IBM zEnterprise System platform management applications

Some IBM® zEnterprise® System (zEnterprise) authorized applications communicate over the intranode management network (INMN), such as those providing platform performance management functions. For more information about these applications, see zEnterprise System Ensemble Planning and Configuring Guide.

These applications are not supported in a multilevel secure environment when run under a user ID with a security label of SYSMULTI. They are supported when run under a user ID with a specific security label. Some of these applications listen using specific multicast IP addresses and ports to determine the remote IPv6 link-local IP address and port number to use for communication with another authorized system performing platform management.

For the zEnterprise authorized platform management application to connect to the INMN, at least one TCP/IP stack on each z/OS® image must be connected to an OSA-Express for Unified Resource Manager (OSM) interface. That stack can be an unrestricted stack, or it can be a restricted stack running with a security label that is equivalent to the security label used for the zEnterprise system management agent application.

You must configure TCP/IP and the security server as follows:

• Permit the application to the STACKACCESS resource profile of the stack with one or more OSM interfaces.
• Define an OSMACCESS resource profile on the stack with the OSM interface, using the same security label as that of the application.
• Permit the application to the OSMACCESS resource profile.
• Define a NETACCESS resource profile for the multicast IPv6 address that is used by the application.
• Permit the application to the NETACCESS profile for that multicast address.