IBM Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2 delivers digitally signed PDF documents

IBM United States Software Announcement 218-226
May 22, 2018


Table of contents
OverviewOverviewTechnical informationTechnical information
Key prerequisitesKey prerequisitesOrdering informationOrdering information
Planned availability datePlanned availability dateTerms and conditionsTerms and conditions
DescriptionDescriptionPricesPrices
Product positioningProduct positioningOrder nowOrder now
Program numberProgram number


Back to topBack to top

Overview

Top rule

A digitally signed PDF document helps guarantee:

  • Authenticity of the document's contents
  • Authenticity of the signing authority
  • Unaltered document content in its final form

The Signed Secure PDF feature builds on the base Advanced Function Printing (AFP) to PDF Transform product to produce a digitally signed PDF by adding additional security and tamper detection at the time of document viewing. The Signed Secure PDF is an optional, priced feature that provides additional security to inhibit changes and detect tampering of your important, sensitive, and confidential transactional documents.

With Signed Secure PDF, you can:

  • Apply a digital signature to the PDF output.
  • Use industry-standard digital certificates to provide best-in-class protection by hashing the document contents.
  • Use z/OS® Cryptographic Services System SSL SHA-2 hash algorithms.
  • Use conforming PDF viewers that can verify the signature and issue a warning if the contents were modified or tampered.
  • Be assured that both the visual appearance and contents of the document remain unchanged.

The base AFP to PDF Print Transform, which works together with Infoprint Server for z/OS, an optional feature of IBM® z/OS (5650-ZOS), can transform your output transparently, without rewriting any applications. This helps you gain increased flexibility and efficiency for your production operations by utilizing a wider choice of technologies, protocols, and formats. Infoprint Server is an operational prerequisite, but is not required to install the transform products.

The Print Transform from AFP products for Infoprint Server for z/OS are designed to be an integral part of your z/OS-based, enterprise output management infrastructure. They provide the flexibility and delivery options you need for output management. You can print z/OS AFP-based output on network-attached printers that support PCL, PostScript™, or PDF for personal or departmental use, without moving data or resources off of the z/OS system.



Back to topBack to top

Key prerequisites

Top rule

The Print Transform from AFP products for Infoprint Server for z/OS, V1.2, and later requires z/OS V2.1 (5650-ZOS), or later, with the z/OS Infoprint Server feature for operation.

The Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2 requires Print Transform from AFP to PDF for Infoprint Server for z/OS, V1.2.2.

For specific requirements, see the Technical information section.



Back to topBack to top

Planned availability date

Top rule

June 22, 2018



Back to topBack to top

Description

Top rule

Securing your information gives you the assurance that your sensitive, confidential documents remain secure and untampered.

A new feature to help address these concerns is the Signed Secure PDF Transform, an optional, priced feature, of the IBM Print Transform From AFP to PDF for Infoprint Server for z/OS product. This feature builds on the existing base AFP to PDF transform product to deliver a digitally signed PDF document.

When the signed PDF is viewed with a conforming PDF viewer, it displays a warning message if it detects that the document has been modified. If no problem is detected, the document will be displayed as a normal PDF document.

Conforming viewers allow the user to obtain additional details about the digital signature used to sign the document.

The Signed Secure PDF feature goes through several steps to produce the digitally signed PDF:

  • A digital certificate is required to generate the signed PDF.
  • The new feature starts with the PDF output from the base AFP to PDF transform.
  • The base document contents are hashed with the digital certificate's public key.
  • The resulting digest is then encrypted with the digital certificate's private key and stored in the document along with the digital certificate.
  • Later, when the document is opened by a conforming PDF viewer, the document contents are hashed again and compared with the hash value that was previously stored in the document. If the comparison fails, the PDF viewer issues a warning message.

The term "Conforming PDF viewer" refers to software that can process PDF 1.7 (ISO 32000-1) documents. The Signed Secure PDF feature embeds a detached Public Key Cryptography Standards (PKCS#7) signature object in the PDF document. For more information and for list of Adobe™-approved providers of digital certificates, see the Adobe Approved Trust List.

See Software Announcements 217-297, dated October 3, 2017, and 217-046, dated February 21, 2017, for additional information on the three Print Transform from AFP products for Infoprint Server for z/OS:

  • Print Transform from AFP to PDF for Infoprint Server for z/OS, V1.2.2 (Print Transform AFPxPDF; 5655-TF1)
  • Print Transform from AFP to PCL for Infoprint Server for z/OS, V1.2 (Print Transform AFPxPCL; 5655-TF2)
  • Print Transform from AFP to PostScript for Infoprint Server for z/OS, V1.2 (Print Transform AFPxPS; 5655-TF3)

Note: The Print Transform From AFP to Accessible PDF for Infoprint Server for z/OS feature, previously announced in Software Announcement 217-297, dated October 3, 2017, is unchanged with this announcement.

Section 508 of the US Rehabilitation Act

Print Transform from AFP to PDF for Infoprint Server for z/OS, V1.2.2 and the Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2 are capable as of June 22, 2018, when used in accordance with associated IBM documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act, provided that any assistive technology used with the product properly interoperates with it.

A US Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be found on the IBM Accessibility website.



Back to topBack to top

Product positioning

Top rule

Print Transform from AFP products for Infoprint Server for z/OS deliver data conversion flexibility for z/OS.

The new Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2 is designed to build on the base AFP to PDF transform product to deliver a digitally signed PDF document as an optional, priced feature.

The three Print Transform from AFP products for Infoprint Server for z/OS are designed to provide the foundation for more efficient ways to deliver critical, business information to your clients, employees, suppliers, and partners.

Clients, who need a high-availability, scalable output management system on the z/OS operating system to support thousands of printers and electronic output delivery, are encouraged to order and use the z/OS optional, priced feature of Infoprint Server for z/OS and the Print Transform from AFP products for Infoprint Server for z/OS.



Back to topBack to top

Hardware and software support services

Top rule

SmoothStart/installation services

IBM SmoothStart Services and Installation Services are not provided.



Back to topBack to top

Program number

Top rule

Program number VRM Program name
5655-TF1 1.2.2 IBM Print Transform from AFP to PDF for Infoprint Server for z/OS
5655-TF1 1.2.2 IBM Print Transform from AFP to Signed Secure PDF feature for z/OS


Back to topBack to top

Business Partner information

Top rule

If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to BP Attachment for Announcement Letter 218-226 for this announcement. A PartnerWorld ID and password are required (use IBMid).



Back to topBack to top

Technical information

Top rule

Specified operating environment

Hardware requirements

The Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2 requires an IBM Z® server.

Software requirements

The Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2 requires:

  • z/OS V2.1 (5650-ZOS), or later.
  • Infoprint Server for z/OS, an optional, priced feature of z/OS, V2.1, or later. Infoprint Server is an operational prerequisite, but is not required to install the transform products.
  • Adobe™ Acrobat Viewer for viewing output transformed from AFP to PDF.

Performance considerations

Creating a digitally signed PDF document requires additional time and CPU utilization above that which is used by the base AFP to PDF transform.

The size of the signed PDF document is also larger due to the signature and digital certificate information, which is imbedded into the document.

Transforming print jobs from the data stream, in which they were created to another data stream, uses more system resources than printing the same job to a printer that supports the native data stream. The print file that results from the transforms may be larger than the original input print file. The impact on system and network resources varies depending upon the print volume, the print data streams processed, and the current utilization of the system and network resources.

Transform execution speed varies with the:

  • Data stream type
  • Job length
  • Output resolution
  • Compression algorithms (for images)
  • Level of encryption
  • Density and complexity of the pages in the print file

PostScript and PDF transforms vary greatly in complexity, and transform speeds may vary significantly for similar, but different jobs.

Security, auditability, and control

The Signed Secure PDF for z/OS feature for z/OS, V1.2.2 uses the security and auditability features of the host z/OS operating system.

The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities.



Back to topBack to top

Ordering information

Top rule

Ordering z/OS through the internet

Shopz provides an easy way to plan and order your z/OS ServerPac or CBPDO. It will analyze your current installation, determine the correct product migration, and present your new configuration based on z/OS. Additional products can also be added to your order (including determination of whether all product requisites are satisfied). Shopz is available in the US, Canada, and several countries in Europe. In countries where Shopz is not available yet, contact your IBM representative (or IBM Business Partner) to handle your order through the traditional IBM ordering process. For more details and availability, go to the Shopz website.

New licensees

Orders for new licenses can be placed now.

This product is delivered in ServerPac, SystemPac, and CBPDO. You choose the delivery method, physical media or internet, when ordering. See the Customized Offerings section for the available media types.

Production of orders will begin on the planned general availability date, June 22, 2018. Ship dates for orders will be based on order sequence, production capability, and the customer-requested arrival date. Due to the amount of customization of ServerPac orders, shipments will begin approximately two weeks after general availability. Due to the amount of customization of SystemPac orders, shipments will begin approximately four weeks after general availability. For CBPDO orders, shipments will begin one week after general availability. In all cases, no delivery commitments are to be made to the customer until confirmed arrival dates are in ESW.

Registered customers can access IBMLink for ordering information and charges. Shipment will not occur before the availability date, June 22, 2018.

New users of the Print Transform for AFP to PDF products should specify:

Program description Type Model
IBM Print Transform from AFP to PDF for Infoprint Server for z/OS, V1.2.2 5655 TF1
IBM Print Transform From AFP to Accessible PDF for Infoprint Server for z/OS, V1.2.2 5655 TF1
IBM Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2 5655 TF1

Note: The Print Transform From AFP to Accessible PDF for Infoprint Server for z/OS feature, previously announced in Software Announcement 217-297, dated October 3, 2017, is unchanged with this announcement.

For ordering the IBM Print Transform from AFP to Signed Secure PDF feature for z/OS, V1.2.2, see the Ordering information section within this announcement.

For ordering information on the base program, Print Transform from AFP to PDF for Infoprint Server for z/OS, V1.2.2 (Print Transform AFPxPDF, 5655-TF1), or any of the other two Print Transform products, see Software Announcements:

Flat Workload License Charge (FWLC)

Workload license charge (WLC) basic license

Flat workload license charge

Basic license monthly license charge

Print Transform from AFP to PDF for Infoprint Server for z/OS, V1.2.2 ( 5655-TF1)

The orderable supply IDs are available in US English only.

Entitlement identifier Orderable supply ID Distribution medium Description License option/Pricing metric
S016NX4 S016NX5 3590 Tape IBM Print Transform from AFP to PDF for Infoprint Server for z/OS Basic MLC, Flat WLC
S01880D S01880F 3590 Tape IBM Print Transform from AFP to Accessible PDF feature for Infoprint Server for z/OS Basic MLC, Flat WLC
S018BNG S018BNH 3590 Tape IBM Print Transform from AFP to Signed Secure PDF feature for z/OS Basic MLC, Flat WLC

Note: The Print Transform From AFP to Accessible PDF for Infoprint Server for z/OS feature, previously announced in Software Announcement 217-297, dated October 3, 2017, is unchanged with this announcement.

Publications

The publication, IBM Print Transform from AFP to PDF for Infoprint Server for z/OS Program Directory (GI11-9844), is available and can be downloaded from IBM Support website. You can also contact your IBM representative or IBM Business Partner.

The publication, IBM Print Transform from AFP to PDF for Infoprint Server for z/OS Licensed Program Specifications (G325-2636), will be available on June 22, 2018 on IBM Knowledge Center, or you can contact your IBM representative or IBM Business Partner.

Documentation for IBM print products that operate on z/OS is available at IBM Knowledge Center. The publication, IBM Print Transform from AFP products for Infoprint Server for z/OS (G325-2634-30), will be available on June 22, 2018.

Subsequent updates (technical newsletters or revisions between releases) to the publications shipped with the product will be distributed to the user of record for as long as a license for this software remains in effect. A separate publication order or subscription is not needed.

Customized Offerings

Product deliverables are shipped only through CBPDO and ServerPac. These customized offerings are offered for internet delivery from Shopz. Internet delivery reduces software delivery time and allows you to install software without the need to handle tapes. For more details on internet delivery, go to the Help section on the Shopz website.

You choose the delivery method when you order the software. IBM recommends internet delivery. In addition to internet and DVD, the supported tape delivery options include:

  • 3590
  • 3592

Most products can be ordered in ServerPac the month following their availability in CBPDO. z/OS can be ordered through CBPDO and ServerPac at general availability. Many products will also be orderable in a Product ServerPac without also having to order the z/OS operating system or subsystem.

Shopz and CFSW will determine the eligibility based on product requisite checking. For more details on the product ServerPac, go to the Help section on the Shopz website.

For additional information on the Product ServerPac option, refer to Software Announcement 212-272, dated July 31, 2012.

Production of software product orders will begin on the planned general availability date.

  • CBPDO shipments will begin one week after general availability.
  • ServerPac shipments will begin two weeks after general availability.



Back to topBack to top

Terms and conditions

Top rule

The terms for Print Transform from AFP products for Infoprint Server for z/OS, as previously announced in Software Announcement 211-078, dated March 22, 2011, licensed under the IBM Customer Agreement are unaffected by this announcement except as noted in the prices section for the IBM Print Transform From AFP to Signed Secure PDF feature.

Licensed program materials availability

  • Restricted Materials of IBM: Some
  • Non-Restricted Source Materials: Some
  • Object Code Only (OCO): Some
  • Availability date: June 22, 2018


Back to topBack to top

Statement of good security practices

Top rule

IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.



Back to topBack to top

Prices

Top rule

For additional information and current prices, contact your local IBM representative or IBM Business Partner.

The charges for Print Transform from AFP to PDF for Infoprint Server for z/OS V1.2.2 are unaffected by this announcement. The IBM Print Transform From AFP to Signed Secure PDF feature for z/OS, V1.2.2, is 50% of the charges of the base Print Transform from AFP to PDF offering.

For additional product information, see Software Announcements:

IBM Global Financing

IBM Global Financing offers competitive financing to credit-qualified customers to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all customer segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or go to the IBM Global Financing website for more information.

IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government customers. Rates are based on a customer's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice.



Back to topBack to top

Order now

Top rule

To order, contact the IBM Digital Sales Center, your local IBM representative, or your IBM Business Partner. To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968). For more information, contact the IBM Digital Sales Center.

Phone: 800-IBM-CALL (426-2255)

Fax: 800-2IBM-FAX (242-6329)

For IBM representative: askibm@ca.ibm.com

For IBM Business Partner: pwcs@us.ibm.com

IBM Digital Sales Offices
1177 S Belt Line Rd
Coppell, TX 75019-4642, US

The IBM Digital Sales Center, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.


Note: Shipments will begin after the planned availability date.
Trademarks

IBM, z/OS and IBM Z are registered trademarks of IBM Corporation in the United States, other countries, or both.

PostScript and Adobe are trademarks of Adobe Systems Incorporated in the United States, and/or other countries.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at

Terms of use

For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page

IBM United States

Share this page

Digg Linked In

Contact IBM

Feedback

-->