IBM Support

Upgrade 3906DEVICE, Subset 3906/ZOS

  Preventive Service Planning

Upgrade 3906DEVICE, Subset 3906/ZOS


Upgrade 3906DEVICE, Subset 3906/ZOS:

  THIS SUBSET CONTAINS INSTALLATION INFORMATION FOR DEVICE 3906.


Change Summary

DATE LAST SECTION COMMENTS CHANGED 1. 17/07/17 GENERAL INFORMATION 2. YY/MM/DD HARDWARE SERVICE LEVELS NO ENTRIES 3. 19/04/15 SOFTWARE SERVICE LEVELS 4. 19/06/12 SERVICE RECOMMENDATIONS 5. YY/MM/DD OPTIONAL PRODUCT LEVELS NO ENTRIES


Service Recommendation Summary

DATE APAR PTF VOLID COMMENTS 22 19/06/12 OA57088 UA99616 1000 NEW FUNCTION - ENHANCEMENTS TO 21 19/01/22 OA55184 UA98183 1000 NEW FUNCTION - CRYPTOGRAPHIC SER 20 18/12/27 OA56503 UA98177 1000 POTENTIAL CORRUPTION OF DATA WIT 19 18/12/05 OA56265 UA98091 1000 NEW FUNCTION - ENHANCEMENTS IN S 18 18/11/20 OA55159 UA97968 1000 ADDITIONAL IBM Z14 EXPLOITATION 17 18/10/26 PI97665 UI55801 1806 TCPIP LOOPING IN EZBIFDOB WHEN 16 18/10/03 OA56062 UA97508 1000 IMPROVE XCF PERFORMANCE TO XCF 15 18/08/17 OA55157 UA97080 1000 ADDITIONAL IBM Z14 TOLERATION SU 14 18/05/23 OA55241 UA96222 1000 WITH Z/14 IAXVG 01000002 ACCESS 13 18/02/02 PI90941 UI53579 1801 CPSM WLM ROUTING MAY INCORRECTLY 12 18/02/02 PI91168 UI53573 1000 CPSM WLM ROUTING MAY INCORRECTLY 11 17/12/26 PI87493 UI52695 1000 NEW FUNCTION - GDPS Z14 SUPPORT 10 17/12/15 OA54151 UA94592 1000 IXL004W WAIT STATE, DURING FRAME 9 17/11/29 OA53914 UA94380 1000 ABENDC0D RSN 9C000420 IAXBS +01E 8 17/11/20 OA53301 UA94006 1000 SYSROUTE OF OA51135 FROM V2R2 TO 7 17/10/25 OA54037 UA94004 1000 ON Z14, CSNBSYE WITH GCM RULE AN 6 17/09/14 OA51864 UA93213 1709 NEW FUNCTION- SUPPORT FOR MEMORY 5. 17/08/30 VM65942 UM35208 1000 Z/VM SUPPORT FOR Z14 WITH DRIVER 4 17/08/30 PI46151 UI38554 1606 NEW FUNCTION- ICKDSF STAND ALONE 3 17/08/11 OA51135 UA92761 1708 IEBGENER PERFORMANCE ON Z13 2 17/08/09 OA52803 UA92886 1708 NEW FUNCTION - RSM MIGRATION HEA 1 17/07/31 OA52638 UA92817 1707 IBM Z14 TOLERATION SUPPORT


General Information

THIS SECTION CONTAINS INFORMATION THAT IS OF GENERAL INTEREST DURING DEVICE INSTALLATION. 1. 17/07/17 When you migrate to an IBM z14 server, you must have performed all the migration actions for preceding IBM servers in addition to those for the z14 server itself. There are two sets of actions: 1. Install the PTFs you need for the server and for the functions you will use. To identify the PTFs you need, use the Fix Categories as described below. 2. Additional steps you must take to use the the server and the functions you will use. For these actions, follow the steps in z/OS V2.3 Migration. This book also contains the z14 actions needed for z/OS V2.2 and z/OS V2.1. Note: To understand the specific z14 functions that are available on each z/OS release and whether any web deliverables are required for that release, see "z/OS V2.3 Migration," which you can find a link to here: (http://www.ibm.com/systems/z/os/zos/installation/). Processor support is delivered in service (PTFs), z/OS features, and web deliverables. All base support for z14 servers is delivered in PTFs. Below, you will find the SMP/E Fix Categories that can be used to identify required service, additional recommended service, and service needed for exploitation. Exploitating some functions can require z/OS features to be enabled, PTFs to be installed, and web deliverables to be downloaded and installed. For example, the cryptographic exploitation support for the z14 server is available as a web deliverable packaged as an FMID with additional PTFs. IBM recommends that you use the SMP/E REPORT MISSINGFIX command to identify the PTFs you need for the z14 server that you do not already have installed. The simplest way to do that is to specify these fix categories for the REPORT MISSINGFIX command as shown below: IBM.Device.Server.* IBM.Function.* This will identify not only z14 support PTFs, but those for prior generations of IBM servers that you might need, and those required to enable a variety of functions. REPORT MISSINGFIX creates a batch job for the SMP/E RECEIVE ORDER command that you can use to get any PTFs you do not already have. SMP/E also provides an Explorer function you can use to find new fix categories that might be of interest. For a description of all the fix categories, see IBM Fix Category Values and Descriptions, here: (www.ibm.com/systems/z/os/zos/features/smpe/fix-category.html). To find out which PTFs you do not already have installed, download the current 2-year Enhanced HOLDDATA file, and use the SMP/E REPORT MISSINGFIX report to identify the PTFs that you need. Here is an example of the SMP/E control statements you can use for REPORT MISSINGFIX: SET BDY(GLOBAL) . REPORT MISSINGFIX ZONES(target zone) FIXCAT(IBM.Device.Server.* IBM.Function.*) . For more information about the REPORT MISSINGFIX and RECEIVE ORDER commands, see SMP/E for z/OS Commands. IMPORTANT: Not all the required PTFs are listed in the Software Support section of this PSP bucket. Those for prior servers are listed in their PSP buckets. If you are migrating from a generation prior to the z13 and z13s, you must install all the service required for each intermediate generation. See Section 3, Software Service Levels. Depending on the z/OS release you are using and the cryptographic functions that you want to use, you might be able to use the level of ICSF included with your z/OS release or an earlier cryptographic web deliverable. Similarly, if you are using z/OS V2.1 and want to exploit the new machine instructions using XL C/C++ (ARCH(11) and TUNE(11)) or SIMD exploitation by MASS and ATLAS Libraries, then a separate web deliverable (the z14 Exploitation Support for z/OS V2.1 XL C/C++ web deliverable) is required. Likewise, if you are using z/OS V1.13 and want to exploit Virtual Flash Memory (including pageable 1 MB Large Page support, dynamic reconfiguration support, or optional PLPA/COMMON page data set support), or 2GB Page support then a separate web deliverable (the z/OS V1R13 RSM Enablement Offering web deliverable) is required. The SMP/E REPORT MISSINGFIX report, based on current HOLDDATA, can help you quickly identify the fixes you need that are not yet installed on your system. This function is based on fix categories. For the z14, the applicable fix categories are: If you want to use more specific fix categories, you can specify these individually or together for z/OS PTFs required to use a z14 server, exploit its functions and features, and those IBM recommends you have installed if you are using a z14 server: IBM.Device.Server.z14-3906.RequiredService IBM.Device.Server.z14-3906.Exploitation IBM.Device.Server.z14-3906.RecommendedService Service required for a number of functions are not listed here, but can be found by using the following Fix Categories. (Note that they have been renamed, so they need not be specified for each server any longer.) IBM.Function.ParallelSysplexInfiniBandCoupling IBM.Function.ServerTimeProtocol IBM.Function.UnifiedResourceManager IBM.Function.zHighPerformanceFICON IBM.Function.PricingInfrastructure IBM.Function.zHyperLink IBM.Function.DataSetEncryption IBM.Function.zEDC IBM.Device.Server.zBX-2458 IBM.DB2.AnalyticsAccelerator.V2R1 IBM.DB2.AnalyticsAccelerator.V5R1 IBM.DB2.AnalyticsAccelerator.V4R1 IBM.DB2.AnalyticsAccelerator.V3R1 See the Software Service Levels section for information about the specific functions available on each release and any web deliverables required for that release. If you are exploiting z14 capabilities by installing a web deliverable, additional PTFs might be required. Follow the instructions in the Program Directory that is associated with each web deliverable find out how to identify the required PTFs. An alternative way to find the PTFs you need to install is by using the tables below to identify the PTFs you need. In addition, you must also obtain the applicable software PSP buckets. The PSP buckets list the recommended, required, and exploitation PTFs, and also include information about the appropriate Fix Categories needed to identifythose PTFs. However, using PSP buckets and checking on the status of the PTFs listed in them is far more time-consuming and error-prone than using REPORT MISSINGFIX with the appropriatefix categories. HOW TO USE SMP/E FIX CATEGORIES =============================== You can use SMP/E and the fix categories described above to identify any required, recommended, and exploitation PTFs for the z14 server that are not already installed on your system. Do this using the SMP/E REPORT MISSINGFIX command. Fix categories are defined in IBM HOLDDATA. Therefore, before you run the SMP/E REPORT command, you must first acquire the latest HOLDDATA from IBM. Current HOLDDATA is provided in all IBM service deliverables, including orders produced using SMP/E RECEIVE ORDER and Shopz. Also, they are available in the "Full" (730 day) HOLDDATA file you can download directly from: ftp://service.boulder.ibm.com/s390/holddata/full.txt Then, run the REPORT MISSINGFIX command. For example: SET BDY(GLOBAL). REPORT MISSINGFIX ZONES(zosTgtZoneName, db2TgtZoneName, cicsTgtZoneName, imsTgtZoneName) FIXCAT(IBM.Device.Server.*). In this example, a wildcard suffix ("*") is used on the specified fix category to identify any missing PTFs for all the fix categories for the z14 server, AND all those for prior IBM servers. The REPORT command will analyze software installed in the specified target zones, and determine whether PTFs identified by the specified fix categories are not installed in those target zones. The resulting Missing FIXCAT SYSMOD Report identifies any PTFs you need to install. For more information about SMP/E fix categories, see: http://www.ibm.com/systems/z/os/zos/features/smpe/fix-category.html.


Hardware Service Levels

THIS SECTION CONTAINS INFORMATION THAT IS HARDWARE SERVICE LEVEL RELATED. 1. YY/MM/DD NO ENTRIES


Software Service Levels

THIS SECTION CONTAINS THE MINIMUM REQUIRED SOFTWARE PRODUCT LEVELS REQUIRED TO SUPPORT THIS DEVICE. 6. 19/04/15 THIS ENTRY DOCUMENTS THE Z/OS SUPPORT REQUIRED FOR THE z14 server. *** N O T E ! *** * * * IBM recommends you use Fix Categories as described * * in Section 2. While you can use these tables * * instead, it is more time-consuming and error-prone * * than using the SMP/E REPORT MISSINGFIX function. * * * *** N O T E ! *** If you are upgrading from a prior generation of server, you must install all the maintenance and perform the required migration actions for each intermediate server. Here is a list of fix categories for prior generations o servers: Server Fix Category ======= ======================================= zBC12 IBM.Device.Server.zBC12-2828* zEC12 IBM.Device.Server.zEC12-2827* z114 IBM.Device.Server.z114-2818* z196 IBM.Device.Server.z196-2817* z10 BC IBM.Device.Server.z10-BC-2098* z10 EC IBM.Device.Server.z10-EC-2097* z9 BC IBM.Device.Server.z9-BC-2096* z9 EC IBM.Device.Server.z9-EC-2094* z890 IBM.Device.Server.z890-2086* z990 IBM.Device.Server.z990-2084* z13 IBM.Device.Server.z13-2964* z13s IBM.Device.Server.z13s-2965* If you want to specify even more granular Fix Categories, you can find them documented in the applicable PSP buckets for each server. >>> z/OS V2.3 SUPPORT z/OS V2.3 supports the base functions of the z14. For more information, see the z14 announcement and z/OS V2.3 Migration. To identify any additional z/OS V2.3 APARs/PTFs that might be required for base support, use the SMP/E Fix Category: + IBM.Device.Server.z14-3906.RequiredService IBM recommends that you also include: + IBM.Device.Server.z14-3906.RecommendedService Additional required service (not part of the z/OS V2.3 base): FMID APAR PTF Comments ======= ======= ======= ============================ HIO1104 OA55404 UA97193 IOCP support for Dynamic CF I/O,NVMe HCS77B0 OA52494 UA93356 HCD support for LinuxONE OA54912 UA97443 HCD support for Dynamic CF I/O, NVMe OA54985 UA97344 XCF/XES CFLEVEL 23 support HCM1G10 IO25603 UO01879 HCM support for Dynamic CF I/O, NVMe JCS77BJ OA52494 UA93357 HCD JPN support for LinuxONE OA54912 UA97444 HCD JPN for Dynamic CF I/O, NVMe HVT6230 OA53791 UA93456 VTAM HCR77C0 OA55906 UA97940 ICSF CCA 5.4/6.2 toleration HCR77C1 OA55906 UA97937 ICSF CCA 5.4/6.2 toleration Required service for other products, if installed: FMID APAR PTF Comments ======= ======= ======= ============================ HSAL110 OA46903 UA76072 IBM Automation Control V1.1.0 HWRE330 OA45346 UA75591 System Automation V3.3 JWRE331 OA46560 UA75876 System Automation V3.3 HWRE340 OA45346 UA75592 System Automation V3.4 JWRE341 OA46560 UA75890 System Automation V3.4 HWRE350 OA46560 UA75887 System Automation V3.5 JWRE351 OA46560 UA75891 System Automation V3.5 Exploitation support for many of z14 server functions is provided in z/OS V2.3. PTFs and a web deliverable are needed for certain functions. To identify the z/OS V2.3 APARs/PTFs required to exploit any of these functions use the SMP/E Fix Category: + IBM.Device.Server.z14-3906.Exploitation IBM recommends that you also include: + IBM.Device.Server.z14-3906.RecommendedService Exploitation support for z/OS: FMID APAR PTF Comments ======= ======= ======= ============================ HBB77B0 OA49692 UA93148 BCP (HIS) OA53402 UA93052 BCP CEX6C OA54688 UA97982 XCF support for Async XI OA53952 UA97500 SPI support for Dynamic CF I/O JBB77BJ OA49692 UA93155 BCP JPN (HIS) HRM77B0 OA52452 UA92961 RMF support for VFM OA54952 UA97902 RMF CEC-wide crypto reporting JRM77BJ OA52452 UA92962 RMF support for VFM HCR77C0 OA52388 UA93353 ICSF CEX6/PCI-HSM toleration HIP6230 PI86553 UI50060 TCP/IP RoCE PI86646 UI50295 TCP/IP RoCE PI95703 UI61340 TCP/IP 25Gb OSA support HVT6230 OA53654 UA93588 VTAM RoCE OA55256 UA98586 VTAM 25Gb OSA support Exploitation for the z14 zHyperLink Express feature: FMID APAR PTF Comments ======= ======= ======= ============================ HBB77B0 OA50653 UA93307 BCP (IOS) OA54167 UA94515 BCP (IOS) OA54600 UA98063 BCP (IOS write support) HDZ2230 OA53199 UA93452 DFSMS (Media Mgr, Dev. Support) OA50681 UA93441 DFSMS (Media Mgr, Dev. Support) OA54996 UA98053 DFSMS (Media Mgr write Support) OA56575 UA98537 DFSMS (Media Mgr Metro Mirror Suppor OA56809 UA98539 DFSMS (VSAM support for Metro Mirror OA55054 UA98055 DFSMS (Device support for write) OA53287 UA93483 DFSMS (Catalog) OA53595 UA93470 DFSMS (FAMS) OA52329 UA93416 DFSMS (LISTDATA) HRM77B0 OA52452 UA92961 RMF JRM77BJ OA52452 UA92962 RMF JPN Note: Exploitation support for the DS8800 zHyperLink Express can be identified using the IBM.Function.zHyperLink fix category. Exploitation support for other products: FMID APAR PTF Comments HDBCC10 PI82575 UI50509 DB2 12 support-zHyperLink Exp. PI89828 UI52311 DB2 12 support-zHyperLink Exp. HLM5530 OA47128 UA76496 OMEGAMON multi-threading and >128 processors The level of function provided for cryptographic support on z/OS V2.3 differs depending whether an ICSF web deliverable is installed. The level of ICSF included in z/OS V2.3 (HCR77C0) includes support for: - Crypto Express6S support of VISA Format Preserving Encryption - Crypto Express6S support of greater than 16 Domains - Crypto Express6S Exploitation The level of ICSF included in z/OS V2.3 with Cryptographic Support for z/OS V2R2 - z/OS V2R3 (HCR77D0) installed includes support for: - CCA 5.4/6.2 - Crypto Express6S support of VISA Format Preserving - Crypto Express6S Exploitation If you are using a Crypto Express5 or Crypto Express6, you should install APAR OA55906, or upgrade ICSF to FMID HCR77D0, prior to upgrading to the z14. >>> z/OS V2.2 SUPPORT z/OS V2.2 support is available for the base functions of the z14. For more information, see the z14 announcement and z/OS V2.3 Migration. To identify the z/OS V2.2 APARs/PTFs required for this base support use the SMP/E Fix Category: IBM recommends that you also include: + IBM.Device.Server.z14-3906.RecommendedService Required service for z/OS: FMID APAR PTF Comments ======= ======= ======= ============================ HBB77A0 OA50757 UA92627 BCP (System Trace) OA51289 UA92527 BCP (IOS) OA51015 UA91172 BCP (RSM) OA51835 UA91221 BCP (SADMP) OA52058 UA92945 XCF CFLEVEL 22 support OA54985 UA97360 XCF CFLEVEL 23 support OA54688 UA97985 XCF support for Async XI HDZ2220 OA47091 UA82332 DFSMSdss EER3500 IO24874 UO01849 EREP HCS77A0 OA50212 UA92504 HCD OA52494 UA93354 HCD support for LinuxONE OA54912 UA97441 HCD support for Dynamic CF I/O, NVMe JCS77AJ UA92505 HCD JPN OA52494 UA93355 HCD support for LinuxONE OA54912 UA97442 HCD JPN for Dynamic CF I/O, NVMe HCM1F10 IO24436 UO01826 HCM IO25603 UO01881 HCM support for Dynamic CF I/O, NVMe EDU1H01 PI46151 UI38554 ICKDSF (Standalone) n/a PI75033 UI44041 ICKDSF (Standalone CD Level) HIO1104 OA52069 UA91819 IOCP OA55404 UA97193 IOCP support for Dynamic CF I/O,NVMe HMQ4160 PI62275 UI48832 HLASM HMP1J00 IO25081 UO01828 SMP/E HRM77A0 OA51913 UA92569 RMF HVT6220 OA51867 UA83764 VTAM OA53791 UA93437 VTAM OSA packet err toleration HIP6220 PI86950 UI50215 TCP/IP HCR77C0 OA55906 UA97940 ICSF CCA 5.4/6.2 toleration HCR77C1 OA55906 UA97937 ICSF CCA 5.4/6.2 toleration HCR77B1 OA55906 UA97939 ICSF CCA 5.4/6.2 toleration HCR77B0 OA55906 UA97938 ICSF CCA 5.4/6.2 toleration Required service for other products, if installed: FMID APAR PTF Comments ======= ======= ======= ============================ HSAL110 OA46903 UA76072 IBM Automation Control V1.1.0 HWRE330 OA45346 UA75591 System Automation V3.3 JWRE331 OA46560 UA75876 System Automation V3.3 HWRE340 OA45346 UA75592 System Automation V3.4 JWRE341 OA46560 UA75890 System Automation V3.4 HWRE350 OA46560 UA75887 System Automation V3.5 JWRE351 OA46560 UA75891 System Automation V3.5 Exploitation support for additional functions is provided in the z/OS V2.2 base product, PTFs, and a web deliverable. To identify the z/OS V2.2 APARs/PTFs required to exploit any of these functions use the SMP/E Fix Category: + IBM.Device.Server.z14-3906.Exploitation IBM recommends that you also include: + IBM.Device.Server.z14-3906.RecommendedService Exploitation service: FMID APAR PTF Comments ======= ======= ======= ============================ HBB77A0 OA50144 UA93171 WLM HiperDispatch enhancements OA49692 UA93156 BCP (HIS) OA51643 UA93169 BCP support for Guarded Stg Fac OA49967 UA93167 BCP support for CMPSC enhance OA51647 UA93332 BCP RSM support for IEP OA51030 UA93141 BCP RTM support for IEP OA51862 UA93222 XCF - CFLEVEL 22 enhancements OA52059 UA93278 XCF - CFLEVEL 22 enhancements OA49718 UA92923 Timer - LPAR offset OA51879 UA92085 XCF (CF Encryption) OA49692 UA93158 BCP (HIS) OA51030 UA93140 BCP RTM support for IEP JPN OA51862 UA93223 XCF - CFLEVEL 22 enhancements OA53952 UA97501 SPI support for Dynamic CF I/O HOT77A0 OA51612 UA93462 z/OS UNIX support for IEP HRM77A0 OA50761 UA93177 RMF support for SMT-2 for SAPs, VFM OA52003 UA92533 RMF support CF Encryption OA54952 UA97901 RMF CEC-wide crypto reporting HIP6220 PI75733 UI49043 CommServer sppt for OSA-Express6S PI75200 UI50088 CommServer support for RoCE Express2 PI86553 UI50059 TCP/IP RoCE PI95703 UI61339 TCP/IP 25Gb OSA support HVT6220 OA51950 UA93502 VTAM support for RoCE Express2 OA55256 UA98585 VTAM 25Gb OSA support HRM77A0 OA50762 UA93220 RMF support for RoCE Express2 OA50693 UA93262 RMF CEX6 support HCR77C0 OA52388 UA93353 ICSF CEX6/PCI-HSM toleration HCR77B1 OA52388 UA93352 ICSF CEX6/PCI-HSM toleration HCR77B0 OA52388 UA93351 ICSF CEX6/PCI-HSM toleration JRM77AJ OA50761 UA93179 RMF support for SMT-2 for SAPs, VFM OA50762 UA93221 RMF JPN spt for RoCE Express2 Exploitation for the z14 zHyperLink Express feature: FMID APAR PTF Comments ======= ======= ======= ============================ HBB77A0 OA50653 UA93306 BCP (IOS) OA54167 UA94516 BCP (IOS) OA54600 UA98062 BCP (IOS write support) HDZ2220 OA51450 UA93447 DFSMS (Media Mgr, Dev. Spt) OA50681 UA93467 DFSMS (Media Mgr, Dev. Spt) OA54996 DFSMS (Media Mgr write Support) OA55054 DFSMS (Device support for write) OA56575 UA98536 DFSMS (Media Mgr Metro Mirror Support) OA56809 UA98538 DFSMS (VSAM support for Metro Mirror) OA51783 UA93449 DFSMS (Catalog) OA52133 UA93435 DFSMS (CMM) OA53349 UA93451 DFSMS (FAMS) OA52329 UA93418 DFSMS (LISTDATA) HRM77A0 OA50755 UA93329 RMF JRM77AJ OA50755 UA93331 RMF Note: Exploitation support for the DS8800 zHyperLink Express can be identified using the IBM.Function.zHyperLink fix category. Exploitation support for other products: FMID APAR PTF Comments ======= ======= ======= ============================ HDBCC10 PI82575 UI50509 DB2 12 support-zHyperLink Exp. PI89828 UI52311 DB2 12 support-zHyperLink Exp. Exploitation for Coupling Express LR: FMID APAR PTF Comments ======= ======= ======= ============================ HBB77A0 OA48832 UA92997 Coupling Express LR support OA48839 UA92900 Coupling Express LR support OA47763 UA92290 Coupling Express LR support JBB77AJ OA48832 UA92992 Coupling Express LR support JBB77AH OA48839 UA92904 Coupling Express LR support for RSM web deliverable HCS77A0 OA47789 UA92101 Coupling Express LR support JCS77AJ OA47789 UA92102 Coupling Express LR support HCM1F10 IO23613 UO01843 Coupling Express LR support HIO1104 OA51111 UA91001 Coupling Express LR support HRM77A0 OA48959 UA93012 Coupling Express LR support JRM77AJ OA48959 UA93014 Coupling Express LR support Exploitation support for other products: FMID APAR PTF Comments ======= ======= ======= ============================ HDBCC10 PI82575 UI50509 DB2 12 support-zHyperLink Exp. HCS77A0 OA52494 UA93354 HCD LinuxONE definition support JCS77AJ OA52494 UA93355 HCD JPN LinuxONE definition HLM5530 OA47128 UA76496 support OMEGAMON multi- threading and >128 processors The level of function provided for cryptographic support on z/OS V2.2 differs depending whether an ICSF web deliverable is installed. The level of ICSF included in z/OS V2.2 (HCR77B0) includes support for: - Greater than 16 domains (up to 85) on Crypto Express4S or Crypto Express5S - Crypto Express4S exploitation support for CCA 4.4 and other EP11 cryptographic enhancements including: RKX Key Export Wrap, UDX Reduction/simplification, additional EP11 algorithms, expanded EMV support, AP Configuration simplification, CTRACE Enhancements, and KDS Key Utilization Stats. - Next Generation Coprocessor support with Visa Format Please note that if you are running the level of ICSF that shipped as part of z/OS V2.2 (HCR77B0) or a higher ICSF web deliverable on z/OS V2.2 you can tolerate Crypto Express6 on a z14 server which treats Crypto Express6S cryptographic coprocessors and accelerators as Crypto Express5 coprocessors and accelerators. However you must install the required PTFs identified by the SMP/E Fix Category: + IBM.Device.Server.z14-3906.Exploitation New functions are available for Integrated Cryptographic Service Facility (ICSF) in the Cryptographic Support for z/OS V1R13 - z/OS V2R2 web deliverable (HCR77B1), which supports IBM zEnterprise EC12 (zEC12), zEnterprise BC12 (zBC12), and z14 processors. This web deliverable, which provides new operator command support for certain ICSF administrative functions, is available for download from: http://www.ibm.com/z/os/zos/downloads/ You can use from: http://www.ibm.com/z/os/zos/downloads/ You can use this Fix Category to identify the needed PTFS: + IBM.Coexistence.ICSF.z/OS_V1R13-V2R2-HCR77B1 Additional support for this ICSF web deliverable is available via PTFs. - Additional CCA support for Crypto Express5S coprocessors, for a number of functions including a new key check value using the CMAC algorithm in the Key Test2 (CSNBKYT2) service, AES Galois/Counter mode encryption in the Symmetric Algorithm Encipher (CSNBSAE), Symmetric Algorithm Decipher (CSNBSAD) services, a new key derivation algorithm in the EC_Diffie-Hellman (CSNDEDH) service, a new service Encrypted PIN Translate Enhanced (CSNBPTRE) with support for PANs encrypted using Format Preserving Encryption. (Note: The use of this function requires a service agreement with Visa, Inc. For more information, refer to the z/OS Licensed Program Specifications.) - Trusted Key Entry (TKE) Workstation 8.1 support FMID APAR PTF Comments ======= ======= ======= ============================ HCR77B1 OA49064 UA80937 Additional CCA support OA49067 UA80932 TKE 8.1 support OA49069 UA81483 Regional Crypto (AP only) The level of ICSF included in z/OS V2.2 with Cryptographic Support for z/OS V2R1 - z/OS V2R3 (HCR77C1) installed includes support for: - CCA 5.4/6.2, with the PTF For APAR OA55906 - Crypto Express6S support of VISA Format Preserving Encryption - Crypto Express6S support of greater than 16 Domains - Crypto Express6S Exploitation The level of ICSF included in z/OS V2.2 with Cryptographic Support for z/OS V2R2 - z/OS V2R3 (HCR77D0) installed includes support for: - CCA 5.4/6.2 - Crypto Express6S support of VISA Format Preserving Encryption - Crypto Express6S support of greater than 16 Domains - Crypto Express6S Exploitation If you are using a Crypto Express5 or Crypto Express6, you should install APAR OA55906, or upgrade ICSF to FMID HCR77D0, prior to upgrading to the z14. Other products: FMID APAR PTF Comments ======= ======= ======= ============================ HLM5530 OA47128 UA76496 OMEGAMON multi-threading and >128 processors ----------------------------------------------------- Note: This section is no longer correct, but is being left in for historical reasons. HCR7780, HCR7781, HCR7790, HCR7791, HCR77A0, and HCR77A1 are all out of service. If you are using one of these levels of ICSF, you should upgrade to a supported level. Please note that to share keys with systems that have a lower level of ICSF than the base level included in z/OS V2.2 you will need the coexistence PTFs listed below and identified by Fix Category: + IBM.Coexistence.ICSF.z/OS_V1R13-V2R1-HCR77B0 FMID APAR PTF Comments ======= ======= ======= ============================ HCR7780 OA39484 UA90639 HCR77A0 and later toleration OA42014 UA70712 HCR77A1 and later toleration HCR7790 OA39484 UA90640 HCR77A0 and later toleration OA42014 UA70713 HCR77A1 and later toleration See above for required coexistence support if you will share keys with systems running levels of ICSF lower than the level included in the Cryptographic Support for z/OS V1R13 - z/OS V2R2 web deliverable (HCR77B1). >>> z/OS V2.1 SUPPORT z/OS V2.1 support is available for the base functions of the z14. For more information, see the z14 announcement and z/OS V2.3 Migration. To identify the z/OS V2.1 APARs/PTFs required for this base support use the SMP/E Fix Category: + IBM.Device.Server.z14-3906.RequiredService IBM recommends that you also include: + IBM.Device.Server.z14-3906.RecommendedService Required service for z/OS: FMID APAR PTF Comments ======= ======= ======= ============================ HBB7790 OA50757 UA92639 BCP (System Trace) OA50757 UA92639 BCP (System Trace) OA51289 UA92529 BCP (IOS) OA51015 UA91174 BCP (RSM) OA51835 UA91223 BCP (SADMP) OA52058 UA92946 XCF CFLEVEL 22 support OA54985 UA97361 XCF CFLEVEL 23 support OA51643 UA93170 BCP support for Guarded Stg Fac HDZ2210 OA47091 UA82331 DFSMSdss EER3500 IO24874 UO01849 EREP HCS7790 OA50212 UA92508 HCD OA52494 UA93360 HCD support for LinuxONE OA54912 UA97447 HCD support for Dynamic CF I/O, NVMe JCS779J UA92509 HCD JPN OA52494 UA93361 HCD support for LinuxONE OA54912 UA97448 HCD JCP for Dyamic CF I/O, NVMe HCM1E10 IO24436 UO01825 HCM IO25603 UO01882 HCM support for Dynamic CF I/O, NVMe EDU1H01 PI46151 UI38554 ICKDSF (Standalone) n/a PI75033 UI44041 ICKDSF (Standalone CD Level) HIO1104 OA52069 UA91819 IOCP HIO1104 OA55404 UA97193 IOCP support for Dynamic CF I/O, NVMe HMQ4160 PI62275 UI48832 HLASM HMP1J00 IO25081 UO01828 SMP/E HRM7790 OA51913 UA92570 RMF HVT6210 OA51867 UA83763 VTAM OA53791 UA93436 VTAM OA55256 UA98588 VTAM 25Gb OSA support HIP6210 PI86950 UI50214 TCP/IP PI86553 UI50058 TCP/IP RoCE PI95703 UI61341 TCP/IP 25Gb OSA support HCR77C1 OA55906 UA97937 ICSF CCA 5.4/6.2 toleration HCR77C0 OA55906 UA97940 ICSF CCA 5.4/6.2 toleration HCR77B1 OA55906 UA97939 ICSF CCA 5.4/6.2 toleration HCR77B0 OA55906 UA97938 ICSF CCA 5.4/6.2 toleration HCR77A0 Not supported; upgrade to HCR77B0 HCR77A1 Not supported; upgrade to HCR77B0 Required service for other products, if installed: FMID APAR PTF Comments ======= ======= ======= ============================ HSAL110 OA46903 UA76072 IBM Automation Control V1.1.0 HWRE330 OA45346 UA75591 System Automation V3.3 JWRE331 OA46560 UA75876 System Automation V3.3 HWRE340 OA45346 UA75592 System Automation V3.4 JWRE341 OA46560 UA75890 System Automation V3.4 HWRE350 OA46560 UA75887 System Automation V3.5 JWRE351 OA46560 UA75891 System Automation V3.5 Exploitation support for several functions is provided in the z/OS V2.1 base product, PTFs, and a web deliverable. To identify the z/OS V2.1 APARs/PTFs required to exploit any of these functions use the SMP/E Fix Category: + IBM.Device.Server.z14-3906.Exploitation IBM recommends that you also include: + IBM.Device.Server.z14-3906.RecommendedService Exploitation service for z/OS: FMID APAR PTF Comments ======= ======= ======= ============================ HBB7790 OA50144 UA93172 WLM HiperDispatch enhancements OA49692 UA93157 BCP (HIS) OA49967 UA93168 BCP support for CMPSC enhance OA49718 UA92925 Timer - LPAR offset OA53952 UA97502 SPI support for Dynamic CF I/O HRM7790 OA50761 UA93178 RMF support for SMT-2 for SAPs, SCM OA50693 UA93263 RMF CEX6 support HIP6210 PI75733 UI49042 CommServer support for OSA-Express6S PI75199 UI50092 CommServer support for RoCE Express2 HVT6210 OA51949 UA93510 VTAM support for RoCE Express2 OA51867 UA83763 VTAM support for RoCE Express2 OA49692 UA93159 BCP JPN (HIS) HCR77C0 OA52388 UA93353 ICSF CEX6/PCI-HSM toleration HCR77B0 OA52388 UA93351 ICSF CEX6/PCI-HSM toleration OA46466 UA77843 OA47781 UA78785 HCR77B1 OA52388 UA93352 ICSF CEX6/PCI-HSM toleration Exploitation for the z14 zHyperLink Express feature: FMID APAR PTF Comments ======= ======= ======= ============================ HBB7790 OA50653 UA93305 BCP (IOS) OA54167 UA94517 BCP (IOS) HDZ2210 OA51450 UA93446 DFSMS (Media Mgr, Dev. Support) OA50681 UA93466 DFSMS (Media Mgr, Dev. Support) OA51783 UA93448 DFSMS (Catalog) OA52133 UA93434 DFSMS (CMM) OA53349 UA93450 DFSMS (FAMS) OA52329 UA93417 DFSMS (LISTDATA) HRM7790 OA50755 UA93330 RMF Note: Exploitation support for the DS8800 zHyperLink Express can be identified using the IBM.Function.zHyperLink fix category. Exploitation support for other products: FMID APAR PTF Comments ======= ======= ======= ============================ HDBCC10 PI82575 UI50509 DB2 12 support-zHyperLink Exp. PI89828 UI52311 DB2 12 support-zHyperLink Exp. Exploitation for Coupling Express LR: FMID APAR PTF Comments ======= ======= ======= ============================ HBB7790 OA48832 UA92999 Coupling Express LR support OA48839 UA92902 Coupling Express LR support OA47763 UA92292 Coupling Express LR support JBB779J OA48832 UA92990 Coupling Express LR support HCS7790 OA47789 UA92103 Coupling Express LR support JCS779J OA47789 UA92104 Coupling Express LR support HCM1E10 IO23613 UO01842 Coupling Express LR support HIO1104 OA51111 UA91001 Coupling Express LR support HRM7790 OA48959 UA93013 Coupling Express LR support JRM779J OA48959 UA93015 Coupling Express LR support Exploitation service for other products: FMID APAR PTF Comments ======= ======= ======= ============================ HDBCC10 PI82575 UI50509 DB2 12 support-zHyperLink Exp. HCS7790 OA52494 UA93360 HCD LinuxONE definition support JCS779J OA52494 UA93361 HCD JPN LinuxONE definition HLM5530 OA47128 UA76496 support OMEGAMON multi- threading and >128 processors The level of function provided for cryptographic support differs depending whether an ICSF web deliverable is installed. Please note that if you are running the level of ICSF that shipped as part of z/OS V2.1 (HCR77A0) or the Cryptographic Support for z/OS V1R13-z/OS V2R1 Web Deliverable (FMID HCR77A1), you will need to install the Enhanced Cryptographic Support for z/OS V1R13-z/OS V2R1 web deliverable (FMID HCR77B0), the Cryptographic Support for z/OS V1R13 - z/OS V2R2 web deliverable (HCR77B1), the Cryptographic Support for z/OS V2R1 - z/OS V2R2 web deliverable (HCR77C0), or Cryptographic Support for z/OS V2R1 - z/OS V2R3 web deliverable (HCR77C1) Please note that if you are using the Enhanced Cryptographic Support for z/OS V1R13-z/OS V2R1 Web Deliverable (FMID HCR77B0) and sharing keys with other z/OS systems that have a lower level of ICSF, you will need the coexistence PTFs identified by Fix Category: + IBM.Coexistence.ICSF.z/OS_V1R13-V2R1-HCR77B0 New functions are available for Integrated Cryptographic Service Facility (ICSF) in the Cryptographic Support for z/OS V1R13 - z/OS V2R2 web deliverable (HCR77B1), which supports IBM zEnterprise EC12 (zEC12), zEnterprise BC12 (zBC12), and z14 processors. This web deliverable, which provides new operator command support for certain ICSF administrative functions, is available for download from: http://www.ibm.com/z/os/zos/downloads/ You can us this Fix Category to identify the needed PTFS: + IBM.Coexistence.ICSF.z/OS_V1R13-V2R2-HCR77B1 FMID APAR PTF Comments ======= ======= ======= ============================ HCR7780 OA39484 UA90639 HCR77A0 and later toleration OA42014 UA70712 HCR77A1 and later toleration HCR7790 OA39484 UA90640 HCR77A0 and later toleration OA42014 UA70713 HCR77A1 and later toleration See above for required coexistence support if you will share keys with systems running levels of ICSF lower than the Cryptographic Support for z/OS V1R13 - z/OS V2R2 web deliverable (HCR77B1). Additional support for this ICSF web deliverable is available via PTFs - Additional CCA support for Crypto Express5S coprocessors, for a number of functions including a new key check value using the CMAC algorithm in the Key Test2 (CSNBKYT2) service, AES Galois/Counter mode encryption in the Symmetric Algorithm Encipher (CSNBSAE), Symmetric Algorithm Decipher (CSNBSAD) services, a new key derivation algorithm in the EC_Diffie-Hellman (CSNDEDH) service, a new service Encrypted PIN Translate Enhanced (CSNBPTRE) with support for PANs encrypted using Format Preserving Encryption. (Note: The use of this function requires a service agreement with Visa, Inc. For more information, refer to the z/OS Licensed Program Specifications.) - Trusted Key Entry (TKE) Workstation 8.1 support FMID APAR PTF Comments ======= ======= ======= ============================ HCR77B1 OA49064 UA80937 Additional CCA support OA49067 UA80932 TKE 8.1 support OA49069 UA81483 Regional Crypto (AP only) The level of ICSF included in z/OS V2.2 with Cryptographic Support for z/OS V2R1 - z/OS V2R3 (HCR77C1) installed includes support for: - CCA 5.4/6.2, with the PTF For APAR OA55906 - Crypto Express6S support of VISA Format Preserving Encryption - Crypto Express6S support of greater than 16 Domains - Crypto Express6S Exploitation If you require exploitation of new hardware instructions using XL C/C++ ARCH(11) and TUNE(11) (including SIMD and Business Analytics Vector Processing MASS and ATLAS Library, then you must download and install the z14 Exploitation Support for z/OS V2.1 XL C/C++ web deliverable. >>> z/OS V1.13 SUPPORT z/OS V1.13 support is available for most base functions of the z14. For more information, see the z14 announcement and z/OS V2.3 Migration. To identify the z/OS V1.13 APARs/PTFs required for this base support use the SMP/E Fix Category: + IBM.Device.Server.z14-3906.RequiredService IBM recommends that you also include: + IBM.Device.Server.z14-3906.RecommendedService Required service for z/OS: FMID APAR PTF Comments ======= ======= ======= ============================ HBB7780 OA51289 UA92528 BCP (IOS) OA51015 UA91173 BCP (RSM) OA51835 UA91222 BCP (SADMP) OA52058 UA92951 XCF CFLEVEL 22 Support OA54985 UA97362 XCF CFLEVEL 23 support JBB778H OA51015 UA91177 BCP (RSM - with Web Deliverable) HDZ1D10 OA52041 UA91968 DFSMSdss EER3500 IO24874 UO01849 EREP HCS7780 OA50212 UA92506 HCD OA52494 UA93358 HCD support for LinuxONE OA54912 UA97445 HCD support for Dynamic CF I/O, NVMe JCS778J UA92507 HCD JPN OA52494 UA93359 HCD support for LinuxONE OA54912 UA97446 HCD support for LinuxONE HCM1D10 IO24436 UO01824 HCM IO25603 UO01880 HCM support for Dynamic CF I/O, NVMe HMQ4160 PI62275 UI48832 HLASM EDU1H01 PI46151 UI38554 ICKDSF (Standalone) n/a PI75033 UI44041 ICKDSF (Standalone CD Level) HIO1104 OA52069 UA91819 IOCP OA55404 UA97193 IOCP support for Dynamic CF I/O,NVMe HRM7780 OA51913 UA92571 RMF HMP1J00 IO25081 UO01828 SMP/E HCR7780 n/a n/a Not supported; upgrade to HCR77B0 HCR7790 n/a n/a Not supported; upgrade to HCR77B0 HCR77A0 n/a n/a Not supported; upgrade to HCR77B0 HCR77A1 n/a n/a Not supported; upgrade to HCR77B0 HCR77C0 OA55906 UA97940 ICSF CCA 5.4/6.2 toleration HCR77B1 OA55906 UA97939 ICSF CCA 5.4/6.2 toleration HCR77B0 OA55906 UA97938 ICSF CCA 5.4/6.2 toleration Required service for other products, if installed: FMID APAR PTF Comments ======= ======= ======= ============================ HSAL110 OA46903 UA76072 IBM Automation Control V1.1.0 HWRE330 OA45346 UA75591 System Automation V3.3 JWRE331 OA46560 UA75876 System Automation V3.3 HWRE340 OA45346 UA75592 System Automation V3.4 JWRE341 OA46560 UA75890 System Automation V3.4 HWRE350 OA46560 UA75887 System Automation V3.5 JWRE351 OA46560 UA75891 System Automation V3.5 Exploitation support for some functions is provided in the z/OS V1.13 base product, PTFs, and a web deliverable. To identify the z/OS V1.13 APARs/PTFs required to exploit any of these functions use the SMP/E Fix Category: + IBM.Device.Server.z14-3906.Exploitation As above, IBM recommends you also use: + IBM.Device.Server.z14-3906.RecommendedService Exploitation service for z/OS: FMID APAR PTF Comments ======= ======= ======= ============================ HBB778O OA49718 UA92924 Timer - LPAR offset HCR77A0 OA52388 UA93349 ICSF CEX6/PCI-HSM toleration OA44910 UA76280 OA44444 UA73930 OA42246 UA71468 OA43906 UA72928 HCR77A1 OA52388 UA93350 ICSF CEX6/PCI-HSM toleration OA44910 UA76281 Only needed if Cryptographic OA44444 UA73931 Support for z/OS V1R13-z/OS OA42246 UA71469 V2R1 web deliverable is OA43906 UA72929 installed JBB778H OA49718 UA92926 Timer (with RSM Web Deliverable) LPAR offset HCR77B0 OA52388 UA93351 ICSF CEX6/PCI-HSM toleration HCR77B1 OA52388 UA93352 ICSF CEX6/PCI-HSM toleration HRM7780 OA43493 UA76023 Exploitation for Coupling Express LR: FMID APAR PTF Comments ======= ======= ======= ============================ HBB7780 OA48832 UA92998 Coupling Express LR support OA48839 UA92901 Coupling Express LR support OA47763 UA92291 Coupling Express LR support JBB778J OA48832 UA92991 Coupling Express LR support JBB778H OA48839 UA92904 Coupling Express LR support for RSM web deliverable HCS7780 OA47789 UA92106 Coupling Express LR support JCS778J OA47789 UA92105 Coupling Express LR support HCM1D10 IO23613 UO01841 Coupling Express LR support HIO1104 OA51111 UA91001 Coupling Express LR support HRM7780 OA48959 UA93018 Coupling Express LR support JRM778J OA48959 UA93019 Coupling Express LR support Exploitation service for other products: FMID APAR PTF Comments ======= ======= ======= ============================ HCS7780 OA52494 UA93358 HCD LinuxONE definition support JCS778J OA52494 UA93359 HCD LinuxONE definition support HLM5530 OA47128 UA76496 OMEGAMON multi-threading and >128 CPs If you want to exploit Virtual Flash Memory (including pageable 1 MB Large Page Support, optional PLPA/common page data set support, and Dynamic reconfiguration support for Flash Express) as well as 2 GB Large Page support, you will need to download and install the z/OS V1.13 RSM Enablement Offering Web deliverable and install the required PTFs identified by the Fix Category + IBM.Device.Server.z14-3906.Exploitation. Manage FICON Dynamic Routing support. FMID APAR PTF Comments ======= ======= ======= ============================ HBB7780 OA43308 UA76784 IOS JBB778H OA43308 UA76786 IOS HBB7780 OA47297 UA79157 IOS HSWF100 OA43309 UA79143 ESCON Director The level of function provided for cryptographic support differs depending whether an ICSF web deliverable is installed. Please note that if you are running the level of ICSF that shipped as part of z/OS V1.13 (HCR7780), or the Cryptographic Support for z/OS V1R11-z/OS V1R13 Web Deliverable (FMID HCR7790), or the Cryptographic Support for z/OS V1R12-z/OS V1R13 Web Deliverable (FMID HCR77A0), or the Cryptographic Support for z/OS V1R13-z/OS V2R1 Web Deliverable (FMID HCR77A1), you will need to install the Enhanced Cryptographic Support for z/OS V1R13-z/OS V2R1 web deliverable (FMID HCR77B0) or the Cryptographic Support for z/OS V1R13 - z/OS V2R2 web deliverable (HCR77B1). If you require Crypto Express5S exploitation support for the next Generation Coprocessor support or Visa Format Preserving Encryption (FPE) you must download and install the Enhanced Cryptographic Support for z/OS V1R13-z/OS V2R1 web deliverable (FMID HCR77B0). Please note that if you are using the Enhanced Cryptographic Support for z/OS V1R13-z/OS V2R1 Web Deliverable (FMID HCR77B0) and sharing keys with other z/OS systems that have a lower level of ICSF, then you will need the coexistence PTFs identified by Fix Category: + IBM.Coexistence.ICSF.z/OS_V1R13-V2R1-HCR77B0 New functions are available for Integrated Cryptographic Service Facility (ICSF) in the Cryptographic Support for z/OS V1R13 - z/OS V2R2 web deliverable (HCR77B1), which supports IBM zEnterprise EC12 (zEC12), zEnterprise BC12 (zBC12), and z14 processors. This web deliverable, which provides new operator command support for certain ICSF administrative functions, is available for download from: http://www.ibm.com/z/os/zos/downloads/ See above for required coexistence support if you will share keys with systems running levels of ICSF lower than the base level provided as part of z/OS V2.2 (HCR77B0). Additional support for this ICSF web deliverable is available via PTFs - Additional CCA support for Crypto Express5S coprocessors, for a number of functions including a new key check value using the CMAC algorithm in the Key Test2 (CSNBKYT2) service, AES Galois/Counter mode encryption in the Symmetric Algorithm Encipher (CSNBSAE), Symmetric Algorithm Decipher (CSNBSAD) services, a new key derivation algorithm in the EC_Diffie-Hellman (CSNDEDH) service, a new service Encrypted PIN Translate Enhanced (CSNBPTRE) with support for PANs encrypted using Format Preserving Encryption. (Note: The use of this function requires a service agreement with Visa, Inc. For more information, refer to the z/OS Licensed Program Specifications.) - Trusted Key Entry (TKE) Workstation 8.1 support FMID APAR PTF Comments ======= ======= ======= ============================ HCR77B1 OA49064 UA80937 Additional CCA support OA49067 UA80932 TKE 8.1 support OA49069 UA81483 Regional Crypto (AP only) Please note that if you are using the Cryptographic Support for z/OS V1R13-z/OS V2R2 Web Deliverable (FMID HCR77B1) and sharing keys with other z/OS systems that have a lower level of ICSF, then you will need the coexistence PTFs identified by Fix Category: + IBM.Coexistence.ICSF.z/OS_V1R13-V2R2-HCR77B1 ----------------------------------------------------- Note: This section is no longer correct, but is being left in for historical reasons. HCR7780, HCR7781, HCR7790, HCR7791, HCR77A0, and HCR77A1 are all out of service. If you are using one of these levels of ICSF, you should upgrade to a supported level. Please note that if you are running Cryptographic Support for z/OS V1R12-V1R13 (HCR77A0) or higher level of ICSF on z/OS V1.13 you can tolerate Crypto Express6 on a z14 server which treats Crypto Express6S cryptographic coprocessors and accelerators as Crypto Express3S coprocessors and accelerators. However you must install the required PTFs identified by the SMP/E Fix Category: + IBM.Device.Server.z14-3906.Exploitation Please note that if you are running Cryptographic Support for z/OS V1R12-V1R13 (HCR77A0) or higher level of ICSF on z/OS V1.13 you can tolerate Crypto Express5 on a z14 server which treats Crypto Express5S cryptographic coprocessors and accelerators as Crypto Express3S coprocessors and accelerators. However you must install the required PTFs identified by the SMP/E Fix Category: + IBM.Device.Server.z14-3906.Exploitation If you require support for greater than 16 domains (up to 85) on Crypto Express4S or Crypto Express5S you will need to install the PTFs identified by the SMP/E Fix Category: IBM.Device.Server.z14-3906.Exploitation, or install the Enhanced Cryptographic Support for z/OS V1R13-z/OS V2R1 web deliverable (FMID HCR77B0) (or higher web deliverable). If you require Crypto Express4S support of expanded key support for AES algorithm, enhanced ANSI TR-31 Secure Key Exchange, PIN block decimalization table protection, PKA RSA OAEP with SHA-256 algorithm, or additional Elliptic Curve Cryptography (ECC) functions then you must download and install the Cryptographic Support for z/OS V1R12-V1R13 web deliverable (FMID HCR77A0) (or higher web deliverable) and the PTFs identified by the Fix Category: + IBM.Device.Server.z14-3906.Exploitation. If you require Crypto Express4S exploitation including: Enterprise Security PKCS #11-Hardware Security Module (HSM), DUKPT for MAC and Data Encryption, Cipher Text Translate CCA Verb, PKDS/TKDS Constraint Relief, Random Number Cache, FIPS on Demand, or Wrapping Keys with Strong Keys then you must download and install the Cryptographic Support for z/OS V1R12-V1R13 web deliverable (FMID HCR77A0) (or higher web deliverable). The PTFs required to provide support for PKCS#11 are identified by the Fix Category: + IBM.Device.Server.z14-3906.Exploitation. Please note that if you are using the Cryptographic Support for z/OS V1R12-V1R13 Web Deliverable (FMID HCR77A0) and sharing keys with other z/OS systems that have a lower level of ICSF, then you will need the coexistence PTFs listed below and identified by Fix Category: + IBM.Coexistence.ICSF.z/OS_V1R12-V1R13-HCR77A0. If you require Crypto Express4S exploitation support for CCA 4.4 and other EP11 cryptographic enhancement support which includes: RKX Key Export Wrap, UDX Reduction/simplification, additional EP11 algorithms, expanded EMV support, AP Configuration simplification, CTRACE Enhancements, and KDS Key Utilization Stats. then you must download and install the Cryptographic Support for z/OS V1R13-z/OS V2R1 web deliverable (FMID HCR77A1) or higher. The PTFs are required to provide support for PKCS#11 are identified by the Fix Category: + IBM.Device.Server.z14-3906.Exploitation. Please note that if you are using the Cryptographic Support for z/OS V1R13-z/OS V2R1 Web Deliverable (FMID HCR77A1) and sharing keys with other z/OS systems that have a lower level of ICSF, you will need the coexistence PTFs identified by Fix Category: + IBM.Coexistence.ICSF.z/OS_V1R13-V2R1-HCR77A1 5. 19/04/15 THIS ENTRY WAS REPLACED BY (6), ABOVE. 4. 19/03/13 This entry was replaced by (5), above. 3. 18/10/02 This entry was replaced by (4), above. 2. 18/10/01 This entry was replaced by (3), above. 1. 17/07/17 This entry was replaced by (2), above.


Service Recommendations

22 19/06/12 PROBLEM: (OA57088) NEW FUNCTION - ENHANCEMENTS TO CRYPTOGRAPHIC SERVICES USERS AFFECTED: RECOMMENDATION: INSTALL UA99616 ON VOLID 1000 (HCR77D0) INSTALL UA99615 ON VOLID 1000 (HCR77C1) 21 19/01/22 PROBLEM: (OA55184) NEW FUNCTION - CRYPTOGRAPHIC SERVICES ENHANCEMENTS USERS AFFECTED: RECOMMENDATION: INSTALL UA98183 ON VOLID 1000 (HCR77C1) 20 18/12/27 PROBLEM: (OA56503) POTENTIAL CORRUPTION OF DATA WITH APAR OA54985 WHEN EXPLOITING COUPLING FACILITY STRUCTURE ENCRYPTION IN A MIXED SYSPLEX USERS AFFECTED: RECOMMENDATION: INSTALL UA98177 ON VOLID 1000 (HBB77A0) INSTALL UA98178 ON VOLID 1000 (HBB7780) INSTALL UA98179 ON VOLID 1000 (HBB7790) 19 18/12/05 PROBLEM: (OA56265) NEW FUNCTION - ENHANCEMENTS IN SUPPORT OF CRYPTO EXPRESS6 MCL P41458.002 USERS AFFECTED: RECOMMENDATION: INSTALL UA98091 ON VOLID 1000 (HCR77D0) 18 18/11/20 PROBLEM: (OA55159) ADDITIONAL IBM Z14 EXPLOITATION SUPPORT FOR SYSTEM AUTOMATION PROCESSOR OPERATIONS AND BCPII. USERS AFFECTED: (BCPII) FUNCTION OF THE PRODUCT TO MONITOR AND CONTROL THEIR PROCESSOR TARGET HARDWARE / TARGET SYSTEMS. RECOMMENDATION: INSTALL UA97968 ON VOLID 1000 (HWRE350) INSTALL UA97969 ON VOLID 1000 (HWRE410) 17 18/10/26 PROBLEM: (PI97665) TCPIP LOOPING IN EZBIFDOB WHEN PROCESSING OSAINFO DISPLAY USERS AFFECTED: RECOMMENDATION: INSTALL UI55801 ON VOLID 1806 (HIP6210) INSTALL UI55802 ON VOLID 1806 (HIP6220) INSTALL UI55803 ON VOLID 1806 (HIP6230) 16 18/10/03 PROBLEM: (OA56062) IMPROVE XCF PERFORMANCE TO XCF SIGNALLING STRUCTURES BY REDUCING THE RLM REQUESTS NEEDED USERS AFFECTED: NON-EMPTY TO EMPTY LIST TRANSITION NOTIFICATION. IF INSTEAD, THE VECTOR INDICATES NON-EMPTY, THERE MUST HAVE BEEN A NEW EMPTY TO NON-EMPTY LIST TRANSITION NOTIFICATION TO UPDATE THE VECTOR TO INDICATE "NOT EMPTY". IN THIS CASE, A NEW READ IS WARRANTED (AS OPPOSED TO AN RLM TO REPAIR THE LIST VECTOR). RECOMMENDATION: INSTALL UA97508 ON VOLID 1000 (HBB77A0) INSTALL UA97507 ON VOLID 1000 (HBB77B0) 15 18/08/17 PROBLEM: (OA55157) ADDITIONAL IBM Z14 TOLERATION SUPPORT FOR SYSTEM AUTOMATION PROCESSOR OPERATIONS AND BCPII. USERS AFFECTED: (BCPII) FUNCTION OF THE PRODUCT TO MONITOR AND CONTROL THEIR PROCESSOR TARGET HARDWARE / TARGET SYSTEMS. RECOMMENDATION: INSTALL UA97080 ON VOLID 1000 (HWRE350) INSTALL UA97081 ON VOLID 1000 (HWRE410) 14 18/05/23 PROBLEM: (OA55241) WITH Z/14 IAXVG 01000002 ACCESS REGISTER 15 AR15 USERS AFFECTED: RECOMMENDATION: INSTALL UA96222 ON VOLID 1000 (HBB77B0) INSTALL UA96223 ON VOLID 1000 (HBB77A0) INSTALL UA96224 ON VOLID 1000 (HBB7790) 13 18/02/02 PROBLEM: (PI90941) CPSM WLM ROUTING MAY INCORRECTLY FAVOR SOME AORS WHEN THEY HAVE EQUAL LOADS USERS AFFECTED: ALL CICSPLEX SM V5R1M0, V5R2M0, V5R3M0 AND V5R4M0 USERS. RECOMMENDATION: INSTALL UI53579 ON VOLID 1801 (JCI700M) INSTALL UI53578 ON VOLID 1801 (JCI710M) INSTALL UI53576 ON VOLID 1000 (JCI680M) INSTALL UI53577 ON VOLID 1000 (JCI690M) 12 18/02/02 PROBLEM: (PI91168) CPSM WLM ROUTING MAY INCORRECTLY FAVOR SOME AORS WHEN THEY HAVE EQUAL LOADS USERS AFFECTED: ALL CICSPLEX SM V4R2M0 USERS. RECOMMENDATION: INSTALL UI53573 ON VOLID 1000 (JCI670M) 11 17/12/26 PROBLEM: (PI87493) NEW FUNCTION - GDPS Z14 SUPPORT FOR CAPACITY MANAGEMENT USERS AFFECTED: GDPS/MTMM GDPS/PPRC GDPS/GM GDPS/XRC GDPS/AAKEYWORDS: GDPS/K D/T3906 RECOMMENDATION: INSTALL UI52695 ON VOLID 1000 (JGDP3CC) INSTALL UI52696 ON VOLID 1000 (JGDP3CH) INSTALL UI52697 ON VOLID 1000 (JGDP3DC) INSTALL UI52698 ON VOLID 1000 (JGDP3DH) INSTALL UI52694 ON VOLID 1000 (HGDP3E0) 10 17/12/15 PROBLEM: (OA54151) IXL004W WAIT STATE, DURING FRAME SHORTAGE USERS AFFECTED: RECOMMENDATION: INSTALL UA94592 ON VOLID 1000 (HBB77B0) 9 17/11/29 PROBLEM: (OA53914) ABENDC0D RSN 9C000420 IAXBS +01E66 USERS AFFECTED: RECOMMENDATION: INSTALL UA94380 ON VOLID 1000 (HBB77B0) 8 17/11/20 PROBLEM: (OA53301) SYSROUTE OF OA51135 FROM V2R2 TO V2R3. IEBGENER PERFORMANCE ON Z13. USERS AFFECTED: RECOMMENDATION: INSTALL UA94006 ON VOLID 1000 (HDZ2230) 7 17/10/25 PROBLEM: (OA54037) ON Z14, CSNBSYE WITH GCM RULE AND INITIALIZATION_VECTOR_LENG TH THAT IS NOT A LENGTH OF 12, GENERATES INCORRECT CIPHERTEXT USERS AFFECTED: RECOMMENDATION: INSTALL UA94004 ON VOLID 1000 (HCR77C1) 6 17/09/14 PROBLEM: (OA51864) NEW FUNCTION- SUPPORT FOR MEMORY MANAGEMENT OPTIMIZATIONS FOR Z14 USERS AFFECTED: ALL USERS OF HBB7790 AND HBB77A0 ON A Z14. RECOMMENDATION: INSTALL UA93213 ON VOLID 1709 (HBB77A0) INSTALL UA93212 ON VOLID 1709 (HBB7790) 5. 17/08/30 PROBLEM: (VM65942) Z/VM SUPPORT FOR Z14 WITH DRIVER D/T3906 USERS AFFECTED: ALL INSTALLATIONS RUNNING Z/VM ON AN IBM Z14 RECOMMENDATION: INSTALL UM35208 ON VOLID 1000 (R640 ) 640 4 17/08/30 PROBLEM: (PI46151) NEW FUNCTION- ICKDSF STAND ALONE VERSION Z/ARCHITECTURE SUPPORT USERS AFFECTED: USER'S OF THE STAND-ALONE VERSION OF ICKDSF. RECOMMENDATION: INSTALL UI38554 ON VOLID 1606 (EDU1H01) 3 17/08/11 PROBLEM: (OA51135) IEBGENER PERFORMANCE ON Z13 USERS AFFECTED: USERS RUNNING IEBGENER ON Z13 OR Z14. RECOMMENDATION: INSTALL UA92761 ON VOLID 1708 (HDZ2210) INSTALL UA92762 ON VOLID 1708 (HDZ2220) 2 17/08/09 PROBLEM: (OA52803) NEW FUNCTION - RSM MIGRATION HEALTH CHECKS USERS AFFECTED: ALL USERS RUNNING Z/OS 2.1 OR Z/OS 2.2 PLANNING TO MIGRATE TO Z/OS 2.3. RECOMMENDATION: INSTALL UA92886 ON VOLID 1708 (JBB77AJ) INSTALL UA92884 ON VOLID 1708 (HBB77A0) INSTALL UA92887 ON VOLID 1708 (JBB779J) INSTALL UA92885 ON VOLID 1708 (HBB7790) 1 17/07/31 PROBLEM: (OA52638) IBM Z14 TOLERATION SUPPORT USERS AFFECTED: RECOMMENDATION: INSTALL UA92817 ON VOLID 1707 (HWRE340) INSTALL UA92818 ON VOLID 1707 (HWRE350) INSTALL UA92819 ON VOLID 1707 (HWRE410)


Optional Product Levels

THIS SECTION CONTAINS PRODUCT AND SERVICE LEVELS THAT ARE NEEDED TO SUPPORT PRODUCTS THAT PROVIDE OPTIONAL SUPPORT FOR THIS DEVICE. 1. 17/07/17 The minimum recommended level of IBM Personal Communications is 6.0.14 (build date 20150317). The minimum recommended level of IBM Personal Communications for use with TLS connections is 6.0.16 (build date 20151006). Users at lower levels might experience unstable connections that repeatedly drop and recover when used with OSA-ICC cards on z14 GA2 processors.


Informational / Documentation

No changes to this section.


PTF / APAR Reference Lists

PTF Include List
PTF Exclude List
PE APAR List


End of Upgrade 3906DEVICE , Subset 3906/ZOS , as of 2019/06/13.



Document information

More support for: z/OS family

Modified date: 12 June 2019