Choosing the Internet download method: direct or intermediate

If you choose Internet delivery, you also have to choose whether to download your order directly to z/OS® (recommended) or download it to an intermediate node (a workstation) and then forward it to your z/OS system. Table 1 and the security sections that follow help you understand the characteristics of each download method and which method is most appropriate for your environment.

Table 1. Considerations for download methods (direct versus intermediate)
Considerations	If downloading *directly* to z/OS	If downloading to a workstation as an *intermediate* node
Minimum recommended bandwidth (higher bandwidth reduces download times)	100 KBPS between your host and the IBM® server.	100 KBPS between your intermediate workstation and the IBM server.
Direct access to the Internet and driving system	Your z/OS system must have access to the Internet and your firewall and security policies support connectivity to the Internet.	The workstation that will be used to download the package must have access to the Internet. The workstation must also have the ability to make Internet packages available to the z/OS host system. ServerPac and SystemPac orders: the workstation can be configured as an FTP server or the package can reside on a network drive that is accessible by the host.
Software requirements	For ServerPac and SystemPac dump-by-data-set, see item Identifying driving system software requirements for installing z/OS using ServerPac or dump-by-data-set SystemPac. For CBPDO, see Identifying driving system software requirements for installing z/OS using CBPDO. For SystemPac full volume dump, see Identifying driving system software requirements for installing z/OS using full volume dump SystemPac.	For ServerPac and SystemPac dump-by-data-set, see items Identifying driving system software requirements for installing z/OS using ServerPac or dump-by-data-set SystemPac. For CBPDO, see Identifying driving system software requirements for installing z/OS using CBPDO. For SystemPac full volume dump, see Identifying driving system software requirements for installing z/OS using full volume dump SystemPac.
Hardware requirements	See Identifying driving system hardware requirements.	See Identifying driving system hardware requirements.
Restart capability if transfer is interrupted	For ServerPac and SystemPac dump-by-data set, you can resubmit the RECEIVE job, and the SMP/E GIMGTPKG service routine manages the resumption of the download from the file that was interrupted. For CBPDO, you can resubmit the RFNJOBS or RFNJOBH job, and the RECEIVE FROMNETWORK service manages the resumption of the download from the file that was interrupted. For SystemPac full volume dump, you can resubmit the GETORDRS or GETORDRH job, and the SMP/E GIMGTPKG service routine manages the resumption of the download from the file that was interrupted.	The download is resumed with the file that was interrupted. Also supports ability to suspend and resume download.
Background capability	For ServerPac and SystemPac dump-by-data set, you can generate the RECEIVE job in the CustomPac Installation Dialog, which retrieves the package as a background request. For CBPDO, you can obtain the RFNJOBS or RFNJOBH job from the Shopz download page for your order. When the job is run on your host system, it retrieves the CBPDO package as a background request. For SystemPac full-volume-dump, you can obtain the GETORDRS or GETORDRH job from the Shopz download page for your order. When the job is run on your host system, it retrieves the SystemPac package as a background request.	The download applet runs as a separate task but cannot be scheduled for specific initiation times.
Authentication to access order	IBM-supplied user ID and password for Shopz. Also, access to download the order is controlled by user ID and password.	IBM-supplied user ID and password for Shopz.
Internet package integrity	SHA-1 hashing algorithm and verification.	RSA encryption to create a digital signature. A unique client and server public/private key pair is created.
Controlling who can download the package	Access to order information is controlled by the Shopz user ID and password. Also, you can use the RACF® SERVAUTH class to control access to the IP stack and FTP client authentication. If the z/OS Security Server (RACF Base) product is present in the order then a RACF database containing the minimal RACF definitions required to IPL the target system is also available with the order.	Access to order information is controlled by the Shopz user ID and password.