IBM Security zSecure Manager for RACF z/VM V1.11.1 delivers combined audit and administration functionality for the VM environment

IBM United States Software Announcement 212-198
June 12, 2012


Table of contents
Overview Overview Publications Publications
Key prerequisites Key prerequisites Technical information Technical information
Planned availability date Planned availability date Ordering information Ordering information
Description Description Terms and conditions Terms and conditions
Product positioning Product positioning Prices Prices
Program number Program number Order now Order now


Top rule
At a glance
Bottom rule

IBM® Security zSecure™ Manager for RACF® z/VM® V1.11.1 combined audit and administration functionality for the VM environment delivers:

For ordering, contact Your IBM representative or an IBM Business Partner.
For more information contact the Americas Call Centers at
800-IBM-CALL (426-2255).
 
Reference: LE001


Back to topBack to top
 
Top rule
Overview
Bottom rule

IBM Security zSecure Manager for RACF z/VM V1.11.1 provides tools to help unleash the potential of your mainframe system enabling efficient and effective RACF administration, while helping use fewer resources. By automating many recurring system administration functions, IBM Security zSecure Manager for RACF z/VM can help you maximize IT resources, reduce errors, improve quality of services, and demonstrate compliance.

IBM Security zSecure Manager for RACF z/VM also provides auditing capabilities designed to help RACF users efficiently measure and verify the effectiveness of their z/VM security and compliance policies. By viewing automatically generated reports in a standard format, you can quickly locate problems with attributes around a particular resource. As a result, you can reduce errors and improve overall quality of services.

IBM Security zSecure Manager for RACF z/VM is part of the IBM Security zSecure suite, which helps improve the efficiency and maintainability of the mainframe security environment. Applicable features of IBM Security zSecure Admin and IBM Security zSecure Audit form the foundation for the functionality of Security zSecure Manager for RACF z/VM . For more information, refer to the Reference information section.

Key enhancements

What is new



Back to topBack to top
 
Top rule
Key prerequisites
Bottom rule

Refer to the Hardware requirements and Software requirements sections.



Back to topBack to top
 
Top rule
Planned availability date
Bottom rule

June 15, 2012



Back to topBack to top
 
Top rule
Description
Bottom rule

Automate routine tasks to simplify administration

IBM Security zSecure Manager for RACF z/VM V1.11.1 offers robust, non-intrusive security capabilities designed to help simplify the process of managing mainframe security. Security zSecure Manager for RACF z/VM enables you to automate recurring, time-consuming security tasks. Complex tasks can become simple, one-step actions performed without extensive knowledge of the RACF feature on z/VM and with minimal training. Queries can be executed in seconds, and mass changes implemented with little administration effort.

Identify and analyze problems to minimize threats

IBM Security zSecure Manager for RACF z/VM can help you quickly identify problems in RACF on z/VM , such as missing or inconsistent definitions, enabling you to fix or prevent mistakes. This can reduce the chance of breaches, help lower the cost of administration, and enable the business to enforce policies.

Analysis of critical information

IBM Security zSecure Manager for RACF z/VM provides analysis such as display view of vital z/VM information and can indicate where problems may occur, monitor privileged users, and request information about individual definitions in RACF . After auditing and analyzing, Security zSecure Manager for RACF z/VM prioritizes and highlights security concerns. To provide better visibility for administrators, problems are ranked by audit priority, with a number indicating the relative impact of a problem.

Customize reports to meet specific needs

At your option, Security zSecure Manager for RACF z/VM allows managers to view, sort, and annotate audit reports, and combine multiple reports in a single bundle for automatic distribution. Security managers can easily consolidate information for audit and compliance purposes, helping save time and helping provide focused reports.

Analyze SMF log files to create a comprehensive audit trail

IBM Security zSecure Manager for RACF z/VM analyzes SMF from the live SMF data from the live SMF files or from extracted SMF data on tape or disk. By using live data, information from the active system can quickly be viewed. You can produce overview and detail reports about system and user activity from the SMF log files, plus enrich SMF information with data from the RACF database.

Accessibility by people with disabilities

A US Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at

http://www.ibm.com/able/product_accessibility/index.html

Engine-based Value Unit pricing

Engine-based Value Unit pricing for IBM Security zSecure Manager for RACF z/VM is designed to provide a decreasing price curve as hardware capacities and workload grow, which may help improve price/performance.

There may also be a price benefit when you grow your capacity. Additional capacity is not priced starting at the base with a higher price per unit. Instead, additional capacity is priced starting at the capacity (engines) on which Security zSecure Manager for RACF z/VM has already been installed.


Note: Value Units of a given product cannot be exchanged, interchanged, or aggregated with Value Units of another product.

A Subscription and Support registration record will be established for each designated machine where IBM Security zSecure Manager for RACF z/VM is running. These Subscription and Support registration records will be linked to the billable Subscription and Support, and all billable Subscription and Support within the scope of the engine-based Value Units aggregation will be linked together.

Subscription and Support is an annual charge and should be kept at an annual term.



Back to topBack to top
 
Top rule
Product positioning
Bottom rule

IBM Security zSecure Manager for RACF z/VM V1.11.1 is one of the most comprehensive, integrated solution available. It helps ensure security by automating auditing and administration, and allowing users to:

Business Partner information

If you are a Direct Reseller - System Reseller acquiring products from IBM , you may link directly to Business Partner information for this announcement. A PartnerWorld® ID and password are required (use IBM ID).

https://www.ibm.com/partnerworld/mem/sla.jsp?num=212-198


Back to topBack to top
 
Top rule
Reference information
Bottom rule

Refer to:



Back to topBack to top
 
Top rule
Program number
Bottom rule

 
Program                Program
number         VRM     name
 
5655-T13       1.11.1  IBM Security zSecure Manager for RACF z/VM

Product identification number

                    Subscription and
Program PID number  Support PID number

5655-T13            5655-T14 


Back to topBack to top
 
Top rule
Education support
Bottom rule

Comprehensive education for products is offered through Worldwide Education Delivery Services. A wide range of training options are available, including classes led by instructors, learning on demand, on-site training, and blended learning solutions.

For additional information, visit

http://www-306.ibm.com/software/education/


Back to topBack to top
 
Top rule
Offering Information
Bottom rule

Product information is available via the Offering Information website

http://www.ibm.com/common/ssi


Back to topBack to top
 
Top rule
Publications
Bottom rule

IBM Security zSecure Manager for RACF z/VM V1.11.1 License Information document (GC23-7984-03) is shipped with the product.

The following English publications for IBM Security zSecure Manager for RACF z/VM V1.11.1 can be viewed and downloaded from the zSecure for z/VM Information Center website at general availability

http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.zsecurevm.doc_1.11.1/welcome.html

The publications are also available on the IBM Security zSecure Documentation CD provided with the products.

Title                                            Order number

Program Directory for                            GI11-7865-02
 IBM Security zSecure Manager for RACF z/VM
IBM Security zSecure Manager for RACF z/VM       SC27-4363-00
 V1.11.1 Installation and Deployment Guide
IBM Security zSecure V1.13 Messages Guide        SC14-7667-01

The following English publications for Security zSecure Manager for RACF z/VM V1.11.1 are only available to licensed users. These publications are included on the IBM Security zSecure Documentation CD provided with your product order. To obtain an electronic copy of a licensed publication, send an email requesting the publication to tivzos@us.ibm.com. Include your IBM customer number, form number for each publication, and contact information. You will be contacted with further instructions for fulfilling your order.

For an additional charge, you can order a manufactured documentation CD from the IBM Publications Center.

For ordering instructions, refer to

http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.zsecurevm.doc_1.11.1/licensedpubs.html
Title                                            Order number
 
IBM Security zSecure Manager for RACF z/VM       LC27-4364-00
 V1.11.1 User Reference Manual
 
IBM Security zSecure Suite Documentation CD      LCD7-1387-11

The IBM Publications Center

http://www.ibm.com/shop/publications/order

The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card (in the U.S.) or customer number for 20 countries. A large number of publications are available online in various file formats, and they can all be downloaded by all countries, free of charge.



Back to topBack to top
 
Top rule
Technical information
Bottom rule

Specified operating environment

Hardware requirements

Minimum and recommended processor, disk space, and memory requirements for Security zSecure Manager for RACF z/VM V1.11.1 are:

                          Minimum                Recommended
 
Processor                 Z800                   Z800
Disk space                300 MB                 450 MB
Memory                    1 GB                   2 GB
Software requirements

IBM Security zSecure Manager for RACF z/VM V1.11.1 is supported in the following environments:

Note: Security zSecure Manager for RACF z/VM integrates with ISPF and can be easier to use in an ISPF environment.

Note: IBM RACF for z/VM (a separate IBM MLC offering) is a prerequisite for IBM Security zSecure Manager for RACF z/VM . For more information on RACF , refer to

http://www.ibm.com/racf

The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a readme file, or other information published by IBM , such as an announcement letter. Documentation and other program content may be supplied only in the English language.

Planning information

Direct customer support

Direct customer support is provided by IBM Operational Support Services - SoftwareXcel. This fee service enhances your productivity by providing voice and electronic access into the IBM support organization. IBM Operational Support Services - SoftwareXcel helps answer questions pertaining to usage and suspected software defects for eligible products.

Installation and technical support is provided by Global Services. For more information call 800-IBM-4YOU (426-4968).

For technical support or assistance, contact your IBM representative or visit

http://www.ibm.com/support
Packaging

Security zSecure Manager for RACF z/VM V1.11.1 is distributed with:

Security, auditability, and control

IBM Security zSecure Manager for RACF z/VM V1.11.1 uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.



Back to topBack to top
 
Top rule
Software Services
Bottom rule

IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.

To learn more about IBM Software Services or to contact a Software Services sales specialist, visit

http://www.ibm.com/software/sw-services/


Back to topBack to top
 
Top rule
Licensing metric definitions and pricing examples
Bottom rule

Licensing metric definitions

Value Unit

Value Unit (VU) is a unit of measure by which the program can be licensed. Value Unit entitlements are based on the number of units of a specific designated measure used or managed by the program. Licensee must obtain sufficient entitlements for the number of Value Units required for licensee's environment for the designated measure specified in the Value Unit Exhibit (VUE) provided below. Value Unit entitlements are specific to the program and may not be exchanged, interchanged, or aggregated with Value Unit entitlements of another program.

The designated measure for the purpose of Value Unit calculation is Engines. An Engine is a central processor (CP) or a speciality processor, such as an Integrated Facility for Linux™ (IFL) processor, on a System z® server.

The Value Unit Exhibit for this program is VUE021.

From 1 to 3 Engines, 10 VUs per Engine
From 4 to 6 Engines, 30 VUs plus 9 VUs per Engine above 3
From 7 to 9 Engines, 57 VUs plus 8 VUs per Engine above 6
From 10 to 12 Engines, 81 VUs plus 7 VUs per Engine above 9
From 13 to 16 Engines, 102 VUs plus 6 VUs per Engine above 12
From 17 to 20 Engines, 126 VUs plus 5 VUs per Engine above 16
From 21 to 25 Engines, 146 VUs plus 4 VUs per Engine above 20
For more than 25 Engines, 166 VUs plus 3 VUs per Engine above 25

Pricing example

Enterprise ABC wants to add IBM Security zSecure Manager for RACF z/VM to their environment to support a Linux partition. They have 20 engines that need support.

                               Value Units   Value
Level           Engines        per engine    Units

From 1 to 3      3             10             30
From 4 to 6      3              9             27
From 7 to 9      3              8             24
From 10 to 12    3              7             21
From 13 to 16    4              6             24
From 17 to 20    4              5             20
 
    Total       20                           146 

In this example, the customer needs to license 146 Value Units of IBM Security zSecure Manager for RACF z/VM .



Back to topBack to top
 
Top rule
Ordering information
Bottom rule

Value Unit exhibit VUE021

Engine-based Value Units for a specified number of engines are determined by the following table:

                   Engines    Engines    Value Units
Level              minimum    maximum    per engine
 
From 1 to 3         1          3         10
From 4 to 6         4          6          9
From 7 to 9         7          9          8
From 10 to 12      10         12          7
From 13 to 16      13         16          6
From 17 to 20      17         20          5
From 21 to 25      21         25          4
For more than 25   26          +          3

Order VM SDO and VSE SIPO through the Internet

ShopzSeries provides an easy way to plan and order System z software upgrades. This now includes VM and VSE. Using ShopzSeries, you can quickly generate orders for VM SDOs and VSE SIPOs. Additionally, ShopzSeries will ensure your order is technically correct (that is, ensures any corequisite or prerequisite or incompatibility conditions are resolved to ensure timely order placement and processing). ShopzSeries is available in the United States and several countries in Europe. In countries where ShopzSeries is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order via the traditional IBM ordering process. For more details and availability, visit the ShopzSeries Web site at

http://www.ibm.com/software/ShopzSeries

Current licensees

New licensees

Orders for new licenses will be accepted now.

Shipment will begin on the planned availability date.

Basic license

Ordering information for 5655-T13 non-MSU-based System z offerings

To order, specify the program product number and the appropriate license or charge option. Also, specify the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW.

Program name: IBM Security zSecure Manager for RACF z/VM V1.11.1
Program PID: 5655-T13
 
Entitlement                                  License option/
identifier   Description                     Pricing metric

S014738      zSecure Mgr RACF z/VM           Basic OTC, per Value
                                             Unit
 
 
Orderable supply ID    Language                   Distribution medium

S014739                English                    3590 Tape
 
Subscription and Support PID: 5655-T14
 
Entitlement                         License option/
identifier   Description            Pricing metric

S01473C      zSecure Mgr RACF       Basic ASC, per Value Unit SW S&S
             z/VM S&S               no charge, decline SW S&S

                                    Per MSU SW S&S registration


Orderable supply ID    Language                   Distribution medium

S01473D                English                    Hardcopy pub

On/Off Capacity on Demand

IBM Security zSecure Manager for RACF z/VM is eligible for On/Off CoD with a temporary use charge calculated based on Processor per-day usage.

 
Program name: IBM Security zSecure Manager for RACF z/VM  V1.11.1
Program PID: 5655-T13
 
Entitlement                           License option/
identifier   Description              Pricing metric

S014738      zSecure Mgr RACF z/VM    Basic OTC, per MSU-day TUC 

Subscription and Support

Subscription and Support must be ordered to receive voice technical support via telephone during normal business hours, and future releases and versions, at no additional charge. The capacity of Subscription and Support (for example, Value Units or number of processors) must be the same as the capacity ordered for the product licenses.

To order, specify the Subscription and Support program product number and the appropriate license or charge option.

IBM is also providing Subscription and Support for these products, via a separately purchased offering, under the terms of the IBM International Agreement for Acquisition of Support Maintenance (IAASM). This offering:

When Subscription and Support is ordered, the charges will automatically renew annually unless cancelled by the customer.



Back to topBack to top
 
Top rule
Terms and conditions
Bottom rule

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage® Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

Licensing

IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use.

Agreement for Acquisition of Software Maintenance

The following agreement applies for Software Subscription and Support (Software Maintenance) and does not require customer signatures:

These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.

IBM System z Operational Support Services - SoftwareXcel is an option if you desire added services.

License Information form number

L-KGAS-8TBT9X (GC23-7984-03).

The program's License Information will be available for review on the IBM Software License Agreement website

http://www.ibm.com/software/sla/sladb.nsf
Limited warranty applies

Yes

Limited warranty

IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at

http://www.ibm.com/support/handbook

IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).

Program support

Enhanced support, called Subscription and Support, includes telephone assistance, as well as access to updates, releases, and versions of the program as long as support is in effect. You will be notified of discontinuance of support with 12 months' notice.

Money-back guarantee

If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.

For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.

Other terms
Volume orders (IVO)

No

IBM International Passport Advantage Agreement
Passport Advantage applies

No

Usage restriction

Yes. Usage is limited to the quantity of Value Units licensed.

For additional information, refer to the License Information document that is available on the IBM Software License Agreement website

http://www.ibm.com/software/sla/sladb.nsf
Software Subscription and Support applies

No. For operating system software, the revised IBM Operational Support Services - SoftwareXcel offering will provide support for those operating systems and associated products that are not available with the Software Subscription and Support (Software Maintenance) offering.

This will ensure total support coverage for your enterprise needs, including IBM and selected non-IBM products. For complete lists of products supported under both the current and revised offering, visit

http://www.ibm.com/services/sl/products
IBM Operational Support Services - SoftwareXcel

No

System i Software Maintenance applies

No

Variable charges apply

No

Educational allowance available

Yes. A 15% education allowance applies to qualified education institution customers.

On/Off Capacity on Demand (CoD)

To be eligible for On/Off CoD pricing, you must be enabled for temporary capacity on the corresponding hardware, and the required contract, Attachment for IBM System z On/Off Capacity on Demand (Z125-7883) must be signed prior to use.



Back to topBack to top
 
Top rule
Statement of good security practices
Bottom rule

IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered destroyed or misappropriated or can result in misuse of your systems to attack others. No IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective. IBM does not warrant that systems and products are immune from the malicious or illegal conduct of any party.



Back to topBack to top
 
Top rule
IBM Electronic Services
Bottom rule

IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent.

The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.

The Electronic Service Agent™ is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM . Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server.

To learn how Electronic Services can work for you, visit

http://www.ibm.com/support/electronic


Back to topBack to top
 
Top rule
Prices
Bottom rule

For additional information and current prices, contact your local IBM representative.



Back to topBack to top
 
Top rule
Order now
Bottom rule

To order, contact your local IBM representative or your IBM Business Partner.

To identify your local IBM Business Partner or IBM representative, call 800-IBM-4YOU (426-4968). For more information, contact the Americas Call Centers.

Phone:     800-IBM-CALL (426-2255)
Fax:       800-2IBM-FAX (242-6329)

For IBM representative: callserv@ca.ibm.com


For IBM Business Partner: pwswna@us.ibm.com
 
Mail:      IBM Teleweb Customer Support
           ibm.com® Sales Execution Center, Americas North
           3500 Steeles Ave. East, Tower 3/4
           Markham, Ontario
           Canada  L3R 2Z1
 
Reference: LE001

The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.

Note: Shipments will begin after the planned availability date.

Trademarks

zSecure and Electronic Service Agent are trademarks of IBM Corporation in the United States, other countries, or both.

IBM, RACF, z/VM, z/OS, PartnerWorld, System z, Passport Advantage and ibm.com are registered trademarks of IBM Corporation in the United States, other countries, or both.

Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only.Additional terms of use are located at

http://www.ibm.com/legal/us/en/

For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page

http://www.ibm.com/planetwide/us/