can be a standalone system. The requirements for a Tivoli Gateway are the same as for a TMR Server, plus approximately 25 MB for gateway files. Supported Targets (Tivoli Client Hardware/Software Platforms): Client space requirements vary — see Release Notes for specific details.
Tivoli SecureWay Policy Director V3.7 Tivoli SecureWay Security Manager V3.7.1 can manage components of Tivoli SecureWay Policy Director V3.7 (such as NetSEAL, WebSEAL and Policy Director for Operating Systems). Tivoli SecureWay Security Manager requires the use of a Tivoli Managed Node as a proxy station for managing Tivoli SecureWay Policy Director. Depending on the configuration the Tivoli Managed Node may be the same system as the TMR Server or a Tivoli gateway, or it may be the Policy Director management server, or it may be a standalone system. If a standalone system is used it will have the same hardware and software requirements as a TMR Server. Tivoli SecureWay Security Manager has no other specific requirements for managing Tivoli SecureWay Policy Director and can manage Policy Director running on IBM RS/6000 running AIX, Sun SPARC running Solaris, HP 9000/700 and 800 running HP-UX and Intel x86 or Pentium systems running Windows NT. For detailed requirements for a Policy Director Management Server refer to Software Announcement 200-404 , dated November 14, 2000. As of V3.7.1 of Tivoli SecureWay Security Manager, the management of UNIX targets is performed using a Tivoli SecureWay Policy Director extension called Policy Director for Operating Systems (PDOS). PDOS requires a Tivoli SecureWay Policy Director Management Server (provided with Tivoli SecureWay Security Manager) which has the standard requirements of Tivoli SecureWay Policy Director (see above). The UNIX platforms that can be managed by Tivoli SecureWay Security Manager v3.7.1 using PDOS are:
Planning InformationDirect Customer Support: Direct customer support is provided by the Tivoli Support Center. This fee service enhances customers' productivity by providing voice and electronic access into the IBM support organization. The Tivoli Support Center will help answer questions pertaining to usage, and suspected software defects for eligible products. Packaging: Tivoli SecureWay Security Manager is distributed with:
Security, Auditability, and ControlTivoli SecureWay Security Manager uses the security and auditability features of the operating system software and Tivoli Management Framework. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. Ordering InformationBasic License: Current licensees of Tivoli SecureWay Security Manager will be sent a program reorder form that can be returned directly to IBM Software Delivery and Fulfillment (SDF). Reorder forms are scheduled to be mailed after planned availability. Reorder forms returned to SDF will be processed within 10 days of receipt. When V3.7.1 is available, V3.7.0 will no longer be available. For program 5698-SEC, customers must ensure that they have previously ordered adequate Tivoli Management Points to add this product to the customer environment. If additional Tivoli Management Points are required for this product, also specify the OTC feature number for Tivoli Management Points in the quantity desired. New Licensees Orders for new licenses will be accepted now. Shipment will begin on the planned availability date. New users should specify: Program Number: 5698-SEC Program Name: Tivoli SecureWay Security Manager To order a basic license, specify the program number, feature number 9001 for asset registration, and the feature number of the desired distribution medium. Also, specify the one-time charge feature number from the table below in the quantity desired (maximum quantity of 250 per feature number). The quantity of Tivoli Management Points is based on servers. Use the following table to order the program products listed below.
Tivoli Management Points
Product
Number Product Name Qty 1 Qty 250
5698-SEC Tivoli SecureWay 0039 0040
Security Manager
Tivoli Systems SupportAlthough the first year of support is included in the product price, a no-charge order must be placed using program number 5698-SPT specifying feature number 9001 for asset registration and the appropriate First Year Standard Support — No Charge feature number. This 5698-SPT order establishes entitlement records worldwide. If a 5698-SPT order is not placed, the customer will not be entitled to support even during the first year of a license. Prior to the end of the first 12 months support period, customers will be notified of their support renewal options. Unless the customer notifies IBM/Tivoli to discontinue or alter the level of support currently being received, support will automatically be renewed for annual billing at the same level as selected in the first year. Once the subsequent year support feature numbers are in place, renewals are automatic and billed annually unless support is cancelled by the customer. Tivoli Systems offers a variety of support options in response to diverse customer requirements. The table below summarize these offerings.
Standard
Support Categories Standard 24 Select
Support Coverage via Normal 7 x 24 7 x 24
Web, Phone, Fax and e-mail Bus Hrs
Web Support Tools (TIPS, FAQs, Yes Yes Yes
White papers, Tools, Patch
downloads)
Maintenance and Upgrades Yes Yes Yes
Support News Yes Yes Yes
Escalation Process Yes Yes Yes
Initial "Tivoli Select" Support No No Yes
Review (one customer location
and one review per contract)
Heightened Responsiveness
Severity 1 -- 1 hour No No Yes
Severity 2 -- 2 hour No No Yes
Severity 3 -- 4 hour No No Yes
Severity 4 -- 4 hour No No Yes
Fast Path to "Tivoli Select" No No Yes
Level 2 Engineer
Heightened Resolution Priority No No Yes
Proactive Tivoli Management No No Yes
Notification
Onsite when Required No No Yes
(two trips per year not to exceed
six days in total)
"Tivoli Select" Support review No No Quarterly
and recommendations
(customer to identify single
point of control site)
Minimum of 40,000 renewable Tivoli No No Yes
Management points required in
aggregate
Support Upgrade During the first year of a license, the customer may upgrade to the Tivoli Standard-24 or Tivoli Select Support option by ordering the applicable one-time charge (OTC) feature number from the table below. The OTC feature numbers may be specified on the initial order or later via an MES during the first year only. Ordering this OTC feature will not result in an extension of the no-charge support period.
In subsequent years, if a customer wants to upgrade to the Tivoli
Standard-24 or Tivoli Select Support option, an MES order must be entered
to discontinue the existing support option feature number and to add the
feature number for the desired options After an MES order is entered,
the support will be renewed and billed annually at that support level
unless support is cancelled by the customer.
5698-SPT — First-Year Support OptionsUse the following table to order support (5698-SPT) for the program products listed below.
Upgrade
Upgrade from
Upgrade from 1st Year
from 1st Year Std-24
1st Year to to
1st Year to Std-24 Select Select
Support Support Support Support
Support No One-Time One-Time One-Time
for Charge Charge Charge Charge
Program Support for Feature Feature Feature Feature
Number Program Name Number Number Number Number
5698-SEC Tivoli SecureWay
Security Manager
Qty of 1 0629 0617 0618 0619
Qty of 250 0630 0620 0621 0622
5698-SPT — Subsequent Year OptionsUse the following table to order support (5698-SPT) for the program products listed below.
Standard Std-24 Select
Support Support Support
Support Annual Annual Annual
for Charge Charge Charge
Program Support for Feature Feature Feature
Number Program Name Number Number Number
5698-SEC Tivoli SecureWay
Security Manager
Qty of 1 0623 0624 0625
Qty of 250 0626 0627 0628
The Standard Support option, Standard-24 Support option and Select Support option are not transferable among the Tivoli Enterprise products. If support is desired, support option feature numbers must be ordered for each licensed product. The quantity of the billable feature numbers for support must be equal to the quantity of Tivoli Management Points for a licensed product. Customers with support contracts may access the latest product information(including migration tool updates) at:
(This site requires a support login ID) End of Support: Tivoli support for V3.7.0 will be discontinued 12 months after the general availability of V3.7.1. Basic Machine-Readable Material
Feature Distribution
Language Number Medium
English 5809 CD-ROM
French 5819 CD-ROM
Brazilian Portuguese 5839 CD-ROM
German 5849 CD-ROM
Spanish 5859 CD-ROM
Italian 5869 CD-ROM
Japanese 5829 CD-ROM
Simplified Chinese 5879 CD-ROM
Traditional Chinese 5899 CD-ROM
Korean 5889 CD-ROM
Customization Options: Select the appropriate feature numbers to customize your order with delivery options desired. These features can be specified on the initial or MES orders. Example: If publications are not desired for the initial order, specify feature number 3470 to ship media only. For future updates, specify feature number 3480 to ship media updates only. If, in the future, publication updates are required, order an MES to remove feature number 3480; then, the publications will ship with the next release of the program.
Feature
Description Number
Initial Shipments
Serial Number Only (suppresses shipment 3444
of media and documentation)
Ship Media Only (suppresses initial 3470
shipment of documentation)
Ship Documentation Only (suppresses 3471
initial shipment of media)
Update Shipments
Ship Media Updates Only (suppresses 3480
update shipment of documentation)
Ship Documentation Only (suppresses 3481
update shipment of media)
Suppress Updates (suppresses update 3482
shipment of media and documentation)
Feature
Description Number
Expedite Shipments
Local IBM Office Expedite 3445
(for IBM use only)
Customer Expedite Process Charge 3446
($30 charge for each product)
Expedite shipments will be processed to receive 72-hour delivery from the time SDF receives the order. SDF will then ship the order via overnight air transportation. Terms and ConditionsAgreement: IBM International Program License Agreement (IPLA), IBM International Agreement for Acquisition of Programs and Support (IIAAPS), IBM Agreement for Acquisition of Support (IAAS), with the Attachment for Support and its Addendum for Tivoli Systems, and an Order Form Transferable: Applies except when Support is in effect Getting Started Period: Not applicable Usage Restriction: Yes. Usage is limited to the quantity of Tivoli Management Points acquired for a one-time charge. Educational Allowance Available: Yes, to qualified educational institutional customers Percentage: 15% Upgrade Protection Applies: Covered as long as Support remains in effect Licensed Program Materials Availability: Object Code only Entitled Upgrade for Current Upgrade Protection Licensees: As announced for each program
Support Center applies: Yes
Access is available through the
Tivoli Support Center,
800-TIVOLI8 (848-6548)
Availability: The first year of Tivoli Support is available
at no additional charge. The first year
starts when the product is shipped to the
customer. Subsequent years of Tivoli
Support are available for a fee as the
IAAS, IIAAPS, or any equivalent agreement
Available until
the product is
discontinued: Twelve months after written notice of product
discontinuance (that is, end-of-life (EOL))
Applicable for: The current release
The immediate previous release level for
twelve months after the general
availability of the current release
APAR Mailing Address: Tivoli Systems Inc.
9442 Capital of Texas Highway
Austin, TX 78759
USA
Attention: Product Development
Product Web Site: A complete list of products, terminology definitions, and licensing documents are available at the following Web site: PricesThe prices provided in this announcement are suggested retail prices for the U.S. only and are provided for your information only. Dealer prices may vary, and prices may also vary by country. Prices are subject to change without notice. For additional information and current prices, contact your local IBM representative. Customer Financing: IBM Global Financing offers attractive financing to credit-qualified commercial and government customers and Business Partners in more than 40 countries around the world. IBM Global Financing is provided by the IBM Credit Corporation in the United States. Offerings, rates, terms, and availability may vary by country. Contact your local IBM Global Financing organization. Country organizations are listed on the Web at: Prices are based on Tivoli Management points. The prices per Tivoli Management point are unaffected by this announcement. Refer to the following announcements for pricing information:
Trademarks
|
