IMS/ESA DBRC Security Tool Helps Protect Critical IMS Resources

Software Announcement
June 9, 1998
Announcement Letter Number: 298-182


Table of Contents:



At a Glance

The IMS/ESA DBRC Security Tool:

  • Helps secure the IMS DBRC RECON data sets

  • Helps guard against unintended or malicious changes to the RECON

  • Provides optional audit trail of commands issued using the DBRC Utility (DSPURX00)

  • Uses RACF or comparable security package as the basic security layer

  • Supports IBM and non-IBM system utilities
-----------------------------------------
For ordering, contact:
  Your IBM representative, an IBM
  Business Partner, or IBM North America
  Sales Centers at
    800-IBM-CALL  Reference: LE010

EXTRA! EXTRA! . . .

Subscribe to IBM iSource, your electronic source for customized IBM information! Go to our web site at http://www.ibm.com/isource or send an e-mail to info@isource.ibm.com with the word SUBSCRIBE in the body.



Overview

Do you feel the need for improved protection of your vital IMS/ESA (R) DataBase Recovery Control (DBRC) data?

The IMS/ESA DataBase Recovery Control Security Tool for OS/390 (TM) (IMS/ESA DBRC Security Tool) is designed to help guard against malicious and accidental changes to your installation's critical IMS (TM) DBRC Recovery Control(RECON) data sets. Beginning with IMS Version 6, IMS databases must be registered in DBRC, where RECON data sets containing vital database and recovery information are maintained. If the records are damaged, corrupted, or accidentally changed, database recovery could delay your system's availability longer than you expect. The IMS/ESA DBRC Security Tool can help prevent this by securing the RECON data sets at an appropriate level of access control. Can you afford to be without such protection?



Intended Customers

IMS/ESA DBRC Security Tool is for customers who want more controlled access to critical IMS recovery resources and the benefit of a DBRC command audit trail.



Key Prerequisites

IMS/ESA DBRC Security Tool is designed to operate with IMS Versions 5 and 6. The System Modification Program (SMP/E) is required for installation. Resource Access Control Facility (RACF (R)) Version 1 Release 9, or later, or a comparable Security Access Facility (SAF) compatible security package is required.



Planned Availability Date

August 7, 1998

------------------------------

This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: http://www.ibm.com



DESCRIPTION

The IMS/ESA DBRC Security Tool is designed to help protect IMS DBRC RECON data sets against malicious or accidental changes to these critical IMS resources. Beginning with IMS Version 6, IMS databases must be registered in DBRC, where Recovery Control (RECON) data sets containing key database and recovery information are maintained. If the records are damaged, corrupted, or accidentally changed, there could be an impact on database recoveries resulting in longer than necessary outages. IMS DBRC Secure helps prevent this by securing the dataset at an appropriate level of access control defined for a user.

The IMS/ESA DBRC Security Tool:

  • Allows you to set up an environment where all access to RECON data sets is controlled by the IMS/ESA DBRC Security Tool

  • Allows access to the RECON data sets only by authorized utilities and user-written programs identified to the IMS/ESA DBRC Security Tool environment

  • Provides a security check for every command issued against the RECON data sets using the DBRC utility

  • Provides an optional audit trail of DBRC command activity
This product uses minimal system resources, supports IBM and non-IBM IMS system utilities, uses RACF, or comparable SAF compatible, product as the basic security layer, and can be activated without interrupting system activity.



Year 2000

This product does not have date dependencies and is, therefore, Year 2000 ready.



SmoothStart (TM)/Installation Services

IBM SmoothStart or Installation Services will not be provided for IMS/ESA DBRC Security Tool.

Trademarks

      OS/390, IMS, and SmoothStart are trademarks of International
      Business Machines Corporation in the United States or other
      countries or both.
      IMS/ESA and RACF are registered trademarks of International
      Business Machines Corporation in the United States or other
      countries or both.
      Other company, product, and service names may be trademarks or
      service marks of others.



SUPPLEMENTAL INFORMATION



TECHNICAL INFORMATION



Specified Operating Environment

Hardware Requirements: This product is designed to operate on any hardware supporting IMS/ESA (R) Versions 5 or 6.

Software Requirements: This program supports the following IMS/ESA Versions and requires SMP/E Version 1 (5668-949) for installation:

  • IMS/ESA Version 5 Release 1 (5695-176) and/or
  • IMS/ESA Version 6 Release 1 (5655-158)
Resource Access Control Facility (RACF (R)) Version 1 Release 9, or later, or a comparable Security Access Facility (SAF) compatible security package is required.

Note: OS/390 (TM) (5645-001) or later, is a valid substitute for the standalone versions of programs included in the OS/390 Base.



Security, Auditability, and Control

The announced program uses the security and auditability features of the Host software.

The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.



ORDERING INFORMATION



New Licensees

Orders for new licenses will be accepted now.

Shipment will begin on the planned availability date.

New users of IMS/ESA DBRC Security Tool should specify:

          Type        Model

5697 D87

Basic License: To order a basic license, specify the program number and feature number 9001 for asset registration. For a graduated one-time charge or graduated monthly license charge, specify one of the following feature numbers as applicable and corresponding to the group that contains the designated machine.

Also, specify the feature number of the desired distribution medium.

                        Basic                        Basic
                      Graduated                Graduated Monthly
                   One-Time Charge               License Charge
Group               Feature Number               Feature Number

18 0017 0001 20 0018 0002 25 0019 0003 28 0020 0004 29 0021 0005 30 0022 0006 31 0023 0007 32 0024 0008 35 0025 0010 38 0026 0011 40 0027 0012 50 0028 0013 60 0029 0014 70 0030 0015 80 0031 0016

Multiple Operating System -- PR/SM (TM) (MOSP): For a graduated one-time charge or graduated monthly license charge, specify the following feature number, corresponding to the group that contains the designated machine.

                      MOSP Basic                   MOSP Basic
                      Graduated                Graduated Monthly
                   One-Time Charge               License Charge
Group               Feature Number               Feature Number

18 0047 0032 20 0048 0033 25 0049 0034 28 0050 0035 29 0051 0036 30 0052 0037 31 0053 0038 32 0054 0039 35 0055 0040 38 0056 0041 40 0057 0042 50 0058 0043 60 0059 0044 70 0060 0045 80 0061 0046

Note: The group can be determined by referring to either the Exhibit for IBM System/390 (R) Machines (Z125-3901) or the Exhibit for Non-IBM Machines (Z125-3902) that are associated with the IBM Customer Agreement (Z125-4575).

Entry Support License (ESL): To order an ESL license, specify the program number, feature number 9001 for asset registration, and the applicable ESL OTC feature number. Also specify the feature number of the desired distribution medium.

Program                                      ESL One-Time Charge
Number              Description                 Feature Number

5697-D87 IMS/ESA DBRC 2000 Security Tool

Note: ESL machines can be determined by referring to the IBM Entry End User/390 Attachment (Z125-4379).

Parallel Sysplex (R) License Charge (PSLC) Basic License: To order a basic license, specify the program number and feature number 9001 for asset registration. Specify the PSLC Base feature and applicable PSLC Level A and PSLC Level B features and quantity.

In a Parallel Sysplex, if more than one program copy exists, the charge for all copies should be associated with one copy by specifying the applicable PSLC feature numbers and quantity represented by the sum of the Service Units in Millions (MSUs) in your Parallel Sysplex. For all other program copies, specify the PSLC No Charge (N/C) Identifier feature.

Also, specify the feature number of the desired distribution medium.

                        PSLC               PSLC Basic License
Machines                Feature            MLC Feature
MSU Capacity            Number             Description

1 0126 PSLC Base, 1 MSU 2 0127 PSLC Base, 2 MSUs 3 0128 PSLC Base, 3 MSUs

4 -- 45 0129 PSLC Level A, 1 MSU 0130 PSLC Level A, 42 MSUs

46 or more 0131 PSLC Level B, 1 MSU 0132 PSLC Level B, 10 MSUs 0133 PSLC Level B, 50 MSUs

Not/Applicable 0134 PSLC N/C ID

Example 1: A single machine with 11 MSU PSLC program features is 0128, quantity 1 and 0129, quantity 8.

Example 2: Two machines with 60 aggregate MSUs in a Parallel Sysplex PSLC program features are:

  • PSLC chargeable program #1 -- 0128 quantity 1, 0130 quantity 1, 0131 quantity 5 and 0132 quantity 1

  • PSLC no charge program #2 -- 0134 quantity 1
Indexed Monthly License Charge (IMLC) Basic License: To order a basic license, specify the program number and feature number 9001 for asset registration. Specify the IMLC Base 80 MSU feature and the applicable additional IMLC MSU features and quantity corresponding to the MSU rating of the designated machine.

Also, specify the feature number of the desired distribution medium.

IMLC                                           IMLC Basic License
Feature                                        MLC Feature
Number                                         Description

0122 IMLC Base 80 MSUs 0123 IMLC 1 MSU 0124 IMLC 10 MSUs 0125 IMLC 50 MSUs

Single Version Charging: To elect single version charging, the customer must notify and identify to IBM the prior program and replacement program and the designated machine the programs are operating on.

Version-to-Version Upgrade Credit: To upgrade from a prior program acquired for a one-time charge to a replacement program using a version-to-version upgrade credit, the customer must notify and identify to IBM the applicable prior program and replacement program participating in the upgrade credit.

Basic Machine-Readable Material: To order, select the feature number of the desired distribution medium:

                          Feature
Environment               Number             Distribution Medium

IMS/ESA DBRC 5180 4-mm tape cartridge Security Tool IMS/ESA DBRC 5841 6250 magnetic tape Security Tool IMS/ESA DBRC 5842 3480 tape cartridge Security Tool

Customization Options: Select the appropriate feature numbers to customize your order to specify the delivery options desired. These features can be specified on the initial or MES orders.

Example: If publications are not desired for the initial order, specify feature number 3470 to ship media only. For future updates, specify feature number 3480 to ship media updates only. If, in the future, publication updates are required, order an MES to remove feature number 3480; then, the publications will ship with the next release of the program.

                                                    Feature
Description                                         Number

Initial Shipments

Serial Number Only (suppresses shipment 3444 of media and documentation)

Ship Media Only (suppresses initial 3470 shipment of documentation)

Ship Documentation Only (suppresses 3471 initial shipment of media)

Update Shipments

Ship Media Updates Only (suppresses 3480 update shipment of documentation)

Ship Documentation Only (suppresses 3481 update shipment of media)

Suppress Updates (suppresses update 3482 shipment of media and documentation)

Expedite Shipments

Local IBM Office Expedite 3445 (for IBM use only)

Customer Expedite Process Charge 3446 ($30 charge for each product)

Expedite shipments will be processed to receive 72-hour delivery from the time IBM Software Manufacturing Solutions (SMS) receives the order. SMS will then ship the order via overnight air transportation.

DSLO License: To order a DSLO license, specify the program number, feature number 9901 for asset registration, and the feature number for a graduated one-time charge or graduated monthly license charge that corresponds to the group containing the designated machine.

                         DSLO                         DSLO
                      Graduated                Graduated Monthly
                   One-Time Charge               License Charge
Group               Feature Number               Feature Number

18 0077 0062 20 0078 0063 25 0079 0064 28 0080 0065 29 0081 0066 30 0082 0067 31 0083 0068 32 0084 0069 35 0085 0070 38 0086 0071 40 0087 0072 50 0088 0073 60 0089 0074 70 0090 0075 80 0091 0076

Multiple Operating System -- PR/SM (MOSP): For a graduated one-time charge or graduated monthly license charge, specify the following feature number corresponding to the group that contains the designated machine.

                      MOSP DSLO                    MOSP DSLO
                      Graduated                Graduated Monthly
                   One-Time Charge               License Charge
Group               Feature Number              Feature Numbers

18 0107 0092 20 0108 0093 25 0109 0094 28 0110 0095 29 0111 0096 30 0112 0097 31 0113 0098 32 0114 0099 35 0115 0100 38 0116 0101 40 0117 0102 50 0118 0103 60 0119 0104 70 0120 0105 80 0121 0106

Ordering a DSLO feature will result in IBM maintaining a record of this customer location as a DSLO user only. All material for the DSLO license will be provided through the basic license location. If a user selects DSLO, no other feature numbers are valid for this order and no program materials or updates will be shipped.

Unlicensed Documentation: A memo, program directory, and one copy of the following publications are supplied automatically with the basic machine-readable material.

                                                       Order
Title                                                  Number

IMS/ESA DBRC Security Tool User's Guide SC26-9456 IMS/ESA DBRC Security Tool Licensed GC26-9457 Program Specification

Subsequent updates (technical newsletters or revisions between releases) to the publications shipped with the product will be distributed to the user of record for as long as a license for this software remains in effect. A separate publication order or subscription is not needed.



TERMS AND CONDITIONS

Licensing: IBM Customer Agreement

Variable Charges Apply: Yes

Installation License or Location License Applies: No

Usage Restriction Applies: No

Educational Allowance: Yes, to qualified education customers.

Volume Discount: Not applicable

Version-To-Version Upgrade Credits Apply: Yes

                                                         Single
Replaced Programs            Replacement Programs       Version
Program   Program            Program      Program       Charging
Number    Name               Number       Name          Applies

5697-D87 IMS/ESA DBRC To a follow-on if any Yes Security Tool

Warranted: Yes

Licensed Program Materials Availability

  • Restricted Materials of IBM: None
  • Non-Restricted Source Materials: None
  • Object Code Only (OCO): All
Testing Period: Two months (Basic License only)

Program Services

Support Center applies:              Yes

Access is available through the IBM Support Center

Available until 12 months written notice discontinued:

APAR Mailing Address: IBM Corporation 555 Bailey Avenue San Jose, CA 95141

Services for DSLO Provided through Basic Licenses: License location



CHARGES

The charges provided in this announcement are suggested retail prices for the U.S. only and are provided for your information only. Dealer prices may vary, and prices may also vary by country. Prices are subject to change without notice. For additional information and current prices, contact your local IBM representative.

Program Number: 5697-D87

                                Basic       DSLO
        Basic       DSLO        Graduated   Graduated
        Graduated   Graduated   Monthly     Monthly
        One-Time    One-Time    License     License
Group   Charge      Charge      Charge      Charge

18 $ 1,060 $ 795 $ 22 $ 17 20 1,535 1,150 32 24 25 1,995 1,495 42 32 28 2,735 2,050 57 43 29 3,555 2,665 74 56 30 4,620 3,465 96 72 31 5,680 4,260 118 89 32 7,270 5,455 151 113 35 8,360 6,270 174 131 38 9,615 7,210 200 150 40 11,060 8,295 230 173 50 13,820 10,370 288 216 60 17,280 12,960 360 270 70 21,600 16,200 450 338 80 27,000 20,250 563 422

                                MOSP        MOSP
        MOSP        MOSP        Basic       DSLO
        Basic       DSLO        Graduated   Graduated
        Graduated   Graduated   Monthly     Monthly
        One-Time    One-Time    License     License
Group   Charge      Charge      Charge      Charge

18 $ 1,060 $ 795 $ 22 $ 17 20 1,300 975 27 20 25 1,765 1,325 37 28 28 2,365 1,775 50 38 29 3,145 2,360 66 50 30 4,090 3,070 85 64 31 5,150 3,865 107 80 32 6,475 4,855 135 101 35 7,815 5,860 163 122 38 8,990 6,745 187 140 40 10,340 7,755 215 161 50 12,440 9,330 259 194 60 15,550 11,660 324 243 70 19,440 14,580 405 304 80 24,300 18,230 507 380

Entry End            One-Time
User/390             Charge

Entry Support $350 License:

MSU
Capacity             Description                  Charge

1 PSLC Base, 1 MSU $ 57 2 PSLC Base, 2 MSUs 96

3 PSLC Base, 3 MSUs 151

4 -- 45 PSLC Level A, 1 MSU 7 PSLC Level A, 42 MSUs 294

46 or more PSLC Level B, 1 MSU 3 PSLC Level B, 10 MSUs 30 PSLC Level B, 50 MSUs 150

IMLC                    IMLC
Description             Charge

IMLC Base 80 MSUs $550 IMLC 1 MSU 3 IMLC 10 MSUs 30 IMLC 50 MSUs 150

One-Time Charge: Customers who pay a one-time charge for a licensed program receive enhancements and future releases, if any, at no additional charge. Significant new function may be offered as an optional feature and charged for separately. If a replacement program is announced and the customer elects to license the replacement program, a time-based upgrade credit may apply.

Variable Charges: The applicable graduated one-time charge or graduated monthly license charge will be based on the group of the designated machine on which the licensed program is licensed for use. If the program is designated to a processor in a group for which no charge is listed above, the charge of the next higher group listed applies.

For upgrades of one-time charge licenses to a machine in a higher group, the upgrade charge will be the difference in the then current charges between the two groups. For downgrades of one-time charge licenses to a machine in a lower group, there will be no adjustment or refund of one-time charges paid.

For upgrades or downgrades of monthly license charge licenses, the monthly license charge applicable to the higher or lower group will apply.

Entry Support License One-Time Charge: One-time charge authorizes use only on IBM Entry End User/390 machines.



CALL NOW TO ORDER

To order, contact the IBM North America Sales Centers, your local IBM representative, or your IBM Business Partner.

IBM North America Sales Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.

 Phone:     800-IBM-CALL (TM)
 Fax:       800-2IBM-FAX
 Internet:  ibm_direct@vnet.ibm.com
 Mail:      IBM North America Sales Centers
            Dept. LE010
            P.O. Box 16848
            Atlanta, GA  30321-0848
 Reference: LE010

To identify your local IBM Business Partner or IBM representative, call 800-IBM-4YOU.

Note: Shipments will begin after the planned availability date.

Trademarks

      OS/390, PR/SM, and 800-IBM-CALL are trademarks of International
      Business Machines Corporation in the United States or other
      countries or both.
      IMS/ESA, RACF, System/390, and Parallel Sysplex are registered
      trademarks of International Business Machines Corporation in
      the United States or other countries or both.
      Other company, product, and service names may be trademarks or
      service marks of others.