Setting up the CIM server for storage management

• Starting with z/OS 1.13, the IOS services IOSCDR and IOSCHPD have been extended to facilitate the retrieval of the world wide port number (WWPN) for the Initiator (IOSCHPD) and Target (IOSCDR) protocol endpoints of IBMzOS_SBProtocolEndPoint. The retrieval of the WWPN through IOSCDR is only possible under the following conditions:
  1. The used hardware is at least an IBM® System z10™.
  2. The requestor or CIM client has UPDATE access to the IOSCDR profile in the FACILITY class.
     Example:

     SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY) GENERIC(FACILITY)
     
     RDEFINE FACILITY IOSCDR UACC(NONE)
     PERMIT IOSCDR CL(FACILITY) ID(CFZUSRGP) ACCESS(UPDATE)
     
     SETROPTS RACLIST(FACILITY) REFRESH

• The SMI-S CIM life cycle indications are using the Common Event Adapter (CEA) to be notified for device path changes and insertions or deletions of FICON® channel ports.

  The following setup has to be done to grant the CIM server access to CEA for the retrieval of events and IOS information:

  1. Ensure that the CEA is running in full function mode.
  2. Grant the CIM server user ID UPDATE access to the IOSCDR profile in the FACILITY class.
     Example:

     SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY) GENERIC(FACILITY)
     
     RDEFINE FACILITY IOSCDR UACC(NONE)
     PERMIT IOSCDR CL(FACILITY) ID(CFZSRV) ACCESS(UPDATE)
     
     SETROPTS RACLIST(FACILITY) REFRESH

  3. The SMI-S CIM life cycle indications are using CEA to be notified of device path changes and insertions or deletions of FICON channel ports. Event notification from CEA is protected through the following profiles in the RACF® class SERVAUTH:
     • CEA.CONNECT
     • CEA.SUBSCRIBE.ENF_0009*
     • CEA.SUBSCRIBE.ENF_0027*
     • CEA.SUBSCRIBE.ENF_0033*

     To be permitted to subscribe for event notification by CEA the CIM server user ID requires READ access to these mentioned profiles. To keep your security setup simpler it is recommend to protect the CEA resources using the generic profile CEA.* instead of defining the several discrete profiles.

     Grant the CIM server user ID READ access to the generic profile CEA.* in RACF class SERVAUTH:

     Example:

     SETROPTS CLASSACT(SERVAUTH) RACLIST(SERVAUTH) GENERIC(SERVAUTH)
     RDEFINE SERVAUTH CEA.* UACC(NONE)
     PERMIT CEA.* CLASS(SERVAUTH) ID(CFZSRV) ACCESS(READ)
     SETROPTS RACLIST(SERVAUTH) REFRESH

• Starting with z/OS 2.1, the CIM classes IBMzOS_FCPort and IBMzOS_FCCUPort are enabled to decommission and recommission ports, and to assign a WWN to a port. To grant the use of this functionality, ensure that:
  • The requestor or CIM client has UPDATE access to the IOSPORTS profile in the FACILITY class.
    Example:

    SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY) GENERIC(FACILITY)
    
    RDEFINE FACILITY IOSPORTS UACC(NONE)
    PERMIT IOSPORTS CL(FACILITY) ID(CFZUSRGP) ACCESS(UPDATE)
    
    SETROPTS RACLIST(FACILITY) REFRESH