Significant IBM 
zSeries
mainframe security, SAN, and LAN innovations
IBM United States
Hardware Announcement 104-346
October 7, 2004
 ENUS104-346.PDF (118KB)
|
At a glance(Corrected on October 28, 2004)
Unnecessary information was removed under Software requirements.
 |
| At a glance |
 |
- EAL5 certification for the z990
- GDPS™/PPRC Multiplatform Resiliency for zSeries
Introducing on z890 and z990:
- Crypto Express2, combining the functions of PCICA and PCIXCC in a single feature
- A preview of FCP LUN Access Control
- FICON purge path extended
-
A new generation for networks, OSA-Express2
- Gigabit Ethernet SX and LX
- 10 Gigabit Ethernet LR
- 640 TCP/IP stacks
- Large send support
- Concurrent LIC update
- Layer 2 support for OSA-Express2 and OSA-Express
- Additional z800 to z890 upgrade paths
Customer Initiated Upgrade Capacity — Technology on demand:
- On/Off CoD test
- Extended staging of CIU-Express and On/Off CoD orders
For S/390 G6 servers and zSeries:
- TKE 4.2 code with Smart Card Reader support for secure storage access
For ordering, contact:
Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at
800-IBM-CALL
(Reference: YE001).
Back to top
|
|
| Overview |
|
Today, IBM is announcing a new generation of features in support of cryptography and Local Area Networks (LANs). This refresh of technology for an on demand world demonstrates IBM's commitment to a balanced system design, helping to satisfy the requirements of your growing applications.
A new cryptographic feature, Crypto Express2, is being introduced to continue to help satisfy your high-end security requirements and to help balance the workload generated by your applications.
New Gigabit Ethernet features, designed to deliver line speed, are being made available, as is 10 Gigabit Ethernet — a new member of the Ethernet family for use in your enterprise backbone, between campuses, to connect server farms to your zSeries® 890 and 990, and to consolidate file servers onto zSeries 890 and 990.
Today IBM is also announcing that the zSeries 990 has received the Common Criteria Evaluation
Assurance Level 5 (EAL5) certification for the security of its logical partitions (LPARs). The
z990, along with the z900 and z800, continues the zSeries leadership as currently the only servers
to achieve this prestigious assurance level for partitioning as of August 2004.
Back to top
|
|
| Key prerequisites |
|
Refer to the Hardware requirements and Software requirements sections of this announcement.
|
|
| Planned availability dates |
|
Refer to the Planned availability dates section of this announcement.
|
|
| Description |
|
Planned availability dates
The following is planned to be available September 24, 2004, on zSeries:
- GDPS™/PPRC Multiplatform Resiliency for zSeries
The following is planned to be available October 29, 2004:
- Additional z800 to z890 upgrade paths
The following features and functions are planned to be available October 29, 2004, on z890 and z990:
-
Cryptographic support for 19-digit Personal Account Numbers (PANs) on PCIXCC
- ICSF support of 19-digits PANs on PCIXCC is planned to be available December 17, 2004, via the ICSF Virtual Support for z/OS® and z/OS.e V1.6 Web deliverable.
- Less than 512-bit keys for clear key RSA operations on PCIXCC
- FICON™ purge path extended
- TCP/IP stack utilization improvement for OSA-Express
-
Layer 2 support for OSA-Express
- z/VM® V5.1 Layer 2 support for OSA-Express is planned to be available December 3, 2004.
- CFCC level 14 with CFCC Dispatcher Modifications
- On/Off CoD test
- Extended staging of CIU-Express and On/Off CoD orders
The following features are planned to be available October 29, 2004, on S/390® G6 servers and zSeries (z800, z900, z890, z990):
- TKE 4.2 code (#0853)
- TKE 4.2 Smart Card Reader (#0887)
- TKE 4.2 additional Smart Cards (#0888)
The following is planned to be available October 29, 2004, on z800 and z900:
- 2048-bit key RSA operations for PCICC (#0867)
The following features and functions are planned to be available January 28, 2005, on z890 and z990:
- Crypto Express2 (#0863)
- Cryptographic support for 19-digit PANs on Crypto Express2
- Less than 512-bit keys for clear key RSA operations on Crypto Express2
-
OSA-Express2 offerings
- Gigabit Ethernet SX (#3365) and LX (#3364)
- 10 Gigabit Ethernet LR (#3368)
- Layer 2 support
- 640 TCP/IP stacks
- Large send support
- Concurrent LIC update
The following features and functions are planned to be available in the z/VM V5.1 environment January 28, 2005:
- Crypto Express2
- OSA-Express2
- Layer 2 support for OSA-Express2
- 640 TCP/IP stacks for OSA-Express2
- TCP/IP stack utilization improvement for OSA-Express
The zSeries 890 and 990 advantage
IBM continues to demonstrate the viability of its zSeries platform with the fourth announcement of new function on zSeries 990 (first introduced in May 2003) and the second announcement of new function on zSeries 890 (first introduced in April 2004).
Today, IBM is introducing Crypto Express2, combining the functions of the PCI Cryptographic Accelerator and the PCIX Cryptographic Coprocessor in one feature, and at the same time introducing several new functions. New Gigabit Ethernet features with enhanced functions are also being introduced along with 10 Gigabit Ethernet for your enterprise backbones and server farms.
This refresh of technology may help to satisfy the server consolidation connectivity requirements of on demand businesses.
zSeries 990 achieves prestigious EAL5 certification
Facilitating server consolidation
: The IBM 
zSeries 990 has
received the Common Criteria Evaluation Assurance Level 5 (EAL5) certification for the security
of its logical partitions (LPARs). The z990's logical partitioning was evaluated against the ISO
15408 Common Criteria standard, recognized in the global IT market. The z990, along with the z900
and z800, continues the zSeries leadership as currently the only servers to achieve this prestigious
assurance level for partitioning as of August 2004.
EAL5 certification provides a high degree of assurance that Processor Resource/Systems Manager™ (PR/SM™) may be configured and used in environments where separation of workloads is a requirement, but where the use of a single server platform is desirable for reasons of economy, flexibility, security, or management.
PR/SM™ is designed to prevent the flow of information among logical partitions, providing highly secure isolation. This isolation allows images of zSeries supported operating systems, including z/OS, z/VM, and Linux™ on zSeries, to run in different logical partitions on a single zSeries server.
The z990 EAL5 certification demonstrates that the zSeries server continues to be an essential building block for the integration of on demand business applications as well as traditional corporate workloads on a single server. The z890 is designed to offer many of the features and functions of the z990 and is currently under evaluation for EAL5 certification.
Crypto Express2 for on demand business and security
In December 2000, IBM delivered the PCI Cryptographic Coprocessor (PCICC), followed by the PCI Cryptographic Accelerator (PCICA) in October 2001. The PCIX Cryptographic Coprocessor (PCIXCC) feature was made available in September 2003. With this announcement, the functions of the PCICA and PCIXCC features are being delivered in one feature, Crypto Express2 . Like its predecessors, the Crypto Express2 feature has been designed to satisfy high-end server security requirements.
The Integrated Cryptographic Service Facility (ICSF), a component of z/OS and z/OS.e, is designed to transparently use the available cryptographic functions — the CP Assist for Cryptographic Function (CPACF) as well as the PCICA, PCIXCC, and Crypto Express2 features — to balance the workload and satisfy the requirements of the applications.
The Crypto Express2 feature is designed for Federal Information Processing Standard (FIPS) 140-2 Level 4 Certification and has two coprocessors for improved system throughput. A performance benefit is expected with multitasking applications. A performance benefit may not be realized with single-threaded applications, which can utilize only one of the two coprocessors.
The Crypto Express2 feature supports the following:
- Consolidation and simplification via a single cryptographic coprocessor feature on z890 and z990.
- Integration of functions previously supported by the PCICA and PCIXCC features in Crypto Express2.
- Up to a maximum of eight features per server (16 coprocessors; two coprocessors per feature). The combined maximum of PCICA (#0862), Crypto Express2 (#0863), and PCIXCC (#0868) cannot exceed eight features per server.
- Compute-intensive public key cryptographic functions designed to help reduce CP utilization and increase system throughput.
- Hardware acceleration for Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols to support secure e-business applications and transactions.
- All of the new functional enhancements that were announced in April 2004, namely PKE, PKD, DUKPT, and EMV2000. Refer to Hardware Announcement 104-115 , dated April 7, 2004, and Hardware Announcement 104-117 , dated April 7, 2004.
- User Defined Extension (UDX) Service Offering — programmable to deploy standard functions and algorithms.
- CVV generation and verification services for 19-digit PANs.
- Enabling use of less than 512-bit keys for clear key RSA operations.
- 2048-bit key RSA operations capability.
All logical partitions (LPARs) in all Logical Channel Subsystems (LCSSs) have access to the Crypto Express2 feature, up to 30 LPARs per feature. While it occupies an I/O slot it does not use Channel Path Identifiers (CHPIDs).
The Crypto Express2 feature replaces the PCICA and PCIXCC features, is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, z/VM, VSE/ESA™, and Linux on zSeries. z/VM, VSE/ESA, and Linux on zSeries offer support for clear key SSL transactions only. Refer to the Standards section and to the Hardware requirements and Software requirements sections. Refer also to the Special features section of the Sales Manual on the Web for further information.
Cryptographic support for 19-digit PANs: Crypto Express2 and PCIXCC now offer CVV generation and verification services for 19-digit PANs: Industry practices for use of the Card Validation Value (CVV) are moving to base CVV computations on a 19-digit Personal Account Number (PAN) instead of the 13-digit and 16-digit PANs currently in use and supported by ICSF and the PCIXCC feature. ICSF, Crypto Express2, and PCIXCC now support use of a 19-digit PAN in the CVV generation and verification services (CSNBCSG and CSNBCSV respectively).
Support of CVV generation and verification services for 19-digit PANs, an anti-fraud security feature, is supported by the Crypto Express2 and PCIXCC features on z890 and z990 and by z/OS and z/OS.e. Refer to the Hardware requirements and Software requirements sections for further information.
Enabling use of less than 512-bit keys for clear key RSA operations: The Crypto Express2 and PCIXCC features are designed to support applications that require clear key RSA operations using keys less than 512 bits, including ICSF Callable services and their corresponding verbs: Digital Signature Verify (CSNDDSV), Public Key Encrypt (CSNDPKE), and Public Key Decrypt (CSNDPKD). All other ICSF Callable services that require a Crypto Express2 or PCIXCC feature continue to require keys of more than 511 bits. Enabling the lower limit for clear key RSA operations may allow the migration of some additional cryptographic applications to z890 and z990 servers without requiring the applications to be rewritten.
Support of applications that require clear key RSA operations using keys less than 512 bits applies to the Crypto Express2 and PCIXCC features, to z890 and z990, and is supported by z/OS, z/OS.e, and z/VM. Use of less than 512-bit keys for clear key RSA operations is currently available on the PCICC feature offered on z900 and z800. Refer to the Hardware requirements and Software requirements sections for further information.
2048-bit key RSA operations for PCICC on z800, z900
2048-bit key (clear and secure) RSA operations capability for z800 and z900 servers, in support of new Automated Teller Machine (ATM) standards, is planned to be available via 2048-bit key RSA operations for the PCICC (#0867) feature. 1024-bit key RSA operations is available today via a Functional Control Vector (FCV) on the PCI Cryptographic Coprocessor (PCICC) Enablement diskette (#0865). This capability is unique to PCICC and does not apply to the CMOS Cryptographic Coprocessor Facility (CCF).
The 2048-bit FCV is designed to support four ICSF services:
- Public Key Decrypt
- Symmetric Key Import
- Symmetric Key Export
- Symmetric Key Generate
Applications that require 2048-bit key RSA operations are expected to be able to migrate with ease.
2048-bit key RSA operations support for the PCICC features on z800 and z900 is transparent to the hardware and is supported by z/OS, z/OS.e, z/VM, and Linux on zSeries. z/VM and Linux on zSeries offer support for clear key RSA operations only. Refer to the Software requirements section for further information. This is an integrated capability on the Crypto Express2 and PCIXCC features on z890 and z990. There is no unique feature.
TKE 4.2 Smart Card Reader for security and convenience
TKE 4.2 workstation with Smart Card Reader support: The Trusted Key Entry (TKE) workstation with the 4.2 level of Licensed Internal Code is an optional feature of the zSeries that provides a secure key management system. The key management system provides authorized persons a method of key identification, exchange, separation, update, and management.
Support for an optional Smart Card Reader attached to the TKE 4.2 workstation allows the use of smart cards, which resemble credit cards in size and shape, but contain an embedded microprocessor and associated memory for data storage. Access to and the use of confidential data on the smart cards are protected by a user-defined personal identification number (PIN).
The TKE 4.2 Smart Card Reader feature (#0887) has four major functions:
- Storing ICSF key parts, specifically master and operational key parts
- Storing 4758 PCI Cryptographic Coprocessor master key parts
- Generating, storing, and using a TKE authority signature key pair
- Generating, storing, and using a 4758 logon key pair
For example, the smart card is able to store one or more 4758 PCI Cryptographic Coprocessor master key parts. The parts are stored in the "clear" on the smart card. The master key parts are generated by the 4758 PCI Cryptographic Coprocessor within the TKE workstation and are transferred to the smart card for storage and later read back to the 4758 for processing. The master key parts are encrypted, for added security, during transport between the smart card and the 4758.
The TKE 4.2 Smart Card Reader support does not remove any of the mechanisms available in the current TKE LIC. That is, with the smart card support, it is still possible to store key parts on diskettes or paper, or to use a TKE authority key stored on a diskette, and to log on to the 4758 using a passphrase.
The following optional features are associated with the TKE 4.2 workstation Smart Card Reader support:
- TKE 4.2 code (#0853)
- TKE 4.2 Smart Card Reader (#0887)
- TKE 4.2 additional Smart Cards (#0888)
The optional Smart Card Reader, which can be attached to a TKE workstation with the 4.2 level of LIC, is available on S/390 G6 servers as well as zSeries 800, 900, 890, and 990. Currently installed TKE workstations can be upgraded to the TKE 4.2 code to allow use of the Smart Card Reader.
Support for an optional Smart Card Reader attached to a TKE workstation satisfies the Statement of General Direction in Hardware Announcement 103-142 , dated May 13, 2003.
TKE 4.2 code: The TKE 4.2 level of LIC (#0853) includes support for the Smart Card Reader. The TKE 4.2 code is designed to provide a secure local and remote method of operational and master key entry. The TKE 4.2 code applies to the TKE workstation and is available on S/390 G6 servers as well as zSeries 800, 900, 890, and 990. Currently installed TKE workstations can be upgraded to the TKE 4.2 code to allow use of the Smart Card Reader.
FICON Express enhancements for Storage Area Networks
Preview — FCP LUN Access Control: IBM zSeries is previewing Fibre Channel Protocol (FCP) Logical Unit Number (LUN) Access Control, which is designed to provide host-based control of access to storage controllers and their devices as identified by their LUNs. It can allow read-only sharing of FCP SCSI devices among multiple operating system images.
If a host channel is shared among multiple operating system images, the access control mechanism would provide for either none or all of these images to have access to a particular storage controller or device (logical unit).
FCP LUN Access Control will allow you to define, via an access control table, individual access rights to storage controller ports and devices for each operating system image. A system configuration using FCP LUN Access Control may significantly reduce the number of FCP channels (FICON Express features) that are needed to provide controlled access to the data on FCP SCSI devices. FCP LUN Access Control complements the zoning and LUN masking schemes that exist in open storage environments. All of these types of access control can be used together.
FCP LUN Access Control will allow read-only sharing of FCP SCSI devices among multiple operating system images via a shared FCP Channel. A device to be used in shared read-only mode must be defined accordingly in the access control table.
Configuration Utility: The Configuration Utility for FCP LUN Access Control is expected to be a Linux user space application which will be used to configure the FCP LUN Access Control.
To define and activate LUN Access Control, you would create an access control table that describes the access rights in XML format. In this table, you would define access rights to storage controllers and devices in the SAN and identify devices to be shared in read-only mode.
The Configuration Utility for FCP LUN Access Control is expected to be required to process the access control table, verify proper specification of the rules, and activate the access control functions in the FCP channel.
The Configuration Utility for FCP LUN Access Control is planned to be a package consisting of user documentation and sample files with a skeleton to help you generate an XML-format access control table, and the utility program itself. The program is intended to provide a command line interface (CLI) and be supported by Linux on zSeries.
It is expected that the Configuration Utility will be provided for download by registered users via Resource Link™
When available, FCP LUN Access Control will be supported by the FICON Express features when configured as CHPID type FCP, will be exclusive to z890 and z990, and is planned to be available in the z/VM and Linux on zSeries environments. Refer to the Hardware requirements and Software requirements sections for further information. This statement represents IBM's current intentions. IBM development plans are subject to change or withdrawal without further notice.
IBM zSeries is interested in obtaining customers to participate in an Early Support Program (ESP) to exploit the FCP LUN Access Control function on a z990 or z890. If you have an interest in participating, contact Kathy Kulchock at 845-433-3028, or kathyk@us.ibm.com. All inquiries should be received by November 15, 2004, to be considered for this program. Responses to this notice do not imply a commitment to be a participant in this ESP, but rather allow you to be considered for selection.
FICON purge path extended: The new purge path extended function provides enhanced capability for FICON problem determination.
FICON purge path error-recovery function is extended so that it transfers error-related data and statistics between the channel and entry switch, and from the control unit and its entry switch to the host operating system.
z/OS can now record this information so that it can be used to more quickly isolate the source of link-related errors by both channel and control unit field personnel.
FICON purge path extended applies to the FICON Express features when configured as CHPID type FC (native FICON), is exclusive to z890 and z990, and is supported by z/OS and z/OS.e. Refer to the Hardware requirements and Software requirements sections for further information.
Hardware withdrawal — ESCON® Director Model 5 and features
On April 7, 2004, IBM announced the hardware withdrawal from marketing of the IBM ESCON Director Model 5 (9032-005) and all of its associated features, including the Bridge card which enables ESCON control units to be attached to FICON channels on Generation 5 and beyond servers.
After December 30, 2004, orders for the ESCON Director and all of its associated features will no longer be accepted. It is highly recommended that you evaluate your current and future requirements prior to the final order acceptance date.
It is recommended that each ESCON Director has a console, other than the Hardware Management Console (HMC), to perform operator and service tasks. If you do not have a console, you may order a console (#5900) prior to December 31, 2004.
Refer to Hardware Announcement 904-055 , dated April 7, 2004.
OSA-Express2 — A new generation for LANs
IBM is introducing a new generation of OSA-Express Gigabit Ethernet features, as well as a 10 Gigabit Ethernet feature. This refresh of technology, OSA-Express2, can help to satisfy the bandwidth demands of your applications. Like their predecessors, the OSA-Express2 features continue to be hot-pluggable, support the Multiple Image Facility (MIF) — sharing of channels across logical partitions (LPARs), and can be defined as a spanned channel to be shared among LPARs within and across LCSSs. Whether OSA-Express2 or OSA-Express, the total number of features per server is 20 on z890, and 24 on z990. The Gigabit Ethernet features each have two ports and the 10 Gigabit Ethernet LR (Long Reach) feature has one port.
Both OSA-Express2 Gigabit Ethernet (GbE) and 10 Gigabit Ethernet (10 GbE) support the Queued Direct Input/Output (QDIO) mode, carrying TCP/IP traffic only. QDIO continues to be the preferred architecture on zSeries for high-speed communication, helping to reduce host interruptions and improve response time. For SNA traffic, when in QDIO mode, use Enterprise Extender or TN3270E.
Also like the predecessor features, OSA-Express2 GbE and 10 GbE support the direct SNMP subagent, all of the SNMP enhancements previously announced, Virtual Local Area Networks (VLANs — IEEE 802.1q), Internet Protocol Version 4 (IPv4), and IPv6. The OSA-Express2 features support all of the functions previously announced for the QDIO mode (CHIPD type OSD). Refer to the z890 and z990 Software requirements section of the Sales Manual on the Web and to the January 28, 2005, update to the z890 and z990 Open Systems Adapter-Express Customer's Guide and Reference (SA22-7935).
OSA-Express2 Gigabit Ethernet: The third generation of Gigabit Ethernet features is designed to deliver line speed, 1 Gbps in each direction, and support the following new functions (described in more detail later in this section).
- Layer 2
- 640 TCP/IP stacks per CHPID
- Large send, for TCP/IP traffic and CPU efficiency, offloading the TCP segmentation processing from the host TCP/IP stack
- Concurrent LIC update
OSA-Express2 GbE continues to operate in QDIO mode only (CHPID type OSD), supporting full duplex operation, and jumbo frames (8992 byte frame size). The new OSA-Express2 GbE features continue to be dual-port features occupying a single I/O slot, and utilize one CHPID per port (two CHPIDs per feature). The new OSA-Express2 Gigabit Ethernet SX (short wavelength) (#3365) and OSA-Express2 Gigabit Ethernet LX (long wavelength) (#3364) features replace the OSA-Express Gigabit Ethernet features (#1364, #1365) currently offered on z890 and z990.
The OSA-Express2 GbE features continue to support Checksum Offload (in the z/OS, z/OS.e, and Linux on zSeries environments — refer to the Software requirements section). They have the same connector type, LC Duplex, as the current OSA-Express Gigabit Ethernet features (#1364, #1365).
The OSA-Express2 GbE features support the QDIO mode only (CHPID type OSD), are exclusive to z890 and z990, and are supported by z/OS, z/OS.e, z/VM, VSE/ESA, TPF, and Linux on zSeries. Refer to the Standards section and to the Hardware requirements and Software requirements sections for further information. Also refer to the Special features section of the Sales Manual on the Web.
Introducing OSA-Express2 10 Gigabit Ethernet LR: The newest member of the family of LAN adapters, OSA-Express2 10 Gigabit Ethernet LR (Long Reach), is for use in your enterprise backbone, between campuses, to connect server farms to your zSeries 890 and 990, and to consolidate file servers onto zSeries 890 and 990. OSA-Express2 10 Gigabit Ethernet LR (#3368) supports:
- Queued Direct Input/Output (QDIO) (CHPID type OSD)
- One port per feature
- A link data rate of 10 Gbps
- Full duplex mode
- Jumbo frames (8992 byte frame size)
- Checksum offload
- Layer 2 support
- Large send
- 640 TCP/IP stacks
- Concurrent LIC update
- SC Duplex connector
- Single mode fiber optic cabling (9 micron)
- An unrepeated distance of 10 km (6.2 miles)
Checksum offload is supported in the z/OS, z/OS.e, and Linux on zSeries environments. Refer to the Software requirements section for further information.
The 10 Gigabit Ethernet (10 GbE) feature does not support auto-negotiation to any other speed. The 10 GbE supports 64B/66B coding, whereas GbE supports 8B/10B coding. Therefore, auto-negotiation is not possible.
Note: The OSA-Express2 10 Gigabits per second (Gbps) link data rate does not represent the actual throughput of the OSA-Express2 10 GbE LR feature. Actual throughput is dependent upon many factors, including traffic direction, the pattern of acknowledgement traffic, packet size, the application, TCP/IP, the network, the disk subsystem, and the number of clients being served.
The OSA-Express2 10 Gigabit Ethernet LR feature supports the QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, z/VM, VSE/ESA, TPF, and Linux on zSeries. Refer to the Standards section for conformance information as well as additional information on the features. Refer to the Hardware requirements and Software requirements sections for further information. Also refer to the Special features section of the Sales Manual on the Web.
Layer 2 support for flexible and efficient data transfer
For IP and non-IP workloads: Now, the new OSA-Express2 features and the current OSA-Express features on z890 and z990 can support two transport modes: Layer 2 (Link Layer) as well as the current Layer 3 (Network or IP Layer). Traffic can be IP (IPv4, IPv6) or non-IP (AppleTalk, DECnet, IPX, NetBIOS, or SNA). OSA and the z/VM virtual switch are now protocol independent and Layer-3 independent. Layer 2 support can help facilitate server consolidation.
With support of the new Layer 2 interface, packet forwarding decisions are now based upon Layer 2 information, instead of Layer 3 information. z/VM guests no longer need to share a Medium Access Control (MAC) address with OSA — each operating system attached to the Layer 2 interface has its own MAC address. Complexity can be reduced, network configuration is simplified and intuitive, and LAN administrators can configure and maintain the mainframe environment the same as they do a nonmainframe environment.
An OSA-Express2 or OSA-Express Ethernet feature can filter inbound datagrams by Virtual Local Area Network identification (VLAN ID, IEEE 802.1q), the Ethernet destination MAC address, or both. Filtering can reduce the amount of inbound traffic being processed by the operating system, helping to reduce CPU utilization. OSA port sharing is supported only between virtual switches that are using the same transport mode (Layer 2 with Layer 2 and Layer 3 with Layer 3). A Layer 2 guest cannot communicate directly with a Layer 3 guest.
Another mechanism for helping to reduce host CPU utilization is the z/VM virtual switch. The virtual switch can help to eliminate the requirement for router virtual machines. The virtual switch currently supports IPv4 transport only. With z/VM V5.1, the virtual switch exploits the Layer 2 support within the z/VM Control Program. The z/VM Control Program owns the connection to the OSA feature and manages the MAC addresses and VLAN connectivity of the attached guests. The virtual switch performs automatic MAC address generation and assignment to allow uniqueness within and across z/VM images, LPARs, and servers. MAC addresses can also be locally administered. z/VM V5.1 virtual switch support will exploit the Layer 2 support within the z/VM Control Program.
Layer 2 support, for flexible and efficient data transfer of IP and non-IP workloads, is applicable to OSA-Express2 Gigabit Ethernet (#3364, #3365) and 10 Gigabit Ethernet LR (#3368), OSA-Express 1000BASE-T Ethernet (#1366), and Gigabit Ethernet LX and SX (#1364, #1365, #2364, #2365) and is supported in QDIO mode only (CHPID type OSD). Layer 2 support is exclusive to z890 and z990, and is supported by z/VM and Linux on zSeries. Refer to the Hardware requirements and Software requirements sections for further information.
Announcement of OSA-Express Layer 2 support satisfies the Statement of General Direction in Hardware Announcement 104-117 , dated April 7, 2004, and Hardware Announcement 104-118 , dated April 7, 2004.
Improved virtualization — now 640 TCP/IP stacks
For OSA-Express2: If you have a need to host more Linux images, increasing the number of TCP/IP stacks may be of benefit. The OSA-Express2 features support 640 TCP/IP stacks/connections per dedicated CHPID, or 640 total stacks across multiple LPARs using a shared or spanned CHPID. The OSA-Express features support 160 TCP/IP stacks.
If multiple priorities for queues is disabled, the maximum number of devices allowed is 1920 (1920 devices / 3 = 640 stacks). If multiple priorities for queues is enabled (one to four QDIO priorities), the maximum number of devices is 480 (480 devices / 3 = 160 stacks).
Support for 640 TCP/IP stacks is applicable to the OSA-Express2 features (Gigabit Ethernet SX, Gigabit Ethernet LX, 10 Gigabit Ethernet LR) which support the QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, z/VM, and Linux on zSeries. Refer to the Hardware requirements and Software requirements sections for further information.
Large send for TCP/IP traffic — Designed for efficiency
For OSA-Express2: Large send, also referred to as TCP segmentation offload, can improve performance by offloading TCP packet processing from the host to the OSA-Express2 features. Offload allows the host to send large blocks of data (64 kilobytes), instead of 1492 byte packets, to the OSA-Express2 feature. The OSA-Express2 feature then separates the 64 KB blocks into standard Ethernet packets (1492 bytes) to be sent out on the LAN. This applies to outbound traffic only, IPv4 or IPv6, and applies only to unicast datagrams. Large send support can help reduce host processor utilization, returning CPU cycles for application use while increasing network efficiencies.
Large send support applies to the OSA-Express2 features (Gigabit Ethernet SX, Gigabit Ethernet LX, 10 Gigabit Ethernet LR) which support QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by Linux on zSeries. Refer to the Hardware requirements and Software requirements sections for further information.
OSA-Express2 concurrent LIC update — An availability enhancement: The OSA-Express2 features have increased memory to facilitate concurrent application of LIC updates, allowing the application of LIC updates without requiring a configuration off/on, thereby minimizing the disruption of networking traffic during the update.
Concurrent LIC update applies to the OSA-Express2 features (Gigabit Ethernet SX, Gigabit Ethernet LX, 10 Gigabit Ethernet LR), is offered for the QDIO mode only (CHPID type OSD), and is exclusive to z890 and z990. Refer to the Hardware requirements section for further information. There are no operating system dependencies.
OSA-Express TCP/IP stack utilization improvement: The OSA-Express features support 160 TCP/IP stacks. Previously, in order to use all those stacks, the CHPID had to be shared by multiple logical partitions (LPARs). There was a restriction (only allowing a single control unit definition per CHPID) that limited the number of stacks to 84 per LPAR. That restriction is lifted. Now, a single LPAR can contain all 160 stacks offered by OSA-Express.
The TCP/IP stack utilization improvement applies to OSA-Express Gigabit Ethernet, 1000BASE-T Ethernet, Fast Ethernet, and Token Ring (#1364, #1365, #1366, #2364, #2365, #2366, #2367), is supported in QDIO mode only (CHPID type OSD), is exclusive to z890 and z990, and is supported by z/OS, z/OS.e, and z/VM. Refer to the Hardware requirements and Software requirements sections for further information.
Enhancing Parallel Sysplex®
Coupling Facility Control Code (CFCC) Dispatcher Modifications: CFCC level 14 contains modifications to the CF dispatcher and internal serialization mechanisms to better manage coupled workloads in all Parallel Sysplex environments under certain circumstances.
CFCC level 14 with CFCC Dispatcher Modifications is exclusive to z890 and z990. Refer to the Hardware requirements and Software requirements sections for further information.
GDPS enhancements
GDPS/PPRC Multiplatform Resiliency for zSeries: In April 2004, an announcement was made that GDPS planned to exploit the new z/VM HyperSwap™ function to provide a coordinated near continuous availability and disaster recovery solution for z/OS and Linux guests running under z/VM. Refer to Hardware Announcement 104-118 , dated April 7, 2004. GDPS/PPRC Multiplatform Resiliency for zSeries became available September 24, 2004.
z/VM 5.1 provides a new HyperSwap function, so that the virtual devices associated with one real disk are capable of being swapped transparently to another disk. HyperSwap can be used to switch to secondary disk storage subsystems mirrored by Peer-to-Peer Remote Copy (PPRC). This solution is especially valuable for customers who share data and storage subsystems between z/OS and Linux on zSeries — for example, a SAP application server running on Linux on zSeries and a SAP DB server running on z/OS. HyperSwap can also be helpful in data migration scenarios to allow applications to migrate to new disk volumes without requiring them to be quiesced.
GDPS/PPRC can now provide the reconfiguration capabilities for the Linux on zSeries servers and data in the same manner as it does for z/OS systems and data. To support planned and unplanned outages, GDPS provides the following recovery capabilities:
- Re-IPL in place of failing operating system images
- Site takeover/failover of a complete production site
- Coordinated planned and unplanned HyperSwap of disk subsystems, transparent to the operating system images and applications using the disks
This innovative near continuous availability and disaster recovery solution requires IBM Tivoli® System Automation for Multiplatforms V1.2 and later and z/VM V5.1, in addition to the other GDPS/PPRC prerequisites. z/VM V5.1 is supported on zSeries 800, 900, 890, and 990.
Additional z800 to z890 upgrade paths
Additional upgrade paths from z800 models to z890 Model A04 are now available. z800 Models 0A2, 0X2, and 003 can now be upgraded to z890 Model A04. These additional z800 to z890 upgrades support the 28 capacity settings as well as the features and functions offered on the z890 Model A04.
On/Off CoD test
IBM continues to enhance On/Off CoD to be more responsive to your on demand business requirements.
On/Off CoD has been enhanced to allow for a no-charge test. No IBM charges are assessed for the test, including IBM charges associated with temporary hardware capacity, IBM software, or IBM maintenance. This test can be used to validate the processes to download, activate, and deactivate On/Off CoD capacity nondisruptively. Each On/Off CoD-enabled server is entitled to one no-charge test, per contract. This test may last up to a maximum duration of 24 hours commencing with the download and activation of an On/Off CoD order. On/Off CoD tests which do exceed 24 hours in duration will be treated in their entirety as billable On/Off CoD upgrades. In addition to validating the On/Off CoD function within your environment, you may choose to use this test as a training session for your personnel who are authorized to activate On/Off CoD.
On/Off CoD no-charge test can be requested and downloaded from the Web at Resource Link. Refer to
On/Off CoD test is exclusive to z890 and z990.
Extended staging of CIU-Express and On/Off CoD orders
All CIU-Express and On/Off CoD orders may now be staged for greater than 30 days. In fact, the orders may be staged for an extended period of time, unless one of the following conditions occurs:
- Order is canceled by customer
- Machine is no longer under warranty or IBM Maintenance Service Agreement
- Permanent PU and/or memory configurations are changed outside of CIU process
Refer to
Extended staging of CIU-Express orders is available on z800, z900, z890, and z990. Extended staging of On/Off CoD orders is exclusive to z890 and z990.
Nondisruptive capacity change of z890 CPs: Nondisruptive capacity change of z890 Central Processors (CPs) to a different capacity setting, on subcapacity models, is now being offered in the z/OS, z/OS.e, and z/VM environments. Linux may also take advantage of the change when running as a guest under z/VM. z890 currently has the capability of concurrent upgrades, providing additional capacity with no server outage or IPL when CPs of the same capacity setting are added.
Previously, for a z890 with a subcapacity setting, a change to a different CP capacity required up to two IPLs — one to implement the increased capacity, and for an On/Off Capacity on Demand (On/Off CoD) upgrade, one to go back to the original capacity. This new capability eliminates up to two planned outages which improves overall system availability. There is no hardware dependency. Refer to the Software requirements section for further information on z/OS, z/OS.e, z/VM, and Linux as a guest under z/VM.
Section 508 of the U.S. Rehabilitation Act
IBM z890 and z990 are capable on delivery, when used in accordance with IBM's associated
documentation, of satisfying the applicable requirements of Section 508 of the Rehabilitation Act of
1973, 29 U.S.C. Section 794d, as implemented by 36 C.F.R. Part 1194, provided that any Assistive
Technology used with the product properly interoperates with it.
Back to top
|
|
| Product positioning |
|
With the introduction of a new generation of features in support of cryptography and networking, IBM
zSeries continues to offer a
balanced system design.
The Common Criteria Evaluation Assurance Level 5 (EAL5) certification for the security of the Logical Partitions (LPARs) of the zSeries 990 continues to demonstrate zSeries leadership in an on demand world.
zSeries 890
IBM brings the advanced mainframe technology of the z990 to your IT world with the IBM zSeries 890 (z890), designed and
sized specifically for the mid-sized enterprise. The z890 is a mainframe with advanced on demand
capabilities at a size and cost that fit your business. This new line of high-performance midrange
servers provides many of the capabilities available in larger enterprise-class servers at a lower
entry point, along with extremely granular growth options that allow you to purchase the capacity
that best satisfies your business requirements. The z890 supports z/OS, z/OS.e, z/VM, VSE/ESA, and
Linux on zSeries, delivering to you the flexibility desired to easily manage changing business needs
while maintaining mainframe levels of availability and security.
With the z890, you can start at the capacity setting you need to meet your IT infrastructure requirements and easily add additional capacity to meet your changing needs as you grow. The single model provides up to four processors with seven capacity settings each, a total of 28 capacity settings.
zSeries 990
With a choice of four models, the largest z990 can be configured with up to three times the
processing power, four times the memory, four times the HiperSockets, up to four times the number of
ESCON channels, up to 25% more FICON, and up to twice the number of external coupling links of a
z900 Model 216 server. Each model adds to the system's total resources so you'll have the
ability to scale up with z/OS and reliably handle your most critical business transactions.
Back to top
|
|
| Statement of general direction |
|
OSA-Express Token Ring not to be offered
The zSeries 890 and 990 are expected to be the last zSeries servers to offer a Token Ring feature. It is intended that the OSA-Express Token Ring feature will not be available for ordering on a new build or upgraded server, or for carrying forward on an upgrade.
A migration from a Token Ring to an Ethernet environment should be a part of all strategic LAN planning.
All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice.
Trademarks
Back to top
|
|
| Publications |
|
Publications for z890 and z990 can be obtained via Resource Link™ by accessing the following Web site
Using the instructions on the Resource Link panels, obtain a user ID and password. Resource Link has been designed for easy access and navigation.
The following publication is available now:
- OSA-Express Integrated Console Controller User's Guide (SA22-7990)
The following updated publication is available now:
- zSeries® Connectivity Handbook (SG24-5444), a Redbook
The following updated publications will be available at planned availability:
- OSA-Express Customer's Guide and Reference (SA22-7935)
- OSA-Express Implementation Guide (SG24-5948), a Redbook
zSeries 990 publications
The following updated publication is available now in the Library section of Resource Link:
- System Overview (SA22-1032)
The following z990 updated publications will be available at planned availability in the Library section of Resource Link:
- Application Programming Interfaces (SB10-7030)
- Capacity Backup Upgrade User's Guide (SC28-6823)
- Hardware Management Console Operations Guide (SC28-6830)
- Installation Manual for Physical Planning (IMPP) (GC28-6824)
- Installation Manual (G229-9036)
- IOCP User's Guide (SB10-7037)
- Maintenance Information for Desktop Consoles (GC38-3115)
- PR/SM™ Planning Guide (SB10-7036)
- Service Guide (G229-9039)
- Standalone IOCP User's Guide (SB10-7040)
- Support Element Operations Guide (SC28-6831)
zSeries 890 publications
The following updated publication is available now in the Library section of Resource Link:
- System Overview (SA22-6832)
The following z890 updated publications will be available at planned availability in the Library section of Resource Link:
- Application Programming Interfaces (SB10-7030)
- Capacity Backup User's Guide (SC28-6823)
- Hardware Management Console Operations Guide (SC28-6830)
- Installation Manual for Physical Planning (GC28-6828)
- Installation Manual (GC28-6826)
- IOCP User's Guide (SB10-7037)
- Maintenance Information for Desktop Consoles (GC38-3115)
- PR/SM™ Planning Guide (SB10-7036)
- Service Guide (GC28-6827)
- Standalone IOCP User's Guide (SB10-7040)
- Support Element Operations Guide (SC28-6831)
Back to top
|
|
| Services |
|
Integrated Technology Services
IBM services include business consulting, outsourcing, hosting services, applications, and other technology management.
These services help you learn about, plan, install, manage, or optimize your IT infrastructure for e-business. They can help you integrate your high-speed networks, storage systems, application servers, and wireless protocols, and an array of platforms, middleware, and communications software for IBM and many non-IBM offerings. IBM is your one-stop shop for IT support needs.
For details on available services, contact your IBM representative or visit
For details on education offerings related to specific products, visit
Select your country, and then select the product as the category.
Back to top
|
|
| Technical information |
|
Specified operating environment
Standards: The OSA-Express2 Gigabit Ethernet features conform to the following standards:
-
Ethernet (1000BASE-SX, 1000BASE-LX)
- IEEE 802.3ac
- IEEE 802.3ad
- IEEE 802.1q
- IEEE 802.3x
- IEEE 802.3z
- DIX Version 2
The OSA-Express2 10 Gigabit Ethernet LR (10GBASE-LR) feature conforms to the following standards:
- IEEE 802.3ae
- IEEE 802.1q
- IEEE 802.3x — flow control
- DIX Version 2
The OSA-Express2 Gigabit Ethernet features have the following characteristics:
OSA-Express2 Gigabit Ethernet LX (#3364)
- Data rate: 1000 Mbps (1 Gbps)
- Operating mode: Full duplex
- Channel type: CHPID type OSD (QDIO)
- Traffic type: TCP/IP only
- Frame size: DIX V2: 1492 bytes; for jumbo frame 8992 bytes
- Connector type: LC Duplex
- Port count: Two ports per feature
- Cable type: Single mode fiber optic cabling (9 micron); accommodates reuse of existing multimode fiber (50 or 62.5 micron) when used with a pair of mode conditioning patch (MCP) cables
- Unrepeated distance: 5 km (3.1 miles)
- Unrepeated distance if using MCP cables: 550 meters (1804 feet)
OSA-Express2 Gigabit Ethernet SX (#3365)
- Data rate: 1000 Mbps (1 Gbps)
- Operating mode: Full duplex
- Channel type: CHPID type OSD (QDIO)
- Traffic type: TCP/IP only
- Frame size: DIX V2: 1492 bytes; for jumbo frame 8992 bytes
- Connector type: LC Duplex
- Port count: Two ports per feature
- Cable type: Multimode fiber optic cabling (50 or 62.5 micron)
-
Unrepeated distance:
- With 50 micron fiber at 500 MHz-km: 550 meters (1804 feet)
- With 62.5 micron fiber at 200 MHz-km: 275 meters (902 feet)
- With 62.5 micron fiber at 160 MHz-km: 220 meters (722 feet)
OSA-Express2 10 Gigabit Ethernet LR (#3368)
- Data rate: 10 Gigabits per second (10 Gbps)
- Operating mode: Full duplex
- Channel type: CHPID type OSD (QDIO)
- Traffic type: TCP/IP only
- Frame size: DIX V2: 1492 bytes; for jumbo frame 8992 bytes
- Connector type: SC Duplex
- Port count: One port per feature
- Cable type: Single mode fiber optic cabling (9 micron)
- Unrepeated distance: 10 km (6.2 miles)
Hardware requirements
The hardware requirements for the features and functions contained in this announcement are identified. Support Element (SE) drivers and Hardware Management Console/Support Element (HMC/SE) versions are identified. Machine Change Levels (MCLs) are required. Descriptions of the MCLs are available now via Resource Link at
MCLs are designed to be applied concurrently. Contact IBM service personnel for further information.
Note: TKE 4.2 code and the TKE 4.2 Smart Card Reader do not have SE driver dependencies. TKE 4.2 is supported on S/390® G6 servers and zSeries (z800, z900, z890, z990) when one or more of the following are present (depending upon servers): CMOS Cryptographic Coprocessor Facility (CCF), PCICC, PCIXCC, Crypto Express2.
SE HMC/SE
driver version Servers Description
55 1.8.2 z990, z890 October 29, 2004, content
19-digit PANs, PCIXCC
less than 512-bit keys,
clear key RSA, PCIXCC
FICON(TM) purge path
extended Layer 2 support,
OSA-Express TCP/IP stack
util. improvement,
OSA-Express CFCC level
14 with CFCC Dispatcher
Modifications
55 1.8.2 z990, z890 January 28, 2005, content
Crypto Express2 19-digit
PANs, Crypto Express2
less than 512-bit keys,
clear key RSA, Crypto
Express2 OSA-Express2
Gigabit Ethernet SX and
LX OSA-Express2 10
Gigabit Ethernet LR
Layer 2 support,
OSA-Express2 640 TCP/IP
stacks, OSA-Express2
Large send support,
OSA-Express2 Concurrent
LIC update, OSA-Express2
When available, FCP LUN Access Control will have the following hardware requirements:
SE HMC/SE driver version Servers Description 55 1.8.2 z990, z890 FCP LUN Access Control
Peripheral hardware and device attachments
For the appropriate peripheral hardware and device attachments, contact your IBM representative.
IBM devices previously attached to IBM S/390 and zSeries servers are supported for attachment to z890 and z990 ESCON® and FICON channels, unless otherwise noted. The subject I/O devices must meet ESCON or FICON architecture requirements to be supported. I/O devices that meet OEMI architecture requirements are supported only via an external converter. Prerequisite Engineering Change Levels may be required. For further detail, contact IBM service personnel.
While z890 and z990 support devices as described above, IBM does not commit to provide support or service for an IBM device that has reached its End of Service effective date as announced by IBM.
Note: IBM cannot confirm the accuracy of performance, compatibility, or any other claims related to non-IBM products. Questions regarding the capabilities of non-IBM products should be addressed to the suppliers of those products.
Software requirements
Note: z/OS.e is a specially priced offering of z/OS® for z800 and z890. z/OS.e cannot run on a z900 or z990.
Software requirements for Crypto Express2: Crypto Express2 on z890 and z990, and all of the functions introduced with this feature (unless otherwise noted), requires at a minimum:
- z/OS and z/OS.e V1.3, and later, with z990 Cryptographic Support, or z990 and z890 Enhancements to Cryptographic Support.
- z/VM® V5.1 for z/OS and Linux™ guests (planned to be available January 28, 2005). Refer to the 2084/2086 PSP buckets for any required service.
- VSE/ESA™ V2.7 and IBM TCP/IP for VSE/ESA V1.5.
-
Linux on zSeries support for clear key RSA operations is planned to be delivered in
October 2004 (for kernel 2.4) and in early 2005 (for kernel 2.6) as an Open Source contribution
via
IBM is working with its distribution partners to help enable them to provide this function in future distribution releases.
Note: z/VM, VSE/ESA, and Linux on zSeries support clear key RSA operations only.
CVV generation and verification services for 19-digit PANs for the Crypto Express2 and PCIXCC features on z890 and z990 requires at a minimum:
-
z/OS and z/OS.e V1.6, and later.
- ICSF support provided by ICSF 64-bit Virtual Support for z/OS and z/OS.e V1.6. This Web deliverable is planned to be available December 17, 2004, and is required for exploitation of this function.
Enabling use of less than 512-bit keys for clear key RSA operations for the Crypto Express2 and PCIXCC features on z890 and z990 requires at a minimum:
- z/OS and z/OS.e V1.3, and later, with z990 Cryptographic Support, or z990 and z890 Enhancements to Cryptographic Support.
- z/VM V5.1 for z/OS guests (planned to be available January 28, 2005). Refer to the 2084/2086 PSP buckets for any required service.
2048-bit key (clear and secure) RSA operations for the PCICC feature on z800 and z900 and the PCIXCC feature on z890 and z990 requires at a minimum:
- z/OS and z/OS.e V1.3, and later.
- z/VM V4.3, and later, for Linux guests (PCICC).
- z/VM V5.1, and later, for z/OS guests (PCICC).
- z/VM V5.1, and later, for Linux and z/OS guests (PCIXCC). Refer to the 2084/2086 PSP buckets for any required service.
-
Linux on zSeries support for clear key RSA operations for the PCIXCC
feature is provided in the currently available distributions (plus
maintenance), SUSE SLES 8 and SLES 9, Turbolinux TLES 8, and Conectiva
CLEE. Red Hat RHEL 3 can use the support available at
Support for clear key RSA operations for the PCICC feature is planned to be delivered in October 2004 (for kernel 2.4) and in early 2005 (for kernel 2.6) as an Open Source contribution via
IBM is working with its distribution partners to help enable them to provide this function in future distribution releases.
Note: z/VM, VSE/ESA, and Linux on zSeries support clear key RSA operations only.
Software requirements for FICON Express: FCP LUN Access Control , when available, applies to the FICON Express features on z890 and z990 when configured as CHPID type FCP.
- z/VM V4.4, and later, with PTF for APAR VM63328. To be supported concurrent with hardware planned availability.
-
Linux on zSeries. The currently available distributions, SUSE SLES 8 and
SLES 9, and Conectiva CLEE support FCP LUN Access Control except for the
exploitation of read-only sharing of SCSI devices. Linux on zSeries
support for read-only sharing of SCSI devices is planned to be delivered
in early 2005 as an Open Source contribution via
IBM is working with its distribution partners to provide this function in their distributions.
FICON purge path extended applies to the FICON Express features on z890 and z990 when configured as CHPID type FC (native FICON) and requires at a minimum:
- z/OS and z/OS.e V1.4, and later, with PTFs for APAR 0A06846 and EREP APAR IR51695
Software requirements for OSA-Express2 and OSA-Express: OSA-Express2 Gigabit Ethernet (GbE) SX and LX on z890 and z990 supports TCP/IP only (CHPID type OSD) and requires at a minimum:
- z/OS and z/OS.e V1.3, and later.
- z/VM V3.1 and V4.3, and later (planned to be available January 28, 2005). Refer to the 2084/2086 PSP buckets for any required service.
- VSE/ESA V2.6, and later.
- TPF V4.1 at PUT 13 with PTF for APAR PJ27333. Includes Virtual Internet Protocol Address (VIPA) support, which allows TCP/IP connections to be balanced in a loosely coupled environment.
- Linux on zSeries. The currently available distributions, SUSE SLES 8 and SLES 9, Red Hat RHEL 3, Turbolinux TLES 8, and Conectiva CLEE.
OSA-Express2 10 Gigabit Ethernet LR on z890 and z990 supports TCP/IP only (CHPID type OSD) and requires at a minimum:
- z/OS and z/OS.e V1.3, and later.
- z/OS and z/OS.e V1.5, and later (for Checksum offload).
- z/VM V3.1 and V4.3, and later (planned to be available January 28, 2005). Refer to the 2084/2086 PSP buckets for any required service.
- VSE/ESA V2.6, and later.
- TPF V4.1 at PUT 13 with PTF for APAR PJ27333, plus PTF for APAR PJ29930 for a definition/display enhancement in support of 10 GbE. Includes VIPA support, which allows TCP/IP connections to be balanced in a loosely coupled environment.
-
Linux on zSeries (including Checksum offload support) support is planned
to be delivered in early 2005 as an Open Source contribution via
IBM is working with its distribution partners to help enable them to provide this function in future distribution releases.
Checksum offload for IPv4 Packets for the OSA-Express2 Gigabit Ethernet on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
- z/OS and z/OS.e V1.5, and later.
- Linux on zSeries. The currently available distributions SUSE SLES 8 and SLES 9, RedHat RHEL 3, Turbolinux TLES 8, and Conectiva CLEE.
Layer 2 support for the OSA-Express2 (Gigabit Ethernet LX and SX [#3364, #3365] and 10 Gigabit Ethernet LR [#3368]) and OSA-Express features 1000BASE-T Ethernet (#1366), and Gigabit Ethernet LX and SX (#1364, #1365, #2364, #2365) on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
- z/VM V5.1 Layer 2 support for OSA-Express with PTF for APAR VM63538 (planned to be available December 3, 2004). Refer to the 2084/2086 PSP buckets for any additional required service.
- z/VM V5.1 Layer 2 support for OSA-Express2 with PTF for APAR VM63538 (supported as of January 28, 2005). Refer to the 2084/2086 PSP buckets for any additional required service.
-
Linux on zSeries support is planned to be delivered in October 2004
(for kernel 2.4) and in early 2005 (for kernel 2.6) as an Open Source
contribution via
IBM is working with its distribution partners to help enable them to provide this function in future distribution releases.
640 TCP/IP stacks for the OSA-Express2 Gigabit Ethernet and 10 Gigabit Ethernet LR features on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
-
z/OS and z/OS.e V1.6:
- HCD with enabling PTF for APAR OA07854
- HCM (optional feature) with enabling PTF for APAR IR05333
- z/VM V5.1, and later, with PTFs for APARs VM63524 and PQ91421 (planned to be available January 28, 2005). Refer to the 2084/2086 PSP buckets for any additional required service.
-
Linux on zSeries support is planned to be delivered in early 2005 as an
Open Source contribution via
IBM is working with its distribution partners to help enable them to provide this function in future distribution releases.
Large send support for the OSA-Express2 Gigabit Ethernet and 10 Gigabit Ethernet LR features on z890 and z990 applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
-
Linux on zSeries support is planned to be delivered in early 2005, as an
Open Source contribution via
IBM is working with its distribution partners to help enable them to provide this function in future distribution releases.
Stack utilization improvement for the OSA-Express features on z890 and z990 — Gigabit Ethernet, 1000BASE-T Ethernet, Fast Ethernet, Token Ring (#1364, #1365, #1366, #2364, #2365, #2366, #2367) applies to TCP/IP only and QDIO mode (CHPID type OSD) and requires at a minimum:
-
z/OS and z/OS.e V1.6:
- HCD with PTF for APAR OA03689
- z/VM V3.1 and z/VM V4.3, and later, with PTFs for APARs VM63524 and PQ91421 (planned to be available January 28, 2005). Refer to the 2084/2086 PSP buckets for any additional required service.
- Linux on zSeries. The currently available distributions, SUSE SLES 8 and SLES 9, Red Hat RHEL 3, and Conectiva CLEE.
Note: The OSA-Express2 features support all of the functions previously announced for the QDIO mode (CHIPD type OSD). Refer to the z890 and z990 Software requirements section of the Sales Manual on the Web and to the October 2004 update to the z890 and z990 Open Systems Adapter-Express Customer's Guide and Reference (SA22-7935).
Software requirements for CFCC level 14: CFCC level 14 with CFCC Dispatcher Modifications on z890 and z990 requires at a minimum:
- z/OS and z/OS.e V1.3, and later, with optional PTF for APAR OA08556. OA08556 may improve the performance characteristics of the CF when list structures are being duplexed, especially when using a mix of CFCC levels (for example, CFCC level 14 on one CF and a lower CFCC level on another). If duplexing of list structures is not being used, application of the PTF associated with this APAR is optional at this time.
- z/OS and z/OS.e V1.4, and later, with optional PTF for APAR OA08742. OA08742 is the generic CFCC level 14 support — it raises the z/OS CFCC level "understanding" to 14. This allows exploiters to explicitly request CFCC level 14 for their structures. At the time of this announcement there are no exploiters that do request level 14, so application of the PTF associated with this APAR is optional at this time.
- z/VM V3.1 and V4.3, and later, for z/OS guest support within a test environment.
Software requirements for GDPS™ enhancement: GDPS/PPRC Multiplatform Resiliency for zSeries on z800, z900, z890, and z990 requires at a minimum:
- z/VM V5.1
- IBM Tivoli® System Automation for Multiplatforms V1.2, and later
For additional GDPS/PPRC prerequisites refer to the following Web site
Software requirements for nondisruptive capacity change: Nondisruptive capacity change of z890 CPs to different capacity settings requires at a minimum:
- z/OS and z/OS.e V1.4, and later, with PTF for APAR OA07510. This APAR is required for V1.4, V1.5, and V1.6. This function is in the base of z/OS and z/OS.e V1.7.
- z/VM V5.1 (including Linux and z/OS guests).
Planning information
Customer responsibilities
Customer responsibilities for site preparation: Information on customer responsibilities for site preparation can be found in publications available in the Library section of Resource Link at
Cable orders
Fiber optic cable orders: Fiber optic cables for z800, z900, z890, and z990 are available via IBM Networking Services.
IBM Networking Services has a comprehensive set of scalable solutions to address IBM cabling requirements, from product level to enterprise level. IBM Network Integration and Deployment Services for zSeries fiber cabling provides planning and installation services for individual fiber optic connections. IBM Network Integration and Deployment Services for enterprise fiber cabling provides planning, IBM Fiber Transport System trunking components, and installation services for small, medium, and large enterprises.
IGS has the expertise and personnel available to effectively plan and deploy the appropriate cabling with the future in mind. These services may include planning, consultation, cable selection, installation, and documentation, depending upon the services selected.
These services are designed to be right-sized for your products or the end-to-end enterprise, and to take into consideration the requirements for all of the protocols and media types supported on zSeries (for example, ESCON, FICON, Coupling Links, OSA) whether the focus is the data center, the Storage Area Network (SAN), the Local Area Network (LAN), or the end-to-end enterprise.
IBM Networking Services are designed to deliver convenient, packaged services to help reduce the complexity of planning, ordering, and installing fiber optic cables. The appropriate fiber cabling is selected based upon the product requirements and the installed fiber plant.
The services are packaged as follows:
Under the zSeries fiber cabling services umbrella there are three options to provide individual fiber optic cables (jumper cables, conversion kits, and MCP cables) for connecting to z800, z890, z900, and z990, each option incorporating a specific set of services.
- Option 1 — Fiber optic jumper cabling package. IBM does the detailed planning. This option includes planning, new cables, installation, and documentation. An analysis of the zSeries channel configuration, I/O devices, and any existing fiber optic cabling is required to determine the appropriate fiber optic cables.
- Option 2 — Fiber optic jumper cable migration and reuse for a zSeries upgrade. IBM organizes the existing fiber optic cables based upon the z890 and z990 connection details. Relabeling, rerouting, and reconnection to the appropriate z890 and z990 channels is performed. New cables are not offered as a part of this option.
- Option 3 — Fiber optic jumper cables and installation. The customer tells us what they need. They do the detailed planning. The service includes new cables, installation, and documentation. Planning and providing the list of required cables are customer responsibilities.
Options 1 and 2 can be combined within one statement of work to provide comprehensive upgrade coverage.
Under the enterprise fiber cabling services umbrella there are two options to provide IBM Fiber Transport System (FTS) trunking commodities (fiber optic trunk cables, fiber harnesses, and panel-mount boxes) for connecting to the z800, z900, z890, and z990.
- Option 1 — zSeries fiber optic trunk cabling package. IBM reduces the cable clutter under the floor. An analysis of the zSeries (z800, z900, z890, z990) channel configuration and any existing fiber optic cabling is performed to determine the required FTS fiber optic trunking commodities (trunk cables, harnesses, and panel-mount boxes). This option includes zSeries planning, FTS fiber optic trunking commodities, installation, and documentation. This option does not include enterprise-level planning.
- Option 2 — Enterprise fiber cabling services. IBM organizes the entire enterprise. This option includes enterprise planning, new cables, fiber optic trunking commodities, installation, and documentation. This is the most comprehensive set of services.
Refer to the services section of Resource Link for further details. Access Resource Link at
Cabling responsibilities: Fiber optic cables, cable planning, labeling, and placement are all customer responsibilities for new installations and upgrades. Fiber optic conversion kits and Mode Conditioning Patch (MCP) cables are not orderable as features on z890 and z990. Installation Planning Representatives (IPRs) and System Service Representatives (SSRs) will not perform the fiber optic cabling tasks without a services contract.
The following tasks are required to be performed by the customer prior to machine installation:
- All fiber optic cable planning.
- All purchasing of correct fiber optic cables.
- All installation of any required MCP cables.
- All installation of any required Conversion Kits.
-
All routing of fiber optic cables to correct floor cutouts for proper
installation to server.
- Use the Physical CHannel IDentifier (PCHID) report or the report from the CHannel Path IDentifier (CHPID) Mapping Tool to accurately route all cables.
-
All labeling of fiber optic cables with PCHID numbers for proper
installation to server.
- Use the PCHID report or the report from the CHPID Mapping Tool to accurately label all cables.
Additional service charges may be incurred during the server installation if the above cabling tasks are not accomplished as required.
The table lists the connectors and cabling supported for each of the features available for ordering on the z890 and z990. For convenience, those features brought forward on an upgrade from z800 and z900 are also listed.
Feature Connector
number Feature name type Cable type
0219 ISC-3 link LC Duplex 9 micron SM
6154 ETR MTRJ 62.5 micron MM
2324 ESCON channel MTRJ 62.5 micron MM
2319 FICON Express LC Duplex 9 micron SM
LX
2320 FICON Express LC Duplex 50, 62.5 micron
SX MM
3364 OSA-X2 GbE LX LC Duplex 9 micron SM
3365 OSA-X2 GbE SX LC Duplex 50, 62.5 micron
MM
3368 OSA-X2 10 GbE SC Duplex 9 micron SM
LR(1)
1364 OSA-X GbE LX LC Duplex 9 micron SM
1365 OSA-X GbE SX LC Duplex 50, 62.5 micron
MM
1366 OSA-X RJ-45 Category 5 UTP
1000BASE-T
2364 OSA-X GbE LX SC Duplex 9 micron SM
2365 OSA-X GbE SX SC Duplex 50, 62.5 micron
MM
2366 OSA-X Fast RJ-45 Category 5 UTP
Ethernet
2367 OSA-X Token RJ-45 UTP or STP
Ring
- 1
- Note that OSA-Express2 10 Gigabit Ethernet LR uses a different connector type than OSA-Express2 Gigabit Ethernet.
MM is multimode fiber. SM is single mode fiber. OSA-X refers to OSA-Express. OSA-X2 refers to OSA-Express2. 1000BASE-T refers to the 10/100/1000 Mbps Ethernet feature. UTP is Unshielded Twisted pair. STP is Shielded Twisted Pair.
Fiber Quick Connect (FQC), a fiber harness integrated in the zSeries frame for "quick" connect, is offered as a feature on zSeries for connection to ESCON channels.
Cables for ICB links continue to be available as features. Refer to the Special features section of the Sales Manual on the Web for a list of these features and cables for ICB links.
For further details also refer to z890 and z990 Installation Manual for Physical Planning (IMPP), available on Resource Link.
Note: IBM Networking Services can satisfy your fiber optic as well as your copper cabling requirements.
Security, auditability, and control
This product uses the security and auditability features of, for example, host hardware, host software, and application software.
The customer is responsible for evaluation, selection, and implementation of security features,
administrative procedures, and appropriate controls in application systems and communications
facilities.
Back to top
|
|
| IBM Electronic Services |
|
IBM Global Services has transformed its delivery of hardware and software support services to put
you on the road to higher systems availability. IBM Electronic Services is a Web-enabled solution
that provides you with an exclusive, no-additional-charge enhancement to the service and support on
the IBM . You should benefit
from greater system availability due to faster problem resolution and preemptive monitoring. IBM
Electronic Services is comprised of two separate but complementary elements: IBM Electronic Services
news page and IBM Electronic Service Agent™.
IBM Electronic Services news page provides you with a single Internet entry point that replaces the multiple entry points traditionally used by customers to access IBM Internet services and support. The news page enables you to gain easier access to IBM resources for assistance in resolving technical problems.
The IBM Electronic Service Agent is no-additional-charge software that resides on your IBM system that is designed to
proactively monitor events and transmit system inventory information to IBM on a periodic
customer-defined timetable. The IBM Electronic Service Agent tracks system inventory, hardware
error logs, and performance information. If the server is under a current IBM maintenance service
agreement or within the IBM warranty period, the Service Agent automatically reports hardware
problems to IBM. Early knowledge about potential problems enables IBM to provide proactive service
that maintains higher system availability and performance. In addition, information collected
through the Service Agent will be made available to IBM service support representatives when they
are helping answer your questions or diagnosing problems.
To learn how IBM Electronic Services can work for you, visit
Back to top
|
|
| Terms and conditions |
|
This product is available for purchase under the terms of the IBM Customer Agreement.
Each IBM machine is manufactured from parts that may be new or used. In some cases, a machine may not be new and may have been previously installed. Regardless, IBM's appropriate warranty terms apply.
Field-installable feature: Yes
Warranty period: One year
Customer setup: No
Licensed Internal Code: IBM Licensed Internal Code (LIC) is licensed for use by a customer on a specific machine, designated by serial number, under the terms and conditions of the IBM Agreement for Licensed Internal Code, to enable a specific machine to function in accordance with its specifications, and only for the capacity authorized by IBM and for which the customer has acquired. You can obtain the agreement at the following Web site or by contacting your IBM representative.
|
|
| Prices |
|
Prices are available upon request.
Machine Feature MMMC Init/
Description type Model number indicator MES
IBM eServer(R) 2084 A08
zSeries 990 B16
C24
D32
TKE 4.2 code 0853 N Both
Crypto Express2 0863 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
OSA-Express2 GbE LX 3364 N Both
OSA-Express2 GbE SX 3365 N Both
OSA-Express2 10 GbE LR 3368 N Both
IBM eServer 2086 A04
zSeries 890
TKE 4.2 code 0853 N Both
Crypto Express2 0863 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
OSA-Express2 GbE LX 3364 N Both
OSA-Express2 GbE SX 3365 N Both
OSA-Express2 10 GbE LR 3368 N Both
Machine Feature MMMC Init/
Description type Model number indicator MES
IBM eServer 2064 101-109
zSeries 900 1C1-1C9
110-116
210-216
2C1-2C9
TKE 4.2 code 0853 N Both
2048-bit key mgmt for PCICC 0867 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
IBM eServer 2066
zSeries 800
0E1
0A1
0B1
0C1
0X2
001
0A2
002
003
004
TKE 4.2 code 0853 N Both
2048-bit key mgmt for PCICC 0867 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
S/390 Parallel 9672
Enterprise
Servers (G6) X17, Z17
X27, Z27
X37, Z37
X47, Z47
X57, Z57
X67, Z67
X77, Z77
X87, Z87
X97, Z97
XX7, ZX7
XY7, ZY7
XZ7, ZZ7
TKE 4.2 code 0853 N Both
TKE 4.2 Smart Card Reader 0887 N Both
TKE 4.2 addl Smart Cards 0888 N Both
N = No
Model conversions
From To
Type Model Type Model
2066 0A2 2086 A04
2066 0X2 2086 A04
2066 003 2086 A04
Parts removed or replaced become the property of IBM and must be returned.
Feature conversions
Feature Returned Continuous From To parts maintenance 4598 6070 Y Y 4598 6110 Y Y 4598 6120 Y Y Feature Returned Continuous From To parts maintenance 4598 6130 Y Y 4598 6140 Y Y 4598 6150 Y Y 4598 6160 Y Y 4598 6170 Y Y 4598 6210 Y Y 4598 6220 Y Y 4598 6230 Y Y 4598 6240 Y Y 4598 6250 Y Y 4598 6260 Y Y 4598 6270 Y Y 4598 6310 Y Y 4598 6320 Y Y 4598 6330 Y Y 4598 6340 Y Y Feature Returned Continuous From To parts maintenance 4598 6350 Y Y 4598 6360 Y Y 4598 6370 Y Y 4598 6410 Y Y 4598 6420 Y Y 4598 6430 Y Y 4598 6440 Y Y 4598 6450 Y Y 4598 6460 Y Y 4598 6470 Y Y 4604 6070 Y Y 4604 6110 Y Y 4604 6120 Y Y 4604 6130 Y Y 4604 6140 Y Y 4604 6150 Y Y 4604 6160 Y Y 4604 6170 Y Y 4604 6210 Y Y 4604 6220 Y Y 4604 6230 Y Y 4604 6240 Y Y 4604 6250 Y Y 4604 6260 Y Y 4604 6270 Y Y 4604 6310 Y Y 4604 6320 Y Y 4604 6330 Y Y 4604 6340 Y Y 4604 6350 Y Y 4604 6360 Y Y 4604 6370 Y Y 4604 6410 Y Y 4604 6420 Y Y 4604 6430 Y Y 4604 6440 Y Y 4604 6450 Y Y 4604 6460 Y Y 4604 6470 Y Y 4606 6070 Y Y 4606 6110 Y Y 4606 6120 Y Y 4606 6130 Y Y 4606 6140 Y Y 4606 6150 Y Y 4606 6160 Y Y 4606 6170 Y Y 4606 6210 Y Y 4606 6220 Y Y 4606 6230 Y Y 4606 6240 Y Y 4606 6250 Y Y 4606 6260 Y Y 4606 6270 Y Y 4606 6310 Y Y 4606 6320 Y Y 4606 6330 Y Y 4606 6340 Y Y 4606 6350 Y Y 4606 6360 Y Y 4606 6370 Y Y 4606 6410 Y Y 4606 6420 Y Y 4606 6430 Y Y 4606 6440 Y Y 4606 6450 Y Y 4606 6460 Y Y 4606 6470 Y Y
Y = Yes
Parts removed or replaced become the property of IBM and must be returned.
Back to top
|
|
| Order now |
|
To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business Partner.
To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968).
Phone: 800-IBM-CALL (426-2255)
Fax: 800-2IBM-FAX (242-6329)
Internet: ibm_direct@vnet.ibm.com
Mail: IBM Americas Call Centers
Dept: IBM CALL, 11th Floor
105 Moatfield Drive
North York, Ontario
Canada M3B 3R1
Reference: YE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.
Note: Shipments will begin after the planned availability date.
Trademarks
Back to top
Printable version