Tivoli Security Newsletter

If you have comments or ideas on how the Newsletter could be further improved, please click Feedback

To be informed of updates click on Subscribe or use My Support or RSS feed facilities. To no longer receive updates click Unsubscribe

• News Focus
• Business Partner Corner
• Technical Exchange
• Technical Information Update
• FAQs and Hints & Tips
• Education and Certification
• Tivoli Information and Support Assistance webpage links (to access the items highlighted in previous Newsletter + much more)
• Portal - Products

• Gartner: MarketScope for Enterprise Single Sign-On. Report date - 15 September, 2009. TAM ESSO is positioned as Strong Positive
• Gartner: Magic Quadrant for User Provisioning. Report date - 30 September, 2009. IBM Tivoli Identity is the leaders quadrant for the 4th year in a row!
• IDC Product Flash - IBM's Tivoli Identity Manager v5.1 with Integrated Operational Role Management. Report date - July, 2009.
• IDC ranks IBM as the overall worldwide identity and access management security software revenue leader for the third straight year in 2008. Report date - July, 2009.
• Gartner: Magic Quadrant for Security Information and Event Management. Report date - 29 May, 2009.
• EMA report: The Creation of the IBM Security Tiger Team Could Be the Roar the Security Market Has Been Waiting For. Report date - August, 2009.

• IBM Tivoli Security Role Modelling Assistant enables organizations to define and model an enterprise role and policy structure.
• IBM Tivoli Security Role Management Assistant enables organizations to manage the life cycle for their enterprise role and policy structure

• Certification Study Guide Series: IBM Tivoli Access Manager for Enterprise Single Sign-On 8.0, SG24-7784
• Certification Study Guide Series: IBM Tivoli Federated Identity Manager 6.1, SG24-7783

• Tivoli zSecure CICS Toolkit Support for CICS TS 4.1 (new)
• DFHPG0207 RTCK Autoinstall for program failed (new)
• Dynamic Specification of zSecure RACF Offline Database (new)
• Can't find the explanation for error message B8R189E(new)
• EV option (Events) not showing up on zSecure main menu (new)
• Does zSecure CICS Toolkit command RTCK really display PTF level? (new)
• Creating a Batch Alert for Expiring Certificates using zSecure Admin
• Language Environment options for the z/OS agent for TCIM
• Explanation of how RRSF propagates the CKRACF command
• GIM30209E and GIM35908I errors when installing zSecure

• IAM - Realize business value by choosing the right identity and access assurance solution
  

• Realizing business value with identity and access management
• Realizing business value with mainframe security management
• Deliver effective governance for identity and access management
• IBM Tivoli Identity and Access Assurance for healthcare
  English version
  French version
• IBM end-to-end security for smart grids
  

• Community Medical Centers customer reference video - additional translations available
  - French, German, Spanish, Italian, Japanese (available now)
  - Portuguese, Russian, Mandarin, Turkish (being posted)
  

• Europe backs down on piracy plans
• Full Disk Encryption Dos and Don'ts
• Gartner on cloud security: 'Our nightmare scenario is here now'
• CIA building secure cloud-based system
• Banking industry warns about a growing card fraud scam
• Results of annual encryption and key management survey
• Smart Card Alliance: Use of Chip Cards Can Reduce U.S. Payments Fraud
• Gartner: Loosen up on social networks, security
• How hackers find your weak spots
• Gartner spotlights market leaders
• Full Nelson: The Growing Threat Of Cyberwarfare
• Scams & shams: The trouble with social networks
• Six Steps Toward Better Database Security Compliance
• 30 years of failure: the username/password combination
• 6 Ways We Gave Up Our Privacy
• Wireless network guidelines for PCI DSS compliance
• Secrecy vs. privacy
• FBI warns of social networking fraud, malware escalation
• Report Says Open Source Code Grows More Secure
• Visa creates guidance for merchants wanting to encrypt
• IBM Launches Secure, Reliable Cloud Email Service for $3 per User
• New guidelines for using National Checklist Program to securely configure software
• IBM honored for encryption breakthrough
• The U.S. Patriot Act has an impact on cloud security
• Lawmakers eye bill to make P2P file-sharing safer
• Gartner: Don't let suppliers set your DLP strategy
• The Difficulty of Un-Authentication
• Gartner finds IT security spending up eight percent
• Credit-card security standards questioned, survey says
• Social networking sites leaking personal information to third parties, study warns
• IBM launches intelligent security system at Chicago's Navy Pier
• Authentication said key to cybersecurity
• IBM Access Management: Celebrating Ten Years of Leadership
• Security challenges with cloud computing services
• Can virtualization solve security problems?
• Best practices and automation for data privacy
• Security will not come naturally with IPv6
• How Banks Should Manage Risk
• Gartner Outlines Four Risk Management Mistakes That Could Threaten Security Budgets
• Web 2.0 security risks scrutinized
• Government cloud initiative introduced, security focus promised
• Top Cyber Security Risks Revealed
• DNS Cloud Security Services Arrive
• How to measure security? NIST maps out the emerging field of IT metrology
• Identity management a complex process with a simple goal
• New IBM Study Highlights Analytics As Top Priority For Today’s CIO
• End-to-End Encryption: The PCI Security Holy Grail
• New NIST Publications Describe Standards for Identity Credentials and Authentication Systems
• Majority Of Users Have Considered Tossing Signature-Based Products, Study Says
• Infected PCs Contain Average Of Three Different Types of Malware
• 7 Reasons Websites Are No Longer Safe
• Quantum Chip Helps Crack Code
• Best Practices for Promoting Consumer Use of Contactless Payments
• Internet Security Trends 2009: An Interim Update
• 6 things you should know about botnet attacks
• Five Ways To Meet Compliance In A Virtualized Environment
• RSA publishes virtualization security, compliance guidelines
• Privacy, consumer groups want news laws to protect Web users
• Seven Deadly Sins of Building Security
• Disputed E-Verify rules go into effect
• University Research Exposes Potential Vulnerabilities In Cloud Computing
• How a Phishing Attack Exposed an Energy Company to Hackers
• Wi-fi an easy target for terrorists?
• Encryption made easier with new key management tools

A library of over 2 years of recorded Support Technical Exchange web seminars is also available on the same page - see below for both upcoming and recent sessions.

Forthcoming / Recent STEs
This section highlights the STE's planned for the next few months to help you arrange your diary  

12-Nov-09 Ask The Expert – IBM Tivoli Directory Integrator
18-Nov-09 IBM Tivoli Directory Integrator Password Plug-ins
23-Nov-09 MPM Summariser – Configuration and Operation
02-Dec-09 TKLM 1 - Product Overview, Fixpack details & Troubleshooting

12-Aug-09 ITIM 5.1: Role Hierarchies and Separation of Duties
18-Aug-09 Tivoli Security Products - Ask the Experts
19-Aug-09 Solving Problems with TDI
01-Sep-09 TAM Combo Adapter for Tivoli Identity Manager Overview #1
08-Sep-09 Tivoli Directory server 6.1 – White Page application
09-Sep-09 Unleash TIM4.6 to TIM5.0 Data Only Migration
11-Sep-09 Encryption in IBM Tivoli Directory Server.
15-Sep-09 TAM Combo Adapter for Tivoli Identity Manager Overview #2
22-Sep-09 Tivoli Directory Server Best Practices
02-Oct-09 Debugging and Troubleshooting IBM Tivoli Security Operations Manager #1
06-Oct-09 Overview of Java Authorization Contract for Containers (JACC)
09-Oct-09 Debugging and Troubleshooting IBM Tivoli Security Operations Manager
13-Oct-09 Tivoli Access Manager for e-Business – Ask the Experts
03-Nov-09 TKLM z/OS – Installation Gotcha’s

IBM Service Management Jams occur every Tuesday at 1200, Eastern Time (US). This month's Jams are:

10-Nov-09 Security at Your Front Door
17-Nov-09 IBM Tivoli Change and Configuration Management Database and IBM Tivoli Application Dependency Discovery Manager,
24-Nov-09 IBM Maximo and Its Role in the Nuclear Renaissance

• For IBM Tivoli Access Manager (ITAM) technical information, click on ITAM technical update
• For IBM Tivoli Directory Server (ITDS) technical information, click on ITDS technical update
• For IBM Tivoli Identity Manager (ITIM) technical information, click on ITIM technical update
• The wikis are forums for customers, business partners, and IBMers who work with Tivoli Security to share information. The wikis contain best practices, troubleshooting information, links to reference materials, and other topics -- all in one place. The power of the wiki lies in your ability to add new information and to comment on existing information
  • Tivoli Identity Manager wiki
  • Tivoli Access Manager for Enterprise Single Sign On Wiki

• Before contacting Support
• Engage the Support Team Voice/ESR
• What is standard IBM Support and what does it cover?
• Get an enhanced level of Support via Premium Services

Americas: tivamedu@us.ibm.com
Asia Pacific: tivtrainingap@au1.ibm.com
EMEA: tived@uk.ibm.com

ITAM for Business Integration	ITAM for e-Business	ITAM for OS
ITAM for Enterprise Single Sign-On	Compliance Insight Mgr	Tivoli Security Information & Event Mgr
IBM Directory Integrator	IBM Directory Server	FIM
ITIM	ITIM Express
ITIM API Performance Tuning Guide	ITIM Adapters	ITIM Best Practices
Risk Manager	Security Compliance Manager	Tivoli Security Ops Mgr
FISMA for TCIM	IBM Tivoli Key Lifecycle Manager	What FP or PatchLevel am I on??
Tivoli Security Policy Manager	ITIM API Performance Tuning Guide
Forums	Tivoli zSecure forum	Tivoli Security Compliance forum
Featured Documents ITIM | TAMeb
Support pages: All | ITAMBI | ITAMeb | ITAMES | ITAMOS | ITCIM | ITDI | ITDS | ITFIM | ITFIMBG | ITIM | ITIMx | ITRM | ITPM | ITSCM | ITSOM | TSIEM | TKLM
Recommneded Fixes TAMeb ITCIM ITDI ITDS ITIM and for zSecure Admin Alert for RACF Audit for RACF CICS Toolkit Command Verifier Visual
zSecure - overview Overview Admin Alert for RACF Audit for RACF CICS Toolkit Command Verifier Visual Alert for ACF2 Audit for ACF2 Audit for Top Secret RACF z/VM
zSecure - support Admin Alert for RACF Audit for RACF CICS Toolkit Command Verifier Visual Audit for ACF2 RACF z/VM