IBM Security zSecure suite V1.13 extends application compliance management and audit reporting capabilities and helps simplify and reduce costs to administer IBM System z security

IBM United States Software Announcement 211-432
October 4, 2011


Table of contents
Overview Overview Publications Publications
Key prerequisites Key prerequisites Technical information Technical information
Planned availability date Planned availability date Ordering information Ordering information
Description Description Terms and conditions Terms and conditions
Product positioning Product positioning Prices Prices
Program number Program number Order now Order now


Top rule
At a glance
Bottom rule

IBM® Security zSecure suite V1.13 can help you enhance the security of mainframe systems.

  • Automates security analysis of IBM CICS® and IBM IMS™ transactions and programs
  • Allows you to improve data consolidation using Enrich Access Monitor
  • Allows annotating user ID displays with data from external human resource files such as department and employee number
  • Provides additional globalization enhancements
  • Automates determination of which SAF classes are being used by each active DB2®, CICS, or IMS subsystem
  • Allows you to add your own sensitivity classification, audit concern, and priority to data set names and general resources
  • Supports currency with z/OS® V1R13, ACF2 R14 and R15, CICS V4R2, and Top Secret R12, R14, and R15
  • Extends integration with Communications Server and provides various interface improvements
For ordering, contact Your IBM representative or an IBM Business Partner.
For more information contact the Americas Call Centers at
800-IBM-CALL (426-2255).
 
Reference: LE001


Back to topBack to top
 
Top rule
Overview
Bottom rule

IBM Security zSecure suite V1.13 consists of multiple individual components designed to help you administer your mainframe security server, monitor for threats, enforce policy compliance, audit usage and configurations, and assist in compliance management and audit reporting.

IBM Security zSecure Admin, Visual, and CICS Toolkit provide administrative, provisioning, and management components that can significantly reduce administration time, effort, and costs, and help improve productivity and response time, as well as help reduce training time for new administrators.

IBM Security zSecure Audit, Alert, and Command Verifier provide security policy enforcement, audit, monitoring and compliance management components. These offerings help ease the burden of compliance audits, can improve security and incident handling, and can increase overall operational effectiveness.

IBM Security zSecure suite V1.13 enhancements

New Security zSecure suite V1.13 capabilities offer enhancements for DB2, CICS, and IMS application security auditing.

  • Automates security analysis of CICS and IMS transactions and programs
  • Provides automated determination of which System Authorization Facility (SAF) classes are being used by each active IBM DB2, IBM CICS, or IBM IMS subsystem
  • Enhances Access Monitor and allows you to improve data consolidation
  • Allows annotating user ID displays with data from external human resource files such as department and employee number
  • Adds globalization enhancements
  • Allows addition of your own sensitivity classification, audit concern, and priority to data set names and general resources
  • Supports currency with z/OS V1R13, ACF2 R14 and R15, CICS V4R2, and Top Secret R12, R14, and R15
  • Extends integration with Communications Server and provides various interface improvements

Additional offerings include:

  • IBM Tivoli® Compliance Insight Manager Enabler for z/OS
  • IBM Tivoli zSecure Manager for RACF® z/VM® V1.11


Back to topBack to top
 
Top rule
Key prerequisites
Bottom rule

For details, refer to the Hardware requirements and Software requirements sections.



Back to topBack to top
 
Top rule
Planned availability date
Bottom rule

November 11, 2011



Back to topBack to top
 
Top rule
Description
Bottom rule

The IBM Security zSecure family of products (formerly Tivoli zSecure) provides a user-friendly interface for RACF, with extensive auditing and monitoring capabilities for the enterprise security hub. It can result in more efficient and effective administration and compliance to defined security policies.

Helps free administrators to focus on security

While preventing security breaches is paramount, administrators are frequently bogged down with tedious, time-consuming, day-to-day tasks that divert their attention from security issues. The IBM Security zSecure suite offers a range of products designed to help reduce administration time and enable valuable mainframe resources to focus on improving security quality.

IBM Security zSecure Admin is a leading security software program that enables efficient and effective IBM RACF administration, typically using significantly less resources. By putting a user-friendly layer over your RACF databases, you can quickly enter and process administrative commands, generate custom reports, and clean up databases. By implementing a repeatable process for security management, Security Secure Admin can help you reduce errors and improve the overall quality of services.

RACF administrators can create a mirrored offline copy of the RACF database that can be used to check and verify configuration changes, without affecting the production database. This ability to test changes and review the results before implementing them can reduce the risks of introducing errors into the production database, through human error, and possible outages of security.

RACF database clean-up function addresses the problem of obsolete authorizations, for example, by removing authorizations that have not been used for a year, which is an administrative issue that is increasingly unacceptable from a compliance, governance, and risk perspective. This pertains to unused permits (user and group authorizations) as well as unused connects (group membership). At the same time, if the authorizations are obsolete, it is likely that the corresponding resources are equally obsolete and should also be cleaned up. Obsolete resources on the system represent a security risk because they could be reused for another purpose, and inappropriate access might be granted by virtue of the obsolete authorizations lingering in the security database.

Removal of unused profiles is also possible but requires a manual review step since there exists reasons for the existence for a profile that the program cannot know. The RACF Cleanup function can be used to reduce the overhead of the processing around yearly authorization reviews demanded by some regulations.

IBM Security Secure Visual can reduce the need for expensive, RACF-trained expertise through a Microsoft® Windows-based GUI for RACF administration. With the ability to establish a secure connection directly with RACF, Security Secure Visual is ideal for decentralizing RACF administration or enabling central security administration from outside Interactive System Productivity Facility/Time Sharing Option (ISPF/TSO).

Tracks security events and helps prevent exposures to compliance requirements

Over the past decade, the number of requirements organizations must comply with has increased dramatically. Keeping up with the demands for audit and controls documentation, while also trying to prevent security breaches, can be overwhelming. Security zSecure suite delivers auditing, monitoring, and compliance management solutions designed to help reduce security exposures.

IBM Security zSecure CICS Toolkit adds mainframe administration capabilities to the CICS environment, such as password resets and authorization management. Its easy-to-use menu enables users to stay within the CICS application, to issue security commands to the mainframe, rather than forcing them into another environment. Your field administrators can quickly issue commands through a user-friendly menu for functions such as password resets for failed user logins and user additions.

If you have an application on your web server that communicates with CICS on your mainframe, your CICS application can use the advanced COBOL API capabilities in Security zSecure CICS Toolkit to execute select RACF security functions. Such functions could be verification of a user ID and password entered on the web interface against the RACF database or retrieval of information about a user ID and its privileges from the RACF database that gets passed on to the web application.

You can easily customize Security zSecure CICS Toolkit screens by using the API, which can be contacted by any CICS program with a standard CICS command area. Use the API to tailor the look of your screens to the requirements of a specific installation and show as little or as much as you want to your decentralized administrators. The API facilitates access checks of more than 2,000 resources, enabling you to easily replace an application's internal security with RACF security and helping to significantly improve the application's performance. Security zSecure CICS Toolkit API can centralize - in the RACF database - the security of (homegrown) applications built for CICS.

IBM Security zSecure Audit delivers a mainframe compliance management and audit solution that enables you to quickly analyze and report on mainframe events, and automatically detect security exposures through extensive status auditing. zSecure Audit provides extended and independent monitoring to track and assess the consistency of security relevant changes to z/OS across systems and the compliance of those changes in comparison to a best practice knowledge base.

Unlike offerings that only report on a copy of a database, Security zSecure Audit allows you to access live security data on mainframes running IBM z/OS with RACF, ACF2, or Top Secret delivering audit accuracy. Analyzing the active z/OS system control blocks can help you quickly identify possible issues that could have a negative effect on the stability of security.

After auditing and analyzing the z/OS operating system, Security zSecure Audit prioritizes and highlights security concerns. It provides displays to view definitions, tables, exits, and other vital z/OS information and identifies problems or potential problems. Issues are ranked by audit priority, with a number indicating the relative impact of a problem.

Security zSecure Audit can also provide extensive audit and analysis capabilities beyond z/OS systems, including the ability to audit UNIX® security definitions on the mainframe and automatically find problems within the security definitions in the UNIX subsystem. In addition, Security zSecure Audit provides audit support for Linux® on System z®, IBM DB2 security events, IBM CICS and IBM IMS security audit events, and audit security events from IBM Security Key Lifecycle Manager, WebSphere® Application Server, IBM Tivoli OMEGAMON® XE on z/OS, Hierarchical Storage Manager, IBM Communication Server network configuration for TCP/IP, and partition dataset extended (PDSE) member level auditing.

Extended monitoring and alerting of security events from IBM Security Key Lifecycle Manager, IBM Tivoli OMEGAMON XE on z/OS (V4R1 and V4R2), IBM DFSMS™ Removable Media Manager (DFSMSrmm™), and IBM WebSphere Application Server V7 assist in providing an improved view of the over all security within the mainframe environment. The technology lets you create standard and customized reports that can be generated in Extensible Markup Language (XML) format and used in databases and reporting tools.

Security zSecure Audit also lets you send Simple Network Management Protocol (SNMP) messages to an enterprise management console for policy exceptions or violations that indicate a security breach or weakness. This capability is provided for RACF, CA Top Secret, and CA ACF2 environments.

IBM Security zSecure Alert offers a real-time mainframe threat monitoring solution that allows you monitor intruders and identify misconfigurations that could hamper your compliance efforts. It goes beyond conventional intrusion detection solutions to support intrusion prevention by taking countermeasures via automatically generated commands.

In addition, Security zSecure Alert enables you to quickly determine unauthorized logons and attempts, user behavior that violates security policy, and when your core systems are at risk. With this information readily in hand, you can help identify misconfigurations before they can be exploited. This capability is provided for RACF and CA ACF2 environments.

IBM Security zSecure Command Verifier is a robust policy enforcement solution that can help enforce mainframe compliance to company policies by preventing erroneous commands. As a result, it helps increase control and decrease security risks and cleanup costs. Running in the background, Security zSecure Command Verifier verifies RACF commands against your company's policies and procedures. When commands are entered, it verifies whether the commands comply with security policies and blocks or, optionally, adjusts the ones that do not comply.

IBM Tivoli Compliance Insight Manager Enabler for z/OS provides a link from zSecure Audit to the Tivoli Security Information and Event Manager tool so that the mainframe audit information is included in the enterprise dashboard view.

To address currency with the latest releases of z/OS and RACF, Security zSecure suite includes support for new RACF capabilities. Security zSecure Admin, Audit, and Command Verifier support administration of, reporting on, and use of RACF commands and keywords.

Bringing it all together

IBM Security zSecure suite is a valuable part of managing mainframe security as a process that helps meet the needs of auditors and the business itself. These offerings are the result of a long-term commitment to innovation on the mainframe and to enabling you to improve and simplify mainframe security audit and administration. Through a broad range of offerings, Security zSecure suite helps you address your key mainframe challenges, such as:

  • Audit and compliance management
    • Report on questionable system configuration options and dangerous settings of privileged users.
    • Integrate with Linux on System z, IBM DB2, IBM CICS, IBM IMS, IBM Tivoli Key Lifecycle Manager, IBM WebSphere Application Server V7, and IBM Tivoli OMEGAMON XE on z/OS for security audit monitoring and reporting.
    • Measure and verify the effectiveness of mainframe security and security policies.
  • User and security administration
    • Include centralized and decentralized management and provision of users, profiles, and resources.
    • Constantly monitor crucial users and data for misuse.
  • Include security risk detection and avoidance:
    • Can reduce operational costs and achieve faster incident detection.
    • Generate alerts with instant reports about RACF, IBM System Management Facilities (SMF), IBM z/OS, IBM DB2, IBM CICS, and the UNIX subsystem.

Additional offerings:

  • IBM Tivoli Compliance Insight Manager Enabler for z/OS

    IBM Security zSecure suite allows you to submit mainframe security information into an enterprise audit and compliance management solution, through the seamless integration with Tivoli Security Information and Event Manager. Combining mainframe data with that from other operating systems, applications, and databases, Tivoli Security Information and Event Manager provides the ability to capture log data, interpret that data through sophisticated log analysis and communicate results in an efficient, streamlined manner for full enterprise-wide audit and compliance reporting. Tivoli Compliance Insight Manager Enabler for z/OS provides the event source Connection to supply the mainframe information into the enterprise tool.

  • IBM Tivoli zSecure Manager for RACF z/VM V1.11

    IBM Tivoli zSecure Manager for RACF z/VM provides administrators with tools to help unleash the potential of your mainframe system, enabling efficient and effective RACF administration and auditing of the z/VM environment including Linux on System z, while helping use fewer resources. By automating many recurring auditing and system administration functions, IBM Tivoli zSecure Manager for RACF z/VM can help you maximize IT resources, reduce errors, improve quality of services, and demonstrate compliance.

Accessibility by people with disabilities

A U.S. Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at

http://www.ibm.com/able/product_accessibility/index.html

Business Partner information

If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld® ID and password are required (use IBM ID).

https://www.ibm.com/partnerworld/mem/sla.jsp?num=211-432


Back to topBack to top
 
Top rule
Product positioning
Bottom rule

IBM Security zSecure suite with IBM Tivoli Security Information and Event Manager

Security zSecure suite leverages the capabilities of Tivoli Security Information and Event Manager to enable inclusion of mainframe reporting on RACF, IBM CICS, IBM DB2, CA ACF2, and CA Top Secret into Tivoli Security Information and Event Manager enterprise-wide compliance dashboard and reporting, so that users can view the status of their enterprise security hub along with the rest of their environment. For more details on Tivoli Security Information and Event Manager, refer to Software Announcement 210-068, dated February 23, 2010.

IBM Security zSecure Alert with IBM Tivoli Security Information and Event Manager

Tivoli Security Information and Event Manager and Security zSecure Alert are companion products that deliver a comprehensive view of the mainframe threats and incidents. Tivoli Security Information and Event Manager manages security operations effectively and efficiently with centralized security event correlation, prioritization, investigation, and respose.

IBM Security zSecure with RACF

Your investment in RACF may be enhanced with the addition of Security zSecure suite, which provides integrated security audit and compliance management and administration for z/OS and RACF.

Mainframe auditing - For data center auditors, security managers, system programmers, and IT managers who need to monitor mainframe events and incidents, help reduce security vulnerability, and help enforce security policy compliance and generate audit reports, Security zSecure suite offers a mainframe audit solution that provides analysis and reporting of mainframe events and automatic detection of exposures through extensive status auditing.

Mainframe security administration - For RACF administrators and IT managers who need to simplify and automate routine administrative tasks and decentralize administration control, Security zSecure suite offers a mainframe administration suite that enables efficient and effective RACF administration typically using less resources, and providing richer functionality and helping address compliance initiatives. And by implementing a repeatable process for security management, Security zSecure suite can help you reduce errors and improve the overall quality of services.



Back to topBack to top
 
Top rule
Program number
Bottom rule

 
Program             Program
number      VRM     name

5655-T01    1.13    IBM Security zSecure Admin
5655-T02    1.13    IBM Security zSecure Audit
5655-T05    1.13    IBM Security zSecure CICS Toolkit
5655-T07    1.13    IBM Security zSecure Command Verifier
5655-T09    1.13    IBM Security zSecure Visual
5655-T11    1.13    IBM Security zSecure Alert
5655-T15    1.13    IBM Tivoli Compliance Insight Manager Enabler
                      for z/OS

Product identification number

 
                     Subscription and
Program PID number   Support PID number

5655-T01             5655-T03
5655-T02             5655-T04
5655-T05             5655-T06
5655-T07             5655-T08
5655-T09             5655-T10
5655-T11             5655-T12
5655-T15             5655-T16


Back to topBack to top
 
Top rule
Education support
Bottom rule

Comprehensive education for IBM Tivoli products is offered through Worldwide Tivoli Education Delivery Services. A wide range of training options are available, including classes led by instructors, learning on demand, on-site training, and blended learning solutions.

For additional information, visit

http://www-306.ibm.com/software/tivoli/education/


Back to topBack to top
 
Top rule
Offering Information
Bottom rule

Product information is available via the Offering Information website

http://www.ibm.com/common/ssi


Back to topBack to top
 
Top rule
Publications
Bottom rule

No hardcopy publications are shipped with these products.

Unlicensed publications

Unlicensed publications are available on the Security zSecure Documentation CD provided with the products, with the exception of the Security zSecure Quick Reference and the Security zSecure Release Information. These publications are available only from the Security zSecure Information Center website at general availability.

Table 1 lists the unlicensed Security zSecure suite V1.13 publications, which are available in English. These publications can be viewed and downloaded from the Security zSecure Information Center website at general availability.

National language unlicensed publications will be available from the Security zSecure Information Center website 30 days after general availability.

Security zSecure Information Center website

http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.zsecure.doc_1.13/welcome.html

Table 1: English unlicensed publications

Title                                                Order number

IBM Security zSecure
      Audit for ACF2 Getting Started                 GI11-9163-00
      Admin and Audit for RACF Getting Started       GI11-9162-00
      Alert User Reference Manual                    SC14-7666-00
      Visual Client Manual                           SC14-7669-00
      CICS Toolkit User Guide                        SC14-7671-00
      Command Verifier User Guide                    SC14-7670-00
      CARLa-Driven Components Installation and       SC14-7662-00
        Deployment Guide
      Messages Guide                                 SC14-7667-00
      Quick Reference                                SC14-7668-00

Licensed publications

Table 2 lists the Security zSecure suite V1.13 licensed publications, which are available in English. These publications are only available to licensed users and are included on the Security zSecure Documentation CD provided with your product order.

To obtain an electronic copy of a licensed publication, send an email requesting the publication to tivzos@us.ibm.com. Include your IBM customer number, form number for each publication, and contact information. You will be contacted with further instructions for fulfilling your order.

For an additional charge, you can order a manufactured documentation CD from the IBM Publications Center. For ordering instructions, go to the Security zSecure Information Center website at

http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.zsecure.doc_1.13/welcome.html

Click the link entitled Obtaining a licensed publication.

National language versions of the licensed documentation are available on an updated version of the Security zSecure Documentation CD after general availability.

Table 2: English Licensed publications

Title                                            Order number

IBM Security zSecure
  Admin and Audit for RACF User Reference Manual LC14-7663-00
  Audit for ACF2 User Reference Manual           LC14-7664-00
  Audit for Top Secret User Reference Manual     LC14-7665-00
 
IBM Security zSecure Suite Documentation CD      LCD7-1387-09

IBM Publications Center

http://www.ibm.com/shop/publications/order

The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are by credit card (in the U.S.) or customer number for 20 countries. A large number of publications are available online in various file formats, and they can all be downloaded by all countries, free of charge.



Back to topBack to top
 
Top rule
Technical information
Bottom rule

Specified operating environment

Hardware requirements

Minimum and recommended processor, disk space, and memory requirements for Security zSecure suite V1.13:

               Minimum    Recommended

Processor      Z800       IBM System z9® or z10™ Enterprise Class (EC)
                          or z9™ or z10 Business Class (BC)
 
Disk space     300 MB     450 MB
 
Memory           1 GB       2 GB
Software requirements

IBM Security zSecure suite V1.13 is supported in the following environments:

  • z/OS V1R11
  • z/OS V1R12
  • z/OS V1R13

Security zSecure products that include features for CA ACF2 and CA Top Secret support CA ACF2 R12, R14, and R15 and CA Top Secret R12, R14, and R15.

The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a readme file, or other information published by IBM, such as an announcement letter. Documentation and other program content may be supplied only in the English language.

Planning information

Packaging

Security zSecure suite products are distributed with:

  • International Program License Agreement (Z125-3301)
  • License Information document
  • Tape
  • Publications (refer to the Publications section)

Security, auditability, and control

IBM Security zSecure suite V1.13 uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.



Back to topBack to top
 
Top rule
Software Services
Bottom rule

IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.

To learn more about IBM Software Services or to contact a Software Services sales specialist, visit

http://www.ibm.com/software/sw-services/


Back to topBack to top
 
Top rule
Licensing metric definitions and pricing examples
Bottom rule

Licensing metric definitions

Millions of Service Units (MSUs)

An MSU is defined as millions of Central Processing Unit (CPU) service units per hour; the measure of capacity used to describe the computing power of the hardware processors on which S/390® or System z software runs. Processor MSU values are determined by the hardware vendor, IBM, or Software Compatible Vendors (SCVs).

For more detailed information about System z software pricing, visit

https://www-03.ibm.com/systems/z/resources/swprice/zipla/index.html

Value Units

A Value Unit (VU) is the metric by which this software's license entitlements are obtained. Value Unit entitlements are based on the quantity of a specific designated measurement, for example MSUs, users, engines, tape drives, for the given software. The appropriate number of entitlements must be obtained for the appropriate number of Value Units required for your environment as defined by the specific software terms. The Value Unit entitlements are specific to the software and may not be exchanged, interchanged, or aggregated with Value Unit entitlements of another software program.

System z software pricing examples (MSU based)

The following pricing example should be used to determine required license entitlements for the following software products for System z.

Consider a System z server with 1,000 MSUs

All products for this example employ Value Unit slope Value Unit Exhibit 020 (VUE020). Translation from MSUs to Value Units:

VUE020

           MSUs          Value Units/MSU
 
Base       1-3           1.00
Tier A     4-45           .15
Tier B     46-175         .08
Tier C     176-315        .04
Tier D     316+           .03

If the customer has installed 1,000 MSUs, the applicable number of Value Units will be:

                 Value
Level    MSUs    Units/MSU   Value Units
 
Base       3     1.00         3.00
Tier A    42     0.15         6.30
Tier B   130     0.08        10.40
Tier C   140     0.04         5.60
Tier D   685     0.03        20.55
 
Total  1,000                 45.85

When calculating the total number of Value Units, the sum is rounded up to the next integer. In this example, the customer will need to license 46 Value Units.

Note: IBM RACF for z/OS (a separate IBM MLC offering) or a comparable competitive offering (CA ACF2 or CA Top Secret) is a prerequisite for IBM Security zSecure suite. For more information on RACF, refer to

http://www.ibm.com/racf

Scenario 1 - MSU-based pricing

Transaction 1

Enterprise ABC initially wants to work with the following system configuration.

On one System z server with 1,000 MSUs and they want to run IBM Security zSecure Audit and IBM Security zSecure Alert. The same MSU to Value Unit conversion calculation applies to both Security zSecure Audit and Security zSecure Alert components:

                 Value
Level    MSUs    Units/MSU   Value Units
 
Base       3     1.00         3.00
Tier A    42     0.15         6.30
Tier B   130     0.08        10.40
Tier C   140     0.04         5.60
Tier D   685     0.03        20.55
 
Total  1,000                 45.85

The customer must purchase 46 Value Units for Security zSecure Audit and 46 Value Units for Security zSecure Alert.

Transaction 2

After the initial purchase, enterprise ABC wants to expand their use of IBM Security zSecure suite to include IBM Security zSecure Command Verifier, IBM Security zSecure Admin, and IBM Security zSecure Visual, along with IBM Tivoli Compliance Insight Manager Enabler for z/OS. Tivoli Compliance Insight Manager Enabler for z/OS can be ordered with Security zSecure suite at no charge. In addition, entitlements for IBM Tivoli Security Information and Event Manager and z/OS event sources must be purchased through distributed pricing structures.

The same calculation to convert MSUs to Value Units applies to each of above mentioned components: Security zSecure Command Verifier, Security zSecure Admin, Security zSecure Visual, and Tivoli Compliance Insight Manager Enabler for z/OS.

                 Value
Level    MSUs    Units/MSU   Value Units
 
Base       3     1.00         3.00
Tier A    42     0.15         6.30
Tier B   130     0.08        10.40
Tier C   140     0.04         5.60
Tier D   685     0.03        20.55
 
Total  1,000                 45.85

The customer must purchase 46 Value Units for each of Command Verifier, Admin, Visual, and Tivoli Compliance Insight Manager Enabler for z/OS. (Tivoli Compliance Insight Manager Enabler for z/OS is no charge, but the customer must purchase at $0 price and hold entitlements.)



Back to topBack to top
 
Top rule
Ordering information
Bottom rule

The programs in this announcement all have Value Unit-based pricing.

Program
number     Program name                               Value Unit exhibit

5655-T01   IBM  Security zSecure Admin                VUE020
5655-T02   IBM  Security zSecure Audit                VUE020
5655-T05   IBM  Security zSecure CICS Toolkit         VUE020
5655-T07   IBM  Security zSecure Command Verifier     VUE020
5655-T09   IBM  Security zSecure Visual               VUE020
5655-T11   IBM  Security zSecure Alert                VUE020
5655-T15   IBM  Tivoli Compliance Insight Manager     VUE020
               Enabler for z/OS

For each System z IPLA program with Value Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity. Your required license capacity is based upon the following factors:

  • The System z IPLA program you select
  • The applicable Value Unit Exhibit
  • The applicable terms
  • Whether your current mainframes are full capacity or sub-capacity

Value Unit exhibit VUE020

 
                         Value
Level    Minimum Maximum Units/MSU
 
Base       1       3     1
Tier A     4      45     0.15
Tier B    46     175     0.08
Tier C   176     315     0.04
Tier D   316       +     0.03

Value Units for mainframes without MSU ratings:

 
               Value
HW             Units/machine
 
MP3000 H30     3
MP3000 H50     4
MP3000 H70     6
ESL Models     1

Ordering z/OS through the Internet

ShopzSeries provides an easy way to plan and order your z/OS ServerPac or CBPDO. It will analyze your current installation, determine the correct product migration, and present your new configuration based on z/OS. Additional products can also be added to your order (including determination of whether all product requisites are satisfied). ShopzSeries is available in the US and several countries in Europe. In countries where ShopzSeries is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order via the traditional IBM ordering process. For more details and availability, visit the ShopzSeries website at

http://www14.software.ibm.com/webapp/ShopzSeries/ShopzSeries.jsp

Current licensees

Current licensees, with support in effect, will receive instructions on how to order this update.

Current licensees of Security zSecure suite V1.13 can order the new distribution medium via MES by specifying the desired distribution medium feature number.

New licensees

Orders for new licenses will be accepted now.

Shipment will begin on the planned availability date.

Basic license

This table should be used for all Security zSecure PIDs

 
VUE020    MSUs             Value Units/MSU

Base        1-3            1.00
Tier A      4-45           0.15
Tier B     46-175          0.08
Tier C    176-315          0.04
Tier D    316+             0.03

To order, specify the program product number and the appropriate license or charge option. Also, specify the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW.

Ordering information for Value Unit pricing - 5655-T01

Program name:  IBM Security zSecure Admin V1.13
Program PID:  5655-T01
 
Entitlement                                 License option/
identifier   Description                    Pricing metric

S01471B      zSecure Admin                  Basic OTC, per Value Unit
 
 
Orderable supply ID    Language                   Distribution medium

S0166BV                Multilingual               3590 tape cartridge
Subscription and Support PID:  5655-T03
 
Entitlement                          License option/
identifier   Description             Pricing metric

S01471M      zSecure Admin S&S       Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
                                     per MSU SW S&S registration
 
Orderable supply ID    Language                  Distribution medium
-
S015T26                Multilingual              Hardcopy publication


Ordering information for On/Off Capacity on Demand (On/Off CoD)

IBM Security zSecure Admin is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.

Program name:  IBM Security zSecure Admin V1.13
Program PID:  5655-T01
 
Entitlement                          License option/
identifier      Description          Pricing metric

S01471B         zSecure Admin        Basic OTC, per MSU-day TUC

Ordering information for Value Unit Pricing - 5655-T02

Program name:  IBM Security zSecure Audit V1.13
Program PID:  5655-T02
 
Entitlement                                 License option/
identifier   Description                    Pricing metric

S01471C      RACF                           Basic OTC, per Value Unit
S01471D      ACF2                           Basic OTC, per Value Unit
S01471F      Top Secret                     Basic OTC, per Value Unit

Orderable supply ID    Language/Description       Distribution medium

S0166BZ                Multilingual RACF          3590 tape cartridge
S0166BX                Multilingual ACF2
S0166BW                Multilingual Top Secret 
Subscription and Support PID:  5655-T04
 
Entitlement                          License option/
identifier   Description             Pricing metric

S01471N      RACF S&S                Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
                                     per MSU SW S&S registration
 
S01471P      ACF2 S&S                Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
                                     per MSU SW S&S registration
 
S01471R      Top Secret S&S          Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
                                     per MSU SW S&S registration
 
 
Orderable supply ID    Language/Description      Distribution medium

S015TT2                Multilingual RACF         Hardcopy publication
S015TT3                Multilingual ACF2
S015TT4                Multilingual Top Secret


Ordering information for On/Off Capacity on Demand (On/Off CoD)

IBM Security zSecure Audit is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.

Program name:  IBM Security zSecure Audit V1.13
Program PID:  5655-T02
 
Entitlement                          License option/
identifier      Description          Pricing metric

S01471C         RACF                 Basic OTC, per MSU-day TUC
S01471D         ACF2                 Basic OTC, per MSU-day TUC
S01471F         Top Secret           Basic OTC, per MSU-day TUC

Ordering information for Value Unit pricing - 5655-T05

Program name:  IBM Security zSecure CICS Toolkit V1.13
Program PID:  5655-T05
 
Entitlement                                 License option/
identifier   Description                    Pricing metric

S01471S      zSecure CICS Toolkit           Basic OTC, per Value Unit
 
 
Orderable supply ID    Language/Description       Distribution medium

S0166C0                Multilingual               3590 tape cartridge 
Subscription and Support PID:  5655-T06
 
Entitlement                          License option/
identifier   Description             Pricing metric

S01472T      zSecure CICS Toolkit    Basic ASC, per Value Unit SW S&S
             S&S                     no charge, decline SW S&S
                                     per MSU SW S&S registration 
 
Orderable supply ID    Language/Description      Distribution medium

S015TP6                 Multilingual             Hardcopy publication

Ordering information for On/Off Capacity on Demand (On/Off COD)

IBM Security zSecure Audit is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.

Program name:  IBM Security zSecure CICS Toolkit V1.13
Program PID:  5655-T05
 
Entitlement                          License option/
identifier      Description          Pricing metric

S01471S         zSecure CICS         Basic OTC, per MSU-day TUC
                Toolkit

Ordering information for Value Unit pricing - 5655-T07

Program name:  IBM Security zSecure Command Verifier V1.13
Program PID:  5655-T07
 
Entitlement                                 License option/
identifier   Description                    Pricing metric

S01471T      zSecure Command Verifier       Basic OTC, per Value Unit
 
 
Orderable supply ID    Language                   Distribution medium

S0166C1               Multilingual                3590 tape cartridge
Subscription and Support PID:  5655-T08
 
Entitlement                          License option/
identifier   Description             Pricing metric
-
S01471V      zSecure Command         Basic ASC, per Value Unit SW S&S
             Verifier S&S            no charge, decline SW S&S
                                     per MSU SW S&S registration
 
Orderable supply ID    Language                  Distribution medium

S015TPD                Multilingual              Hardcopy publication 

Ordering information for On/Off Capacity on Demand (On/Off CoD)

IBM Security zSecure Command Verifier is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.

Program name:  IBM Security zSecure Command Verifier V1.13
Program PID:  5655-T07
 
Entitlement                          License option/
identifier      Description          Pricing metric

S01471T         zSecure Command      Basic OTC, per MSU-day TUC
                Verifier

Ordering information for Value Unit pricing - 5655-T09

Program name:  IBM Security zSecure Visual V1.13
Program PID:  5655-T09
 
Entitlement                                 License option/
identifier   Description                    Pricing metric

S01471X      zSecure Visual                 Basic OTC, per Value Unit
 
 
Orderable supply ID    Language                   Distribution medium

S0166C2                Multilingual               3590 tape cartridge
Subscription and Support PID:  5655-T10
 
Entitlement                          License option/
identifier   Description             Pricing metric

S014721      zSecure Visual S&S      Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
                                     per MSU SW S&S registration
 
 
Orderable supply ID    Language                  Distribution medium

S015TPX                Multilingual              Hardcopy publication
 

Ordering information for On/Off Capacity on Demand (On/Off CoD)

IBM Security zSecure Visual is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.

Program name:  IBM Security zSecure Visual V1.13
Program PID:  5655-T09
 
Entitlement                          License option/
identifier      Description          Pricing metric

S01471X         zSecure Visual       Basic OTC, per MSU-day TUC

Ordering information for Value Unit pricing - 5655-T11

Program name:  IBM Security zSecure Alert V1.13
Program PID:  5655-T11
 
Entitlement                                 License option/
identifier   Description                    Pricing metric

S014725      RACF                           Basic OTC, per Value Unit
S014728      ACF2                           Basic OTC, per Value Unit
 
 
Orderable supply ID    Language/Description       Distribution medium

S0168RT                Multilingual RACF         3590 tape cartridge
S0168RV                Multilingual ACF2
Subscription and Support PID:  5655-T12
 
Entitlement                          License option/
identifier   Description             Pricing metric

S014733      RACF S&S                Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
                                     per MSU SW S&S registration
 
S014736      ACF2 S&S                Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
                                     per MSU SW S&S registration
 
 
Orderable supply ID    Language/Description      Distribution medium

S015TPZ                Multilingual RACF         Hardcopy publication
S015TR0                Multilingual ACF2
 

Ordering information for On/Off Capacity on Demand (On/Off CoD)

IBM Security zSecure Alert is eligible for On/Off CoD with a temporary use charge calculated based on MSUs per-day usage.

Program name:  IBM Security zSecure Alert V1.13
Program PID:  5655-T11
 
Entitlement                          License option/
identifier      Description          Pricing metric
-
S014725         RACF                 Basic OTC, per MSU-day TUC
S014728         ACF2                 Basic OTC, per MSU-day TUC 

Ordering information for Value Unit pricing - 5655-T15

Program name:  IBM Tivoli Compliance Insight Manager Enabler for z/OS
V1.11
Program PID:  5655-T15
 
Entitlement                                 License option/
identifier   Description                    Pricing metric

S01473W      RACF                           Basic OTC, per Value Unit
S014748      ACF2                           Basic OTC, per Value Unit
S014749      Top Secret                     Basic OTC, per Value Unit
S01474K      DB2                            Basic OTC, per Value Unit
S015TNJ      CICS                           Basic OTC, per Value Unit
 
Orderable supply ID    Language/Description       Distribution medium

S0166C7                Multilingual RACF          3590 tape cartridge
S0166C4                Multilingual ACF2
S0166C5                Multilingual Top Secret
S0166C6                Multilingual DB2
S0166C8                Multilingual CICS 
Subscription and Support PID:  5655-T16
 
Entitlement                          License option/
identifier   Description             Pricing metric

S01473K      RACF S&S                Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
 
S01474B      ACF2 S&S                Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
  
S01474C      Top Secret S&S          Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
  
S01474W      DB2 S&S                 Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
 
S015TNK     CICS S&S                 Basic ASC, per Value Unit SW S&S
                                     no charge, decline SW S&S
  
Orderable supply ID    Language/Description      Distribution medium

S015TNS                Multilingual RACF         Hardcopy publication
S015TNR                Multilingual ACF2
S015TNP                Multilingual Top Secret
S015TNN                Multilingual DB2
S015TNM                Multilingual CICS

Subscription and Support

Subscription and Support must be ordered to receive voice technical support via telephone during normal business hours, and future releases and versions, at no additional charge. The capacity of Subscription and Support (for example, Value Units or number of processors) must be the same as the capacity ordered for the product licenses.

To order, specify the Subscription and Support program product number and the appropriate license or charge option.

IBM is also providing Subscription and Support for these products, via a separately purchased offering, under the terms of the IBM International Agreement for Acquisition of Support Maintenance (IAASM). This offering:

  • Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
  • Entitles customers to future releases and versions, at no additional charge. Note that the customer is not entitled to new products.

When Subscription and Support is ordered, the charges will automatically renew annually unless cancelled by the customer.

Customized Offerings

Product deliverables are shipped only via CBPDO, ServerPac, SystemPac®.

CBPDO and ServerPac are offered for Internet delivery in countries where ShopzSeries product ordering is available. Internet delivery reduces software delivery time and allows you to install software without the need to handle tapes. For more details on Internet delivery, refer to the ShopzSeries help information at

http://www.software.ibm.com/ShopzSeries

You choose the delivery method when you order the software. IBM recommends Internet delivery. In addition to Internet and DVD, the supported tape delivery options for CBPDO, ServerPac, and SystemPac, include:

  • 3590
  • 3592

Most products can be ordered in ServerPac and SystemPac the month following their availability on CBPDO. z/OS can be ordered via all three offerings at general availability. Production of software product orders will begin on the planned general availability date.

  • CBPDO shipments will begin one week after general availability.
  • ServerPac shipments will begin two weeks after general availability
  • SystemPac shipments will begin four weeks after general availability due to additional customization, and data input verification.


Back to topBack to top
 
Top rule
Terms and conditions
Bottom rule

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage® Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

Licensing

IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use.

Agreement for Acquisition of Software Maintenance

The following agreement applies for Software Subscription and Support (Software Maintenance) and does not require customer signatures:

  • IBM Agreement for Acquisition of Software Maintenance (Z125-6011)

These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.

IBM System z Operational Support Services - SoftwareXcel is an option if you desire added services.

License Information form number
Product                                             LI form number

IBM Security zSecure Admin V1.13                    GC23-7976-05
IBM Security zSecure Audit V1.13                    GC23-7977-04
IBM Security zSecure CICS Toolkit V1.13             GC23-7981-03
IBM Security zSecure Command Verifier V1.13         GC23-7982-04
IBM Security zSecure Visual V1.13                   GC23-7979-04
IBM Security zSecure Alert V1.13                    GC23-7978-04
IBM Tivoli Compliance Insight Manager Enabler       GC23-7980-04
for z/OS V1.13 

The program's License Information will be available for review on the IBM Software License Agreement website

http://www.ibm.com/software/sla/sladb.nsf
Limited warranty applies

Yes

Limited warranty

IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at

http://www.ibm.com/support/handbook

IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).

Program support

Enhanced support, called Subscription and Support, includes telephone assistance, as well as access to updates, releases, and versions of the program as long as support is in effect. You will be notified of discontinuance of support with 12 months' notice.

Money-back guarantee

If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.

For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.

Other terms
Volume orders (IVO)

No

IBM International Passport Advantage Agreement
Passport Advantage applies

No

Usage restriction

Yes. Usage is limited to the quantity of Value Units licensed.

For additional information, refer to the License Information document that is available on the IBM Software License Agreement website

http://www.ibm.com/software/sla/sladb.nsf
Software Subscription and Support applies

No. For operating system software, the revised IBM Operational Support Services - SoftwareXcel offering will provide support for those operating systems and associated products that are not available with the Software Subscription and Support (Software Maintenance) offering.

This will ensure total support coverage for your enterprise needs, including IBM and selected non-IBM products. For complete lists of products supported under both the current and revised offering, visit

http://www.ibm.com/services/sl/products
IBM Operational Support Services - SoftwareXcel

Yes

System i Software Maintenance applies

No

Variable charges apply

Yes

Educational allowance available

Yes. A 15% education allowance applies to qualified education institution customers.

Sub-capacity utilization determination

Sub-capacity utilization is determined based on the utilization of an eligible operating system and machine (for example, z/OS running in z/Architecture® (64 bit) mode on a System z ((or equivalent) server).

Sub-capacity utilization is determined based on the product's own execution as reported to IBM in accordance with the requirements for reporting sub-capacity utilization for products.

On/Off Capacity on Demand (CoD)

To be eligible for On/Off CoD pricing, you must be enabled for temporary capacity on the corresponding hardware, and the required contract, Attachment for IBM System z On/Off Capacity on Demand (Z125-7883) must be signed prior to use.



Back to topBack to top
 
Top rule
IBM Electronic Services
Bottom rule

IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent.

The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.

The Electronic Service Agent™ is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM. Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server.

To learn how Electronic Services can work for you, visit

http://www.ibm.com/support/electronic


Back to topBack to top
 
Top rule
Prices
Bottom rule

Information on charges is available at website

http://www.ibm.com/support

In the Electronic tools category, select the option for Purchase/upgrade tools.

Passport Advantage

For Passport Advantage and charges, contact your IBM representative or your authorized IBM Business Partner. Additional information is also available at

http://www.ibm.com/software/passportadvantage


Back to topBack to top
 
Top rule
Order now
Bottom rule

To order, contact your local IBM representative or your IBM Business Partner.

To identify your local IBM Business Partner or IBM representative, call 800-IBM-4YOU (426-4968). For more information, contact the Americas Call Centers.

Phone:     800-IBM-CALL (426-2255)
Fax:       800-2IBM-FAX (242-6329)

For IBM representative: callserv@ca.ibm.com


For IBM Business Partner: pwswna@us.ibm.com
 
Mail:      IBM Teleweb Customer Support
           ibm.com® Sales Execution Center, Americas North
           3500 Steeles Ave. East, Tower 3/4
           Markham, Ontario
           Canada  L3R 2Z1
 
Reference: LE001

The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.

Note: Shipments will begin after the planned availability date.

Trademarks

IMS, DFSMS, DFSMSrmm, z10, z9 and Electronic Service Agent are trademarks of IBM Corporation in the United States, other countries, or both.

IBM, CICS, DB2, z/OS, Tivoli, RACF, z/VM, System z, WebSphere, OMEGAMON, PartnerWorld, System z9, S/390, SystemPac, Passport Advantage, z/Architecture and ibm.com are registered trademarks of IBM Corporation in the United States, other countries, or both.

Microsoft is a registered trademark of Microsoft Corporation in the United States, other countries, or both.

UNIX is a registered trademark of The Open Group in the United States and other countries.

Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at:

http://www.ibm.com/legal/us/en/

For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page

http://www.ibm.com/planetwide/us/

Terms of use