IBM Enterprise Key Management Foundation - Web Edition V2.0 delivers efficient and security-rich centralized key management for IBM z/OS data set encryption on IBM Z

IBM United States Software Announcement 220-108
April 7, 2020

Table of contents
OverviewOverviewTechnical informationTechnical information
Key requirementsKey requirementsOrdering informationOrdering information
Planned availability datePlanned availability dateTerms and conditionsTerms and conditions
Program numberProgram numberPricesPrices
PublicationsPublicationsOrder nowOrder now


Overview

Top rule

IBM® Enterprise Key Management Foundation - Web Edition (EKMF Web) V2.0 provides efficient and security-rich centralized key management for IBM z/OS® data set encryption on IBM Z®. It includes:

  • A central repository. All keys are stored in a central repository with metadata such as activation dates and usage. By storing all key material in a central repository, backup can be easily achieved by including the database in existing database backup procedures. This facilitates easy recovery if keys are lost.
  • Enhanced workflow. By employing automated, semiautomated, and bulk key management processes, workflow can be improved to enable your organization to effectively manage high key volumes.
  • Policy based key generation. Keys are generated based on key templates that determine the attributes of keys, allowing keys to be consistently created on-demand. Supports the NIST key state model.
  • Security-rich key generation. Key generation takes place within the IBM 4767 cryptographic coprocessor where keys are generated with a random number generator.
  • Importing of existing keys. EKMF Web allows for importing and taking control of the management of existing Pervasive Encryption keys on z/OS systems.
  • Role-based access control. The EKMF Web access control system is role-based and controls the access to functions. The security administrator can define functions that are available for each role and assign users to these roles.
  • Dual control. EKMF Web roles can be configured to require that two or more persons must be involved to generate, activate, and distribute keys, thus providing dual control for critical operations.
  • Audit logging. Every important activity is logged in an IBM Db2® table.
  • A data set dashboard. This function provides an overview of data sets that are encryptable, already encrypted, or not encryptable. Various search options on this dashboard make it easy to get an overview of the encryption status of data sets on IBM Z.
  • EKMF Web provides a user interface for centralized management of multiple z/OS systems simultaneously. Each z/OS system is managed by an installed EKMF Web agent instance, allowing for remote management of keys and z/OS data set encryption across the enterprise.

EKMF Web includes a pricing metric that enables flexibility in the way clients choose to implement production, test, and development environments. Pricing is determined by the number of simultaneous EKMF Web agent instances in use aggregated across an enterprise.



Back to topBack to top

Key requirements

Top rule

EKMF Web V2.0 requires:

  • One of the following IBM servers:
    • z14 (all models)
    • z15™ (all models)
  • z/OS V2.3, or z/OS V2.4
  • A supported level of IBM Db2 for z/OS

For additional details, see the Technical information section.



Back to topBack to top

Planned availability date

Top rule

April 17, 2020



Back to topBack to top

Reference information

Top rule

For information on the z15 server, see Hardware Announcement 119-027, dated September 12, 2019.

For information on the z14 servers, see the following Hardware Announcements:

  • Hardware Announcement 118-075, dated October 2, 2018
  • Hardware Announcement 117-044, dated July 17, 2017

For information on the z14 Model ZR1 server, see the following Hardware Announcements:

  • Hardware Announcement 118-075, dated October 2, 2018
  • Hardware Announcement 118-018, dated April 10, 2018



Back to topBack to top

Business Partner information

Top rule

If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld® ID and password are required (use IBMid).

BP Attachment for Announcement Letter 220-108


Back to topBack to top

Program number

Top rule

Program number VRM Program name
5655-EKM 2.0.0 IBM Enterprise Key Management Foundation - Web Edition
5655-EKS 1.0.0 IBM Enterprise Key Management Foundation - Web Edition S&S

IBM Enterprise Key Management Foundation - Web Edition V2.0

Program number Subscription and support program number
5655-EKM 5655-EKS


Back to topBack to top

Education support

Top rule

IBM training provides education to support many IBM offerings. Descriptions of courses for IT professionals and managers can be found on the IBM Training and Skills website.

Call IBM training at 800-IBM-TEACH (426-8322) for catalogs, schedules, and enrollments.



Back to topBack to top

Offering Information

Top rule

Product information is available on the IBM Offering Information website.



Back to topBack to top

Publications

Top rule

Technical documentation will be available on the IBM Enterprise Key Management Foundation (EKMF) website on April 17, 2020.

Also, the following documents will be available on April 17, 2020:

Deliverable Form number Medium
IBM Enterprise Key Management Foundation - Web Edition Web UI Configuration and Operation Guide SC28-2022 Electronic
IBM Enterprise Key Management Foundation - Web Edition Web UI User's Guide SC28-2023 Electronic
IBM Enterprise Key Management Foundation - Web Edition Agent Configuration and Operation Guide SC28--2024 Electronic



Back to topBack to top

Services

Top rule

Software Services

IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of the lab-based software services team and the business consulting, project management, and infrastructure expertise of the IBM Global Services team. Also, IBM extends the reach of IBM Software Services through IBM Business Partners to provide an extensive portfolio of capabilities. IBM provides the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.

To learn more about IBM Software Services, contact your Lab Services Sales or Delivery Leader.



Back to topBack to top

Technical information

Top rule

Specified operating environment

Hardware requirements

EKMF - Web V2.0 is supported on the following hardware platforms:

  • IBM z15™ (all models)
  • IBM z14® (all models)

Effective April 17, 2020, see the current hardware requirements on the Software Products Compatibility Reports website and specify the product name in the search box.

Software requirements

EKMF Web V2.0 requires:

  • z/OS V2.3, or later
  • A supported level of Db2 for z/OS

Effective April 17, 2020, see the current software requirements on the Software Products Compatibility Reports website and specify the product name in the search box.

IBM Support

IBM Support is your gateway to technical support tools and resources that are designed to help you save time and simplify support. IBM Support can help you find answers to questions, download fixes, troubleshoot, submit and track problem cases, and build skills. Learn and stay informed about the transformation of IBM Support, including new tools, new processes, and new capabilities, by going to the IBM Support Insider.

Planning information

Packaging

Enterprise Key Management Foundation - Web Edition V2.0 (5655-EKM ) is packaged as follows:

Deliverable Form number Medium
IBM Enterprise Key Management Foundation - Web Edition Web UI Program Directory GI13-5803 Electronic
IBM Enterprise Key Management Foundation - Web Edition Agent Program Directory GI13-5805 Electronic
Enterprise Key Management Foundation - Web Edition License Information GI13-5804 Electronic
Enterprise Key Management Foundation - Web Edition License Information CD LC28-2025 Electronic
Physical

IBM recommends internet delivery from Shopz. However, if you still require physical media, you can choose DVD. Contact your IBM representative or IBM Business Partner.

Security, auditability, and control

Enterprise Key Management Foundation uses the security and auditability features of the host operating system software.

The client is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.



Back to topBack to top

Ordering information

Top rule

Consult your IBM representative.

The program in this announcement has Value Unit-based pricing.

Program number Program name Value Unit exhibit
5655-EKM IBM Enterprise Key Management Foundation - Web Edition V2.0 VUE037

For each IBM Z IPLA program with Value Unit pricing, the quantity of that program needed to satisfy applicable IBM terms and conditions is referred to as the required license capacity. Your required license capacity is based upon the following factors:

  • The IBM Z IPLA program you select
  • The applicable Value Unit Exhibit
  • The applicable terms
  • Whether your current mainframes are full capacity or sub-capacity


Value Unit exhibit VUE037

The designated measure for the purpose of Value Unit calculation is a Simultaneous Instance of the Program. An Instance is a copy of the Program. Multiple copies of the Program in a single environment are each considered to be a separate Instance. Sufficient entitlements must be obtained for the highest number of Simultaneous Instances executing at any given time.

Cumulative Simultaneous Instance Range Value Units per Simultaneous Instance
1 - 4 Simultaneous Instances 1.0000 VU/Simultaneous Instance
5 - 10 Simultaneous Instances 0.6660 VUs/Simultaneous Instance
11 - 20 Simultaneous Instances 0.4000 VUs/Simultaneous Instance
21 - 40 Simultaneous Instances 0.2000 VUs/Simultaneous Instance
41 - 100 Simultaneous Instances 0.0660 VUs/Simultaneous Instance
101 - 250 Simultaneous Instances 0.0260 VUs/Simultaneous Instance
251 - 500 Simultaneous Instances 0.0160 VUs/Simultaneous Instance
501 - 1000 Simultaneous Instances 0.0080 VUs/Simultaneous Instance
1001 - 3000 Simultaneous Instances 0.0020 VUs/Simultaneous Instance
3001+ Simultaneous Instances 0.0007 VUs/Simultaneous Instance


Ordering Enterprise Key Management Foundation - Web Edition V2.0 through the internet

Shopz provides an easy way to plan and order this offering. Additional products can also be added to your order (including determination of whether all product requisites are satisfied). You can also contact your IBM representative or IBM Business Partner to handle your order using the traditional IBM ordering process. For more details and availability, see the Shopz website.

Enterprise Key Management Foundation - Web Edition V2.0 is eligible for internet delivery using the Shopz website and is planned to be available at the general availability.

Charge metric

The charge metrics for this licensed product can be found in the following License Information document:

Program name Part number or PID number License Information document number
IBM Enterprise Key Management Foundation - Web Edition V2.0 5655-EKM L-JBAN-BJDJXT

Select your language of choice and scroll down to the Charge Metrics section. Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.

Basic license

This offering uses Value Unit Exhibit VUE037.

The designated measure for the purpose of Value Unit calculation is a Simultaneous Instance of the Program. An Instance is a copy of the Program. Multiple copies of the Program in a single environment are each considered to be a separate Instance. Sufficient entitlements must be obtained for the highest number of Simultaneous Instances executing at any given time.

Cumulative Simultaneous Instance Range Value Units per Simultaneous Instance
1 - 4 Simultaneous Instances 1.0000 VU/Simultaneous Instance
5 - 10 Simultaneous Instances 0.6660 VUs/Simultaneous Instance
11 - 20 Simultaneous Instances 0.4000 VUs/Simultaneous Instance
21 - 40 Simultaneous Instances 0.2000 VUs/Simultaneous Instance
41 - 100 Simultaneous Instances 0.0660 VUs/Simultaneous Instance
101 - 250 Simultaneous Instances 0.0260 VUs/Simultaneous Instance
251 - 500 Simultaneous Instances 0.0160 VUs/Simultaneous Instance
501 - 1000 Simultaneous Instances 0.0080 VUs/Simultaneous Instance
1001 - 3000 Simultaneous Instances 0.0020 VUs/Simultaneous Instance
3001+ Simultaneous Instances 0.0007 VUs/Simultaneous Instance

To order, specify the program number and the appropriate license or charge option. To suppress shipment of media, select the license-only option in CFSW.

Program name: IBM Enterprise Key Management Foundation - Web Edition V2.0

Program PID: 5655-EKM

Entitlement identifier Description License option/pricing metric
S018HGK IBM Enterprise Key Management Foundation - Web Edition V2.0 Use-Based License One-Time Charge Value Unit
Orderable supply ID Language
S018HGL US English

IBM recommends internet delivery. However, if you still require physical media, you can choose DVD.

Program name: IBM Enterprise Key Management Foundation - Web Edition V2.0 Subscription and Support (5655-EKS)

Entitlement identifier Description License option/pricing metric
S018HGN IBM Enterprise Key Management Foundation - Web Edition V1.0 Subscription and Support Basic ASC, per Value Unit SW S&S
    No charge, decline SW S&S
Orderable supply ID Language
S018HGP US English

Subscription and Support

To receive voice technical support via telephone and future releases and versions at no additional charge, Subscription and Support must be ordered. The capacity of Subscription and Support (Value Units) must be the same as the capacity ordered for the product licenses.

To order, specify the Subscription and Support program number (PID) referenced above and the appropriate license or charge option.

IBM is also providing Subscription and Support for these products with a separately purchased offering under the terms of the IBM International Agreement for Acquisition of Software Maintenance. This offering:

  • Includes and extends the support services provided in the base support to include technical support via telephone.
  • Entitles you to future releases and versions, at no additional charge. Note that you are not entitled to new products.

When Subscription and Support is ordered, the charges will automatically renew annually unless canceled by you.

The combined effect of the IPLA license and the Agreement for Acquisition of Software Maintenance gives you rights and support services comparable to those under the traditional ICA and IBM Z license or its equivalent. To ensure that you continue to enjoy the level of support you are used to in the ICA business model, you must order both the license for the program and the support for the selected programs at the same Value Unit quantities.



Back to topBack to top

Terms and conditions

Top rule

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage® Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

Licensing

IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use.

Software Maintenance

The following agreement applies for Software Subscription and Support (Software Maintenance) and does not require client signatures:

  • IBM Agreement for Acquisition of Software Maintenance (Z125-6011)

This program is licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.

License Information number

The following License Information documents apply to the offering in this announcement:

Program name LI number
IBM Enterprise Key Management Foundation - Web Edition V2.0 L-JBAN-BJDJXT

Select your language of choice. Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.

Limited warranty applies

Yes

Limited warranty

IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, see the IBM Support Guide.

IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).

Program technical support

Technical support of a program product version or release will be available for a minimum of one year from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect.

This technical support allows you to obtain assistance (by telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Subscription and Support (Software Maintenance) also provides you with access to versions, releases, and updates (CD releases, Long Term Support Releases or fixes) of the program. You will be notified, through an announcement letter, of discontinuance of support with six months' notice. If you require additional technical support from IBM, including an extension of support beyond the discontinuance date, contact your IBM representative or IBM Business Partner. This extension may be available for a fee.

For additional information on the IBM Software Support Lifecycle Policy, see the IBM Software Support Lifecycle Policy website.

Money-back guarantee

If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.

For clarification, note that for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.

Volume orders (IVO)

No

Passport Advantage applies

No

Usage restrictions

Yes

For any usage restrictions, see the license information document as listed in the Terms and conditions section.

Software Subscription and Support applies

Yes. During the Software Subscription and Support period, for the unmodified portion of a program, and to the extent problems can be recreated in the specified operating environment, IBM will provide the following:

  • Defect correction information, a restriction, or a bypass.
  • Program updates: Periodic releases of collections of code corrections, fixes, functional enhancements and new versions and releases to the program and documentation.
  • Technical assistance: A reasonable amount of remote assistance by telephone or electronically to address suspected program defects. Technical assistance is available from the IBM support center in the organization's geography.

Additional details regarding Technical Assistance, which includes IBM contact information, are provided in the IBM Support Guide.

Software Subscription and Support does not include assistance for:

  • The design and development of applications.
  • Your use of programs in other than their specified operating environment.
  • Failures caused by products for which IBM is not responsible under the IBM Agreement for Acquisition of Software Maintenance.

Software Subscription and Support is provided only if the program is within its support timeframe as specified in the Software Support Lifecycle policy for the program.

IBM Operational Support Services - SoftwareXcel

No

Variable charges apply

No

Educational allowance available

Yes. A 15% education allowance applies to qualified education institution clients.



Back to topBack to top

Statement of good security practices

Top rule

IT system security involves protecting systems and information through intrusion prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a regulatory compliant, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.



Back to topBack to top

Prices

Top rule

Registered external clients and IBM Business Partners can access IBMLink to view pricing information.

Specify "Price type," "Search type," and "Search value," then click "Search."

Note: Enter program number in the "Search value."

You can also contact your local IBM representative or IBM Business Partner for the applicable charges.

IBM Global Financing

IBM Global Financing offers competitive financing to credit-qualified clients to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all client segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or go to the IBM Global Financing website for more information.

IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government clients. Rates are based on a client's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice.

Financing from IBM Global Financing helps you preserve cash and credit lines, enables more technology acquisition within current budget limits, can help accelerate implementation of economically attractive new technologies, offers payment and term flexibility, and can help match project costs to projected benefits. Financing is available worldwide for credit-qualified clients.



Back to topBack to top

Order now

Top rule

To order, contact the IBM Digital Sales Center, your local IBM representative, or your IBM Business Partner. To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968). For more information, contact the IBM Digital Sales Center.

Phone: 800-IBM-CALL (426-2255)

Fax: 800-2IBM-FAX (242-6329)

For IBM representative: askibm@ca.ibm.com

For IBM Business Partner: pwcs@us.ibm.com

IBM Digital Sales Offices
1177 S Belt Line Rd
Coppell, TX 75019-4642, US

The IBM Digital Sales Center, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.

Note: Shipments will begin after the planned availability date.

Trademarks

z15 and IBM z15 are trademarks of IBM Corporation in the United States, other countries, or both.

IBM, z/OS, IBM Z, Db2, PartnerWorld, Passport Advantage and IBM z14 are registered trademarks of IBM Corporation in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at

Terms of use

For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page

IBM United States