IBM Security zSecure Manager for RACF z/VM V1.11.1 delivers combined audit and administration functionality for the VM environment
IBM United States Software Announcement 212-198June 12, 2012
ENUS212-198.PDF
|
| At a glance |
 |
IBM® Security zSecure™ Manager for RACF® z/VM® V1.11.1 combined audit and administration functionality for the VM environment delivers:
- The ability to assess and report changes in basic security settings
- Usability enhancements for profiles
- Auditing support for additional security events
- Currency support for IBM z/VM V6.2
For ordering, contact Your IBM representative or an IBM Business Partner. For more information contact the Americas Call Centers at 800-IBM-CALL (426-2255). Reference: LE001
Back to top
|
|
| Overview |
|
IBM Security zSecure Manager for RACF z/VM V1.11.1 provides tools to help unleash the potential of your mainframe system enabling efficient and effective RACF administration, while helping use fewer resources. By automating many recurring system administration functions, IBM Security zSecure Manager for RACF z/VM can help you maximize IT resources, reduce errors, improve quality of services, and demonstrate compliance.
IBM Security zSecure Manager for RACF z/VM also provides auditing capabilities designed to help RACF users efficiently measure and verify the effectiveness of their z/VM security and compliance policies. By viewing automatically generated reports in a standard format, you can quickly locate problems with attributes around a particular resource. As a result, you can reduce errors and improve overall quality of services.
IBM Security zSecure Manager for RACF z/VM is part of the IBM Security zSecure suite, which helps improve the efficiency and maintainability of the mainframe security environment. Applicable features of IBM Security zSecure Admin and IBM Security zSecure Audit form the foundation for the functionality of Security zSecure Manager for RACF z/VM . For more information, refer to the Reference information section.
Key enhancements
What is new
- Assess and report changes in basic security settings such as device protection, compare functions in the user interface, and on z/VM V6.2 enhanced security status auditing using a new RACF API
- Automatic detection of live RACF database and live SMF data
- Usability enhancements including the capability to apply commands to multiple profiles on display and an enhanced filter in profile search panels
- Auditing support for additional security events such as LDAP
- Currency support for IBM z/VM V6.2 and extended IBM zSecure integration points with IBM z/OS® to IBM z/VM
Back to top
|
|
| Key prerequisites |
|
Refer to the Hardware requirements and Software requirements sections.
Back to top
|
|
| Planned availability date |
|
June 15, 2012
Back to top
|
|
| Description |
|
Automate routine tasks to simplify administration
IBM Security zSecure Manager for RACF z/VM V1.11.1 offers robust, non-intrusive security capabilities designed to help simplify the process of managing mainframe security. Security zSecure Manager for RACF z/VM enables you to automate recurring, time-consuming security tasks. Complex tasks can become simple, one-step actions performed without extensive knowledge of the RACF feature on z/VM and with minimal training. Queries can be executed in seconds, and mass changes implemented with little administration effort.
Identify and analyze problems to minimize threats
IBM Security zSecure Manager for RACF z/VM can help you quickly identify problems in RACF on z/VM , such as missing or inconsistent definitions, enabling you to fix or prevent mistakes. This can reduce the chance of breaches, help lower the cost of administration, and enable the business to enforce policies.
Analysis of critical information
IBM Security zSecure Manager for RACF z/VM provides analysis such as display view of vital z/VM information and can indicate where problems may occur, monitor privileged users, and request information about individual definitions in RACF . After auditing and analyzing, Security zSecure Manager for RACF z/VM prioritizes and highlights security concerns. To provide better visibility for administrators, problems are ranked by audit priority, with a number indicating the relative impact of a problem.
Customize reports to meet specific needs
At your option, Security zSecure Manager for RACF z/VM allows managers to view, sort, and annotate audit reports, and combine multiple reports in a single bundle for automatic distribution. Security managers can easily consolidate information for audit and compliance purposes, helping save time and helping provide focused reports.
Analyze SMF log files to create a comprehensive audit trail
IBM Security zSecure Manager for RACF z/VM analyzes SMF from the live SMF data from the live SMF files or from extracted SMF data on tape or disk. By using live data, information from the active system can quickly be viewed. You can produce overview and detail reports about system and user activity from the SMF log files, plus enrich SMF information with data from the RACF database.
Accessibility by people with disabilities
A US Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be requested at
Engine-based Value Unit pricing
Engine-based Value Unit pricing for IBM Security zSecure Manager for RACF z/VM is designed to provide a decreasing price curve as hardware capacities and workload grow, which may help improve price/performance.
There may also be a price benefit when you grow your capacity. Additional capacity is not priced starting at the base with a higher price per unit. Instead, additional capacity is priced starting at the capacity (engines) on which Security zSecure Manager for RACF z/VM has already been installed.
Note: Value Units of a given product cannot be exchanged, interchanged, or aggregated with Value Units of another product.
A Subscription and Support registration record will be established for each designated machine where IBM Security zSecure Manager for RACF z/VM is running. These Subscription and Support registration records will be linked to the billable Subscription and Support, and all billable Subscription and Support within the scope of the engine-based Value Units aggregation will be linked together.
Subscription and Support is an annual charge and should be kept at an annual term.
Back to top
|
|
| Product positioning |
|
IBM Security zSecure Manager for RACF z/VM V1.11.1 is one of the most comprehensive, integrated solution available. It helps ensure security by automating auditing and administration, and allowing users to:
- Easily administer and lower administrative costs
- Manage compliance with security policy and regulatory requirements
- Monitor and audit security incidents
- Extend their monitoring and audit capabilities to 24 x 7
- Help improve completeness and accuracy of the identification of security events of audit interest
- Help improve the integrity of their vital z/VM asset
Business Partner information
If you are a Direct Reseller - System Reseller acquiring products from IBM , you may link directly to Business Partner information for this announcement. A PartnerWorld® ID and password are required (use IBM ID).
Back to top
|
|
| Reference information |
|
Refer to:
- Software Announcement 211-432, dated October 04, 2011 , IBM Security zSecure suite V1.13
- Software Announcement 210-374, dated October 26, 2010 , IBM Security zSecure suite V1.12
Back to top
|
|
| Program number |
|
Program Program number VRM name 5655-T13 1.11.1 IBM Security zSecure Manager for RACF z/VM
Product identification number
Subscription and Program PID number Support PID number 5655-T13 5655-T14
Back to top
|
|
| Education support |
|
Comprehensive education for products is offered through Worldwide Education Delivery Services. A wide range of training options are available, including classes led by instructors, learning on demand, on-site training, and blended learning solutions.
For additional information, visit
Back to top
|
|
| Offering Information |
|
Product information is available via the Offering Information website
Back to top
|
|
| Publications |
|
IBM Security zSecure Manager for RACF z/VM V1.11.1 License Information document (GC23-7984-03) is shipped with the product.
The following English publications for IBM Security zSecure Manager for RACF z/VM V1.11.1 can be viewed and downloaded from the zSecure for z/VM Information Center website at general availability
The publications are also available on the IBM Security zSecure Documentation CD provided with the products.
Title Order number Program Directory for GI11-7865-02 IBM Security zSecure Manager for RACF z/VM IBM Security zSecure Manager for RACF z/VM SC27-4363-00 V1.11.1 Installation and Deployment Guide IBM Security zSecure V1.13 Messages Guide SC14-7667-01
The following English publications for Security zSecure Manager for RACF z/VM V1.11.1 are only available to licensed users. These publications are included on the IBM Security zSecure Documentation CD provided with your product order. To obtain an electronic copy of a licensed publication, send an email requesting the publication to tivzos@us.ibm.com. Include your IBM customer number, form number for each publication, and contact information. You will be contacted with further instructions for fulfilling your order.
For an additional charge, you can order a manufactured documentation CD from the IBM Publications Center.
For ordering instructions, refer to
Title Order number IBM Security zSecure Manager for RACF z/VM LC27-4364-00 V1.11.1 User Reference Manual IBM Security zSecure Suite Documentation CD LCD7-1387-11
The IBM Publications Center
The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. Payment options for orders are via credit card (in the U.S.) or customer number for 20 countries. A large number of publications are available online in various file formats, and they can all be downloaded by all countries, free of charge.
Back to top
|
|
| Technical information |
|
Specified operating environment
Hardware requirements
Minimum and recommended processor, disk space, and memory requirements for Security zSecure Manager for RACF z/VM V1.11.1 are:
Minimum Recommended
Processor Z800 Z800
Disk space 300 MB 450 MB
Memory 1 GB 2 GB
Software requirements
IBM Security zSecure Manager for RACF z/VM V1.11.1 is supported in the following environments:
- z/VM V5R4
- z/VM V6R1
- z/VM V6R2
Note: Security zSecure Manager for RACF z/VM integrates with ISPF and can be easier to use in an ISPF environment.
Note: IBM RACF for z/VM (a separate IBM MLC offering) is a prerequisite for IBM Security zSecure Manager for RACF z/VM . For more information on RACF , refer to
The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a readme file, or other information published by IBM , such as an announcement letter. Documentation and other program content may be supplied only in the English language.
Planning information
Direct customer support
Direct customer support is provided by IBM Operational Support Services - SoftwareXcel. This fee service enhances your productivity by providing voice and electronic access into the IBM support organization. IBM Operational Support Services - SoftwareXcel helps answer questions pertaining to usage and suspected software defects for eligible products.
Installation and technical support is provided by Global Services. For more information call 800-IBM-4YOU (426-4968).
For technical support or assistance, contact your IBM representative or visit
Packaging
Security zSecure Manager for RACF z/VM V1.11.1 is distributed with:
- International Program License Agreement (Z125-3301)
- License Information document
- Tape
- Publications (refer to the Publications section)
Security, auditability, and control
IBM Security zSecure Manager for RACF z/VM V1.11.1 uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.
Back to top
|
|
| Software Services |
|
IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Also, we extend our IBM Software Services reach through IBM Business Partners to provide an extensive portfolio of capabilities. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.
To learn more about IBM Software Services or to contact a Software Services sales specialist, visit
Back to top
|
|
| Licensing metric definitions and pricing examples |
|
Licensing metric definitions
Value Unit
Value Unit (VU) is a unit of measure by which the program can be licensed. Value Unit entitlements are based on the number of units of a specific designated measure used or managed by the program. Licensee must obtain sufficient entitlements for the number of Value Units required for licensee's environment for the designated measure specified in the Value Unit Exhibit (VUE) provided below. Value Unit entitlements are specific to the program and may not be exchanged, interchanged, or aggregated with Value Unit entitlements of another program.
The designated measure for the purpose of Value Unit calculation is Engines. An Engine is a central processor (CP) or a speciality processor, such as an Integrated Facility for Linux™ (IFL) processor, on a System z® server.
The Value Unit Exhibit for this program is VUE021.
- From 1 to 3 Engines, 10 VUs per Engine
- From 4 to 6 Engines, 30 VUs plus 9 VUs per Engine above 3
- From 7 to 9 Engines, 57 VUs plus 8 VUs per Engine above 6
- From 10 to 12 Engines, 81 VUs plus 7 VUs per Engine above 9
- From 13 to 16 Engines, 102 VUs plus 6 VUs per Engine above 12
- From 17 to 20 Engines, 126 VUs plus 5 VUs per Engine above 16
- From 21 to 25 Engines, 146 VUs plus 4 VUs per Engine above 20
- For more than 25 Engines, 166 VUs plus 3 VUs per Engine above 25
Pricing example
Enterprise ABC wants to add IBM Security zSecure Manager for RACF z/VM to their environment to support a Linux partition. They have 20 engines that need support.
Value Units Value
Level Engines per engine Units
From 1 to 3 3 10 30
From 4 to 6 3 9 27
From 7 to 9 3 8 24
From 10 to 12 3 7 21
From 13 to 16 4 6 24
From 17 to 20 4 5 20
Total 20 146
In this example, the customer needs to license 146 Value Units of IBM Security zSecure Manager for RACF z/VM .
Back to top
|
|
| Ordering information |
|
Value Unit exhibit VUE021
Engine-based Value Units for a specified number of engines are determined by the following table:
Engines Engines Value Units
Level minimum maximum per engine
From 1 to 3 1 3 10
From 4 to 6 4 6 9
From 7 to 9 7 9 8
From 10 to 12 10 12 7
From 13 to 16 13 16 6
From 17 to 20 17 20 5
From 21 to 25 21 25 4
For more than 25 26 + 3
Order VM SDO and VSE SIPO through the Internet
ShopzSeries provides an easy way to plan and order System z software upgrades. This now includes VM and VSE. Using ShopzSeries, you can quickly generate orders for VM SDOs and VSE SIPOs. Additionally, ShopzSeries will ensure your order is technically correct (that is, ensures any corequisite or prerequisite or incompatibility conditions are resolved to ensure timely order placement and processing). ShopzSeries is available in the United States and several countries in Europe. In countries where ShopzSeries is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order via the traditional IBM ordering process. For more details and availability, visit the ShopzSeries Web site at
Current licensees
New licensees
Orders for new licenses will be accepted now.
Shipment will begin on the planned availability date.
Basic license
Ordering information for 5655-T13 non-MSU-based System z offerings
To order, specify the program product number and the appropriate license or charge option. Also, specify the desired distribution medium. To suppress shipment of media, select the license-only option in CFSW.
Program name: IBM Security zSecure Manager for RACF z/VM V1.11.1
Program PID: 5655-T13
Entitlement License option/
identifier Description Pricing metric
S014738 zSecure Mgr RACF z/VM Basic OTC, per Value
Unit
Orderable supply ID Language Distribution medium
S014739 English 3590 Tape
Subscription and Support PID: 5655-T14
Entitlement License option/
identifier Description Pricing metric
S01473C zSecure Mgr RACF Basic ASC, per Value Unit SW S&S
z/VM S&S no charge, decline SW S&S
Per MSU SW S&S registration
Orderable supply ID Language Distribution medium
S01473D English Hardcopy pub
On/Off Capacity on Demand
IBM Security zSecure Manager for RACF z/VM is eligible for On/Off CoD with a temporary use charge calculated based on Processor per-day usage.
Program name: IBM Security zSecure Manager for RACF z/VM V1.11.1 Program PID: 5655-T13 Entitlement License option/ identifier Description Pricing metric S014738 zSecure Mgr RACF z/VM Basic OTC, per MSU-day TUC
Subscription and Support
Subscription and Support must be ordered to receive voice technical support via telephone during normal business hours, and future releases and versions, at no additional charge. The capacity of Subscription and Support (for example, Value Units or number of processors) must be the same as the capacity ordered for the product licenses.
To order, specify the Subscription and Support program product number and the appropriate license or charge option.
IBM is also providing Subscription and Support for these products, via a separately purchased offering, under the terms of the IBM International Agreement for Acquisition of Support Maintenance (IAASM). This offering:
- Includes and extends the support services provided in the base support to include technical support via telephone during normal business hours.
- Entitles customers to future releases and versions, at no additional charge. Note that the customer is not entitled to new products.
When Subscription and Support is ordered, the charges will automatically renew annually unless cancelled by the customer.
Back to top
|
|
| Terms and conditions |
|
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage® Agreement, and the IBM Agreement for Acquisition of Software Maintenance.
Licensing
IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use.
Agreement for Acquisition of Software Maintenance
The following agreement applies for Software Subscription and Support (Software Maintenance) and does not require customer signatures:
- IBM Agreement for Acquisition of Software Maintenance (Z125-6011)
These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.
IBM System z Operational Support Services - SoftwareXcel is an option if you desire added services.
License Information form number
L-KGAS-8TBT9X (GC23-7984-03).
The program's License Information will be available for review on the IBM Software License Agreement website
Limited warranty applies
Yes
Limited warranty
IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.
IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, consult the IBM Software Support Handbook found at
IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).
Program support
Enhanced support, called Subscription and Support, includes telephone assistance, as well as access to updates, releases, and versions of the program as long as support is in effect. You will be notified of discontinuance of support with 12 months' notice.
Money-back guarantee
If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.
For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.
Other terms
Volume orders (IVO)
No
IBM International Passport Advantage Agreement
Passport Advantage applies
No
Usage restriction
Yes. Usage is limited to the quantity of Value Units licensed.
For additional information, refer to the License Information document that is available on the IBM Software License Agreement website
Software Subscription and Support applies
No. For operating system software, the revised IBM Operational Support Services - SoftwareXcel offering will provide support for those operating systems and associated products that are not available with the Software Subscription and Support (Software Maintenance) offering.
This will ensure total support coverage for your enterprise needs, including IBM and selected non-IBM products. For complete lists of products supported under both the current and revised offering, visit
IBM Operational Support Services - SoftwareXcel
No
System i Software Maintenance applies
No
Variable charges apply
No
Educational allowance available
Yes. A 15% education allowance applies to qualified education institution customers.
On/Off Capacity on Demand (CoD)
To be eligible for On/Off CoD pricing, you must be enabled for temporary capacity on the corresponding hardware, and the required contract, Attachment for IBM System z On/Off Capacity on Demand (Z125-7883) must be signed prior to use.
Back to top
|
|
| Statement of good security practices |
|
IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered destroyed or misappropriated or can result in misuse of your systems to attack others. No IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective. IBM does not warrant that systems and products are immune from the malicious or illegal conduct of any party.
Back to top
|
|
| IBM Electronic Services |
|
IBM has transformed its delivery of hardware and software support services to help you achieve higher system availability. Electronic Services is a web-enabled solution that offers an exclusive, no-additional-charge enhancement to the service and support available for IBM servers. These services are designed to provide the opportunity for greater system availability with faster problem resolution and preemptive monitoring. Electronic Services comprises two separate, but complementary, elements: Electronic Services news page and Electronic Services Agent.
The Electronic Services news page is a single Internet entry point that replaces the multiple entry points traditionally used to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.
The Electronic Service Agent™ is no-additional-charge software that resides on your server. It monitors events and transmits system inventory information to IBM on a periodic, client-defined timetable. The Electronic Service Agent automatically reports hardware problems to IBM . Early knowledge about potential problems enables IBM to deliver proactive service that may result in higher system availability and performance. In addition, information collected through the Service Agent is made available to IBM service support representatives when they help answer your questions or diagnose problems. Installation and use of IBM Electronic Service Agent for problem reporting enables IBM to provide better support and service for your IBM server.
To learn how Electronic Services can work for you, visit
Back to top
|
|
| Prices |
|
For additional information and current prices, contact your local IBM representative.
Back to top
|
|
| Order now |
|
To order, contact your local IBM representative or your IBM Business Partner.
To identify your local IBM Business Partner or IBM representative, call 800-IBM-4YOU (426-4968). For more information, contact the Americas Call Centers.
Phone: 800-IBM-CALL (426-2255)
Fax: 800-2IBM-FAX (242-6329)
For IBM representative: callserv@ca.ibm.com
For IBM Business Partner: pwswna@us.ibm.com
Mail: IBM Teleweb Customer Support
ibm.com® Sales Execution Center, Americas North
3500 Steeles Ave. East, Tower 3/4
Markham, Ontario
Canada L3R 2Z1
Reference: LE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.
Note: Shipments will begin after the planned availability date.
Trademarks
zSecure and Electronic Service Agent are trademarks of IBM Corporation in the United States, other countries, or both.
IBM, RACF, z/VM, z/OS, PartnerWorld, System z, Passport Advantage and ibm.com are registered trademarks of IBM Corporation in the United States, other countries, or both.
Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.
Other company, product, and service names may be trademarks or service marks of others.
Terms of use
IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only.Additional terms of use are located at
For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page
