IBM United States
Software Announcement 202-285
October 15, 2002
IBM SCLM Suite Enhanced with Extended Security
At a Glance
The IBM z/OS SCLM Suite functions and new enhancements provide customers with competitive advantages.
For ordering, contact:
Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at 800-IBM-CALL (Reference: LE001).
IBM z/OS Software Configuration and Library Manager (SCLM) Suite allows customers to leverage the scalability, security, and reliability of the IBM zSeries to store, manage, and control the process of developing applications. The SCLM Suite enables centralized storage, management, and control of both e-business objects as well as legacy application components. The SCLM Suite consists of SCLM, a component of ISPF under OS/390® and z/OS, IBM Breeze for SCLM for z/OS, and IBM Cloud 9 for SCLM for z/OS. With this announcement, IBM introduces additional functions to the SCLM Suite with the inclusion of a new product and enhancements to existing SCLM Suite products via support.
Included in this announcement are:
The IBM z/OS SCLM Suite functions and new enhancements provide customers with competitive advantages:
IBM z/OS SCLM Suite provides an integrated solution allowing software configuration management for both traditional and e-business applications built around IBM's Software Configuration and Library Manager (SCLM), which is a part of ISPF, a component of the z/OS operating system. In addition to the basic SCLM component, integrated products in the SCLM Suite include:
Enhanced Access Control
IBM Enhanced Access Control for SCLM is a new addition to the SCLM Suite. Security interfaces and user exit points within IBM Enhanced Access Control for SCLM provide improved granularity and protection for SCLM data sets so authorized modifications can be made only by a native SCLM user. Enhanced Access Control allows the addition of new rules that specify exactly which programs can be used to access which data sets, thereby adding flexibility beyond that found in IBM Resource Access Control Facility (RACF) to define specific users' read or write access to specific documents. Programs, execution libraries, users, or user groups can also be defined with the use of wild cards. The Enhanced Access Control product provides an easy-to-use, CUA-compliant, menu-driven end-user interface to maintain the security rules needed for this support.
IBM Enhanced Access Control for SCLM augments RACF controls. After normal RACF security controls are applied, Enhanced Access Control for SCLM can be used to grant access when a specific set of applications like SCLM are used. The applications can even define various subfunctions of SCLM, such that, for example, an SCLM Promote may be allowed access whereas an SCLM Edit may be denied access.
Without IBM Enhanced Access Control for SCLM, SCLM users operating in a RACF environment must be granted UPDATE access to manipulate SCLM-managed data sets. Otherwise, they would receive RACF data set violations when performing various SCLM functions. However, the UPDATE access applies even if the data set is accessed using facilities other than SCLM, thus allowing access to potential users from facilities other than SCLM.
The central concept of IBM Enhanced Access Control for SCLM is that access to SCLM resources is provided when SCLM programs are used. This avoids the potential for accidental damage or unexpected changes to SCLM data sets resulting from updates using non-SCLM programs. The SCLM programs are described using Applications. The data sets to be controlled and their access rules are described using Profiles.
When IBM Enhanced Access Control for SCLM is active, it monitors RACF data set violations. If a violation occurs for a data set managed according to the Enhanced Access Control for SCLM profiles, then the defined access rules are used to assign access privileges. If sufficient access privilege is not defined, then a RACF data set violation occurs.
Like RACF, IBM Enhanced Access Control for SCLM has its own rules database that describes the conditions under which access is granted. These are contained in the Rule File, a VSAM KSDS that is administered via the ISPF Dialog. From these online panels, the IBM Enhanced Access Control for SCLM administrator can:
Products closely aligned with SCLM Suite are the IBM Merge Tool and the
IBM Migration Utility. The IBM Merge Tool is an ISPF-based merge tool
that allows project managers the ability to estimate and control parallel
development activities, and provides the tools developers need to
evaluate changes and merge code intelligently, controlling the process to
meet the organization's needs. The IBM Migration Utility provides users
with the capability to convert their CA-Easytrieve Plus programs to
standard COBOL. Users have the option to then move the COBOL under
library control and maintain COBOL, or continue to maintain their
applications in the powerful, intuitive Easytrieve language, converting
them to COBOL at run time.
Section 508 of the U.S. Rehabilitation Act
IBM Enhanced Access Control for SCLM is capable as of
October 18, 2002, when used in accordance with IBM's associated
documentation, of satisfying the applicable requirements of Section 508
of the Rehabilitation Act, provided that any assistive technology used
with the product properly interoperates with it.
Value Unit Based Pricing
Value Unit based pricing will help to align the prices of these products to the principle of the PSLC pricing curve which provides for a lower price per MSU (millions of service units per hour) for larger capacities.
There is also a price benefit when customers grow their capacity. Additional capacity will based on the number of Value Units (MSUs) the customer has already installed, for example, additional capacity will not be priced starting at the base with a higher price per unit but on the capacity that is already installed.
International Program License Agreement (IPLA) and Subscription and Support Considerations
IPLA licenses can be transferred from one machine to another within, but not limited to, an enterprise. The customer may aggregate the capacity for all the processors the product is operated on to achieve a more economic price. This will result in a single Proof of Entitlement. It is the customer's responsibility to manage the distribution of Value Units within the limits of the entitlement of the product license.
Subscription and Support must cover the same capacity as the product license entitlement. Subscription and Support will be available in the country in which the agreement is made.
The IBM z/OS SCLM Suite, including IBM Enhanced Access Control for SCLM for z/OS, provides SCLM customers with an OS/390- or z/OS-based repository for all enterprise application objects, including HTML, Java code, and documents as well as traditional application development objects. Software Change and Configuration Management (SCM) and package approval processing are provided on a platform-independent basis through standard browser networking technologies. The new IBM Enhanced Access Control product enhances the capabilities of the SCLM Suite by providing for additional protection of SCLM-managed application development projects.
IBM's z/OS SCLM Suite is the best choice for an attractively priced and fully functional centralized System/390® SCM solution that can support S/390® development as well as cross-platform Windows®, UNIX, and AS/400® development. It is a particularly desirable solution for customers that have traditionally performed application development on OS/390 or z/OS and now need to extend their development to additional object types (such as HTML and Java code required for the Web), as well as for additional development and target platforms.
Statement of Direction
In addition to providing improved access control, the SCLM Suite continues to tighten integration with related products. During the third quarter of 2002, IBM will add Cloud 9 integration with VisualAge Java Version 4. IBM plans to continue to explore support for additional Integrated Development Environments (IDEs), such as Visual Basic, Visual C++, and PowerBuilder.
Version Control Manager (VCM) Plug-ins have been developed to enable SCLM to WebSphere® Studio Enterprise Developer (WSED). These plug-ins have been integrated to work with the z/OS IDE component of WSED. This support will enable mainframe developers to easily use WSED with SCLM's powerful and secure SCM support. IBM intends to enhance Cloud 9, adding integration with both WebSphere Studio Application Developer (WSAD) and WSED.
All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice.
Product information is available through Offering Information (OITOOL) at:
The following printed publications are shipped with this program:
The IBM Publications Center:
The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card or customer number. A large number of publications are available online in various file formats, and they can all be downloaded free of charge.
The IBM Publications Notification System (PNS):
The PNS enables subscribers to set up profiles of interest by order
number or product number. PNS subscribers automatically receive e-mail
notifications of all new publications defined in their profiles. These
may then be ordered or downloaded via the Publications Center.
Displayable Softcopy Publications
IBM Enhanced Access Control for SCLM publications are offered in displayable softcopy form. The following publication is available:
The displayable manual is part of the basic machine-readable material.
This displayable manual can be used with the BookManager® READ licensed programs in any of the supported environments. Terms and conditions for use of the machine-readable files are shipped with the files.
Specified Operating Environment
Both of the following products are required at the level shipped with your choice of the above listed operating systems:
Detailed planning information is included in the IBM Enhanced Access Control for SCLM User's Guide .
The CFSW configurator stand-alone path for 5697-H59 will be updated to support price proposals on October 15, 2002. For 5697-H59, media is shipped only via Customized Offerings (ServerPac, Systempac®, and CBPDO). CFSW configuration and order entry capability will commence with CBPDO on October 15, 2002.
Value Unit Exhibit VUE007
Value Value Units/ Units/ Usage Level Minimum Maximum MSU HW Machine Base 1 3 1 MP3000 H30 6 PSLC/Level A 4 45 0.45 MP3000 H50 8 PSLC/Level B 46 175 0.36 MP3000 H70 12 PSLC/Level C 176 315 0.27 ESL Models 2 PSLC/Level D 316 + 0.2
The products in this announcement have one charge unit Value Units.
Value Units for IBM 9672 Processors will be based upon the full capacity of these systems. This is applicable to all S/390®-based systems that are measured on MSU capacity. Information on MSU capacities can be found in the IBM System/370, System/390®, and zSeries Machine Exhibit (Z125-3901).
Value Units for zSeries will be based upon full MSU capacity as defined in the Machine Exhibits.
There will be a tool available that provides support for transforming the MSU-based capacities of S/390 systems to new Value Units by calculating the applicable number of Value Units for a given number of MSUs.
Translation from MSUs to Value Units Example
Value MSUs Units/MSU Base 1-3 1 Tier A 4-45 0.45 Tier B 46-175 0.36 Tier C 176-315 0.27 Tier D 316+ 0.2
Note: For the actual translation from MSUs to Value Units for this product, see below.
If the customer has installed 1,200 MSUs, the applicable Value Units would be:
Translation from MSUs to Value Units
Value Units/ Value MSUs * MSU = Units Base 3 * 1 = 3.00 Tier A 42 * 0.45 = 18.90 Tier B 130 * 0.36 = 46.80 Tier C 140 * 0.27 = 37.80 Tier D 885 * 0.2 = 177.00 Total 1,200 284
When calculating the total number of Value Units, the sum is to be rounded up to the next integer.
Feature 1 Value Unit 0001 250 Value Units 0002
Note: For actual feature numbers, see below.
Value Units for Non-MSU-Based S/390 Processors
MP3000 Models H30 = 6.00 Value Units H50 = 8.00 Value Units H70 = 12.00 Value Units P/390, R/390, IBM 3006 = 2.00 Value Units
Basic License: To order, specify the program number, feature number 9001 for asset registration, and the one-time charge (OTC) feature number. Also specify the feature number of the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW.
OTC Medium Program Feature Feature Description Number Number Number Medium IBM Enhanced Access 5697-H59 5802 3480 Control for SCLM V1.1 Tape 1 Value Unit 0001 250 Value Units 0002
Subscription and Support: To receive voice technical support via telephone during normal business hours and future releases and versions at no additional charge, you must order Subscription and Support as part of the initial product order. The capacity of Subscription and Support (Value Units) must be the same as the capacity ordered for the product licenses.
To order, specify the support program number and feature number 9001 for asset registration. IBM is also providing Subscription and Support for these products via a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Support (IAAS). This offering:
Once Subscription and Support is ordered, the charges will renew automatically annually unless cancelled by the customer.
To decline, specify the support program number and the Decline (no charge) feature number listed below.
Annual Support Charge Medium Program Feature Feature Description Number Number Number Medium Subscription and Support 5697-H81 6676 Hardcopy for IBM Enhanced Access Pub Control for SCLM 1 Value Unit 0001 250 Value Units 0002 Decline (no charge) 0003
Product media is shipped only via Customized Offerings (for example, CBPDO, ServerPac, SystemPac). Noncustomized items (CDs, diskettes, source media, media kits) will continue to be shipped via the stand-alone product.
Terms and Conditions
Sub-Capacity Charges Terms and Conditions
IBM zSeries software charges at less than full machine capacity for eligible Data Management (DM) and Application Development (AD) Tools apply when z/OS is running in z/Architecture (64 bit) mode on a zSeries 900, no other MVS-based operating system is licensed to that server, and the required information is provided by the customer in accordance with the applicable terms.
Sub-capacity charges for an eligible AD or DM Tool is based on the z/OS product defined capacity. To obtain charges at less than full machine capacity for eligible AD and DM Tools, the customer is required to:
Sub-Capacity Charges for AD and DM Tools
To be eligible for sub-capacity charges for AD and DM Tools, the machine on which the AD and DM Tools are running must be eligible for WLC sub-capacity charges terms and conditions. The customer must have signed the Attachment for zSeries Workload License Charges Pre-ILM (Z125-6516) and submitted at least one Sub-Capacity Report to IBM as defined in the attachment.
With sub-capacity charges, the charge for an eligible AD or DM Tool is based on the z/OS product defined capacity. To obtain charges at less than full machine capacity for each eligible AD and DM Tool for each machine, the customer should:
Management of the Value Unit entitlements continues to be a customer responsibility. If one of the following occur on a machine to which AD or DM Tools are licensed, the customer must determine if additional Value Units and Subscription and Support need to be ordered for those tools to cover the increase:
The following agreement applies for maintenance and does not require customer signature:
These products are licensed under the IBM Program License Agreement (IPLA), the associated Agreement for Acquisition of Support, and the Addendum for Support (Z125-6312), which provides for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an ongoing recurring charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours) as well as access to updates, releases, and versions of the program as long as support is in effect. S/390 and zSeries IBM Operational Support Services Support Line is an option for those customers who desire added services.
Program Services: Base support for the products in this announcement is included as part of the one-time charge for the product and is provided by the IBM Support Center. This support is subject to the terms of the IBM IPLA contained in the program package. This base support includes resolution of defects in the IBM program. This support is provided via mail or fax and is available until the end of service date, October 31, 2004.
IBM is also providing Subscription and Support for these products via a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Support (IAAS). This offering:
To take full advantage of Subscription and Support, it must be ordered in the same quantity as the base product license.
Money-Back Guarantee: If for any reason you are dissatisfied with the program, return it within 30 days from the invoice date, to the party (either IBM or its reseller) from whom you acquired it, for a refund. This applies only to your first acquisition of the program.
For operating system software, the revised IBM Operational Support Services Support Line offering will provide support for those operating systems and associated products that are not available with the newly announced Software Maintenance offering. This will ensure total support coverage for your enterprise needs, including IBM and selected non-IBM products. For complete lists of products supported under both the current and revised Support Line offering, refer to our Web site at:
For additional information on the revised IBM Operational Support Services, refer to Services Announcement 601-023 , dated July 10, 2001.
Use Priority/Reference Code: LE001 Phone: 800-IBM-CALL Fax: 800-2IBM-FAX Internet: email@example.com Mail: IBM Atlanta Sales Center Dept. LE001 P.O. Box 2690 Atlanta, GA 30301-2690
You can also contact your local IBM Business Partner or IBM representative. To identify them, call 800-IBM-4YOU.
Note: Shipments will begin after the planned availability date.