Embed Size (px)
Citation preview
You must use Computer Audio• This session is being conducted using
Audio Broadcast – it is not possible to join by phone
• Attendees do not have microphone capability
Use the Q&A panel to ask questions
The call will be recorded and replay posted on the TechU Talks web page.https://www.ibm.com/services/learning/events/techutalks
Click the arrow
Type your question in
the box – hit “Send”
AUDIO WILL COMMENCE WHEN THE MEETING BEGINS
1
2
3
If you do not see Q&A, click the icon with 3 dots, and
select Q&A
Audio quality is highly dependent on individual’s internet bandwidth. If you experience audio issues, we recommend you :
1) Turn off your company VPN connection2) Check if you have applications running in the background –
anti-virus can completely cut audio3) If your computer is connected to a virtual environment, it
can effect quality – connect from a PC w/out virtual environment if possible
DS8000, TS7700 What's New! Safeguarded Copy, TS7700 Transparent Cloud Tiering and More
2020 IBM Systems TechUApril 29, 2020| Virtual TechU Talk
Brian Sherman – WSC – Storage [email protected]
Craig Gordon – WSC – Storage [email protected]
Eddie Lin – DS8000 [email protected]
Lourie Goodall – TS7700 [email protected]
Topics
• What’s new with DS8000 – R9.0 / R9.0.2• Program updates
• New models – DS8910F/DS8950F
• Fibre Channel Endpoint Security
• Remote Pair FlashCopy for Global Mirror environments
• What’s new with TS7700 – R5.0 / R5.0.1
• New model – TS7770
• Leverages organic storage solution
• Enhanced Security for Replication
• DS8000 / TS7700 Offload Optimization
• Client supplied rack option
• Miscellaneous Enhancements
• DS8000 / TS7700 Cyber Resiliency Solutions
IBM Systems TechU © Copyright IBM Corporation 2020 3
DS8900F TS7770
4
IBM Z/DS8900F/TS7700 - Leading the industry in IT resiliency and integration
IBM Z Parallel Sysplex
Site 1 Site 2
CSM / GDPS
Where mean time between failure is
measured in decades
Designed for application
availability of 99.99999%Industry leading solutions
for continuous availability / disaster recovery and
Cyber Resiliency
Avoiding the cost of downtime Maintaining productivity of users
Ensuring access to critical applications Open to clients 24/7
Storage Synergy
Integration by design to maximize technology
advantages and > 7 9’s availability
4
Current Program News
• Withdraw from Market of IBM DS8880/F models and features
• End of service support for IBM DS8870
• zGM (XRC) stabilization announcement
• z15 T02/LT2 SOD for DS8910F
5
The withdrawal of the models indicated below is effective on June 30, 2020. For new orders, the client-requested arrival date (CRAD) can be no later than July 30, 2020. MES’s available for 12 months, will carry 12-month warranty only.
Machine Type Model2831283228332834
DS8884 (984, 84E) DS8886 (985, 85E) DS8886 (986, 86E)
5331533253335334
DS8882F (983) DS8884F (984)DS8886F (985, 85E) DS8886F (986, 86E)DS8888F (988, 88E)
For a complete list of models and features to be withdrawn, please browse the announcement letter here
Making way for the newest DS8900F offerings, IBM is announcing the withdraw from marketing of selected IBM DS8880/F models and features.
Upgrade your IT infrastructure with the best technology
6
IBM has announced End of Service Support (EoS) for IBM DS8870
The end of service of the models indicated below is effective on December 31, 2020 for all the geopgraphies.
Machine Type Model2421242224232424
961 (base frame)96E (expansion unit)
Implications of this announcementMaintenance: Auto renewal for maintenance contracts will continue until EoS date. Auto renewal will stop at the announcement of EoS.
Warranty: All DS8870 systems that will still be under warranty past the EoS effective date, will continue to obtain normal warranty service and support until their warranty expires.
Support: L3 (Development) and L2 (Product Field Engineering) will not support clients beyond EoS date.
For additional details, please browse the announcement letter here
7
8
Business Continuity made Simple
Global Mirror (GM) IBM z/OS Global Mirror*
Global Mirror (GM)
Today
Future
• No impact on production performance• Equivalent functionality than z/OS GM but with less
complexity• From 2 to 3 seconds Recovery Point Objective (RPO)• Faster for replication management for 3 and 4-site
configurations• Flexible cascading and multi-target capabilities• Easier setup and configuration • Less expertise required for ongoing care and support• Compatible with the zHyperLink architecture • Currently used by the majority of IBM clients
To move forward with the business continuity simplification strategy:
• IBM DS8900F will be the last DS8000 family to support z/OS Global Mirror.
• New functions to support asynchronous replication will be developed only for Global Mirror. No new z/OS Global Mirror functionality will be provided with IBM DS8900F.
• z/OS Global Mirror will continue to be supported and maintained on z/OS with its current. function
• Non-disruptive migration from XRC 2, 3, & 4 sites to GM 2, 3, & 4 sites and GDPS extensions will be available in the 2H20 time frame
* Formerly known as eXtended Remote Copy (XRC)
9
• IBM z15 T02/LT2 can implement the Reserved space for IBM DS8910F1
- A co-located DS8910F solution that can be utilized in the z15 T02/LT2 16U Reserved space
- The DS8910F must be purchased separately
• This creates the opportunity to create an all-in-one server/storage solution based on the most current IBM technology innovations
Statement of Direction - Reserved space for DS8910F
9
1 All statements regarding IBM’s future direction and intent are subject to change or withdrawal without notice and represent g oals and objectives only.
9
IBM DS8900F all flash storage portfolio
Racked solution with superior performance and
capacity
Rack independent solution to be mounted in 19-inch industry standard
racks
One HPFE Gen2
Tw o HPFE Gen2
Racked solution delivered in a space-
saving package
For IBM Z and LinuxONE
compatible racks
10
* Future plan T02/LT2
One HPFE Gen2
Deep Dive Redbook
Deep Dive Webcast
IBM DS8910F IBM DS8950F
IBM Storage PortfolioMultiple Layers of EncryptionRobust data protection
11
Coverage
Co
mp
lexi
ty &
Sec
uri
ty C
on
tro
l
App Encryption
hyper-sensitive data
Database EncryptionProvide protection for very
sensitive in-use (DB level), in-flight & at-rest data
File or Dataset Level EncryptionProvide broad coverage for sensitive data
using encryption tied to access control for in-flight & at-rest data protection
SAN Link Encryption + Full Disk + Tape EncryptionProvide 100% coverage for at-rest data with zero host CPU cost
Protection against intrusion, tamper or removal of physical
infrastructure
Broad protection & privacy managed by OS… ability to eliminate storage admins
from compliance scope
Granular protection & privacy managed by database… selective encryption & granular key management control of sensitive data
Data protection & privacy provided and managed by the application… encryption of sensitive data when lower levels of encryption not available or suitable
IBM Z CPACF Performance benefits host-
based encryption
11
IBM Storage Portfolio
Two unique IBM Z / DS8900F integration capabilities
• Authentication - ensures data is accessed only by trusted IBM Z, LinuxONE and DS8900F Systems
• Encryption - data in-flight within and across data centers without application changes and without consuming IBM Z CPU resources
• z/OS, z/VM, z/Linux supported
IBM Fibre Channel Endpoint Security provides the authentication and encryption capabilities required for Data Privacy Passports and no performance impact on IBM Z or DS8900F to implement
SAN
Supports both point-to-point and fabric (switched) topologies
Used in conjunction with Dataset Encryption and Disk Encryption, IBM Fibre Channel Endpoint Security provides 100% coverage for all in flight and at rest data with zero host CPU cost
IBM z15 and DS8900F Fibre Channel Endpoint Security
12
13
• Solution on IBM z15 T01/LT1 server requires ordering:• CPACF feature • Endpoint Security feature (FC1146)• At least one FICON Express 16SA feature
• New FICON Express16SA Channel card on the IBM z15 server • Provides encryption and authentication capability• Supports both FICON and FCP channel types• Supports FICON CTC connections• Negotiates between 16GFC and 8GFC link speeds (no 4GFC)
• Support for authentication-only on FICON Express16S+ channel cards is being provided
• Cisco / Broadcom SAN switches require firmware update to qualified levels with EDiF support• Cisco Release 8.4.x, Brocade FOS 8.2.2, Supported models only
• Solution on new DS8900F requires:• New 32GFC HA (encryption and authentication capable) and/or• Existing 16GFC HA for authentication-only
• IBM Security Key Lifecycle Manager (version 3.0.1.3) is required to serve a shared key to the server and storage boxes
• It is required that ISKLM be configured in Multi-Master mode for High Availability (2 to 4 instances, although will function with a single instance, when failures occur)
• SKLM Multi-master mode uses Db2 Advanced Workgroup Server Edition in HA/DR mode. • SKLM runs on Linux on Intel, Power and Z platforms, zCX in z/OS2.4 and under Windows and AIX
Fibre Channel Endpoint Security - Solution Requirements
13
IBM z15
DS8900F
13
Deep Dive Webcast
Deep Dive Redbook
IBM Storage PortfolioPrevious FlashCopy onto Global Mirror Operation
Global Mirror
GMJRS2RS1
DS8000 DS8000
FlashCopy issued to Global Mirror primary was not allowed.
In order to use FlashCopy, clients would need to need to chose a target outside of their GM topology
Or clients must accept longer application times as slow copy method moves the data
RS1GMJ
H2SH1S
H1T H2TGlobal Mirror
14
IBM Storage PortfolioCurrent FlashCopy onto Global Mirror Operation
Global Mirror
GMJRS2RS1
DS8000 DS8000
FlashCopy issued to Global Mirror primary. Can be volume or dataset level FlashCopy
Note: Volume level FlashCopy will result in RPO increase depending on amount of data is copied. Dataset level FlashCopy will only transfer the same
data as if the copy was performed normally so RPO increase should not be significant
Tracks contained in FlashCopy set in OOS of target device and sent as part of next consistency group. For incremental FlashCopy only the changed tracks will be copied for each increment
RS1GMJ
OOS
H2SH1S
H1T H2TGlobal Mirror
15
IBM Storage PortfolioRemote Pair FlashCopy Supported Topologies
Metro Mirror
GlobalMirror
GlobalMirror
Metro Mirror
GlobalMirror
Global Copy
2-Site Global Mirror
3-Site Metro Global Mirror(cascaded and multi-target)
4-Site Metro Global Mirror(cascaded and multi-target)
MetroMirror
2-Site Metro Mirror
Global Copy
2-Site Global Copy
Metro Mirror
MetroMirror
3-Site Multi-target Metro Mirror
16
17
• Hardware Requirements:• DS8880
• R8.5SP4 GA 88.54.31.0
• DS8900F• R9.02 GA 89.2.40
• Software Requirements:• DFSMS support for FlashCopy onto Global Mirror provided via APAR OA57173
• CSM tolerates the use of FlashCopy onto Global Mirror as part of FlashCopy sessions or FlashCopy within the production environment.
• GDPS tolerates the use of FlashCopy onto Global Mirror within the production environment. The GDPS FlashCopy support to reverse a FlashCopy onto the production environment today does not support FlashCopy onto Global Mirror
• If other software products perform checking of Global Mirror status prior to issuing a FlashCopy then they might require changes but otherwise they should not require changes for support
Remote Pair FlashCopy Solution Requirements
17
Deep Dive Webcast
DS8000 Code Bundle Information
18
DS8900F System Sequential Read/Write Scaling with HPFE Enclosure Pairs
0
10
20
30
40
50
60
70
80
90
100
Read GB/s Write GB/s Read GB/s Write GB/s
DS8910F DS8950F
Per
cen
tage
of M
axim
um
Sys
tem
Th
rou
ghp
ut
1 2 4 (single frame) 4 (dual frame) 8 HPFE Enclosure Pairs
• The bandwidth of the DS8900F system increases with the number of HPFE enclosure pairs as shown below • This shows the percentage of the maximum sequential read and write bandwidth that can be achieved with
different numbers of HPFE enclosure pairs
Two important factors when
configuring a system:
1) Configuring two HPFE Enclosure pairs on a frame delivers near linear scaling compared to a single HPFE Enclosure pair
2) On a DS8950F spreading the HPFE enclosure pairs evenly over base and expansion frames will deliver around 30% better performance than an uneven configuration with HPFE Enclosure Pairs in the base frame
18
IBM Storage PortfolioPOLL
DS8910F/DS8950F are?
a) POWER9 based Hybrid Arrays providing HDD and Flash capacity options
b) POWER8 based All Flash Arrays
c) POWER9 based All Flash Arrays
d) Intel Cascade Lake based All Flash Arrays
IBM Systems TechU © Copyright IBM Corporation 2020 19
IBM Storage PortfolioIBM TS7700 Release R5.0 Major Line Items
• Introduction of TS7770
• Next Generation compute platform P9 Virtualization Engine
• Enhanced Data resiliency
• Coexistent Object Storage and FICON data
• Expanded DR groups from 32 to 128
• Expanded hold time to 2000 years
• 10 TB HDD Cache
• Concurrent Operational administration
General Availability Nov 20th 2019
IntroductionReplication
2006
Tape Encryption3-Way Grid
Secure Erase2007
4-Way GridLoad Balancing
2009
6 Way Grid10GbE Grid
2011
Automated FailoverOrchestration
2011
4m Logical VolsEncryption
2012
1PB Cache8Gb FICON
2013
Hybrid System496 Devices
2014
1.3PB CacheDenser Tape
2016
8-Way Grid2.4PB Cache
2017
100PB TapeGrid Migration
2015
TS7770R5.01
Cloud Attach2018
20
Deep Dive Redbook
IBM Storage PortfolioTS7770 Next Gen Controller (VED) – IBM Z Virtual Tape
Built on new Power9 platform• Two 10 core, 3.8GHz processors
• 64GB DDR4 Memory (128GB option*)
• 16Gb Port FICON (up to 4 adapters, 2 ports per adapter)
• 1Gb Copper and 10Gb LW Grid Network (up to 4 ports)
• 16Gb FC attachment to disk cache and tape drives (up to 16 ports)
• SSD or SAS for Power9 storage
DS8000 Synergy• Common Power9 hardware, I/O bays and adapters
FlashSystem Synergy• FS5030E Integration
• 10TB 7.2K SAS Drives
• 79TB per drawer, 789TB 1st Frame, 2PB 1x Expansion, 3.9PB 2xExpansion
• 20TB increment available at all levels; 100TB increments available after first 20TB increment
• Full AES256 encryption with local key and external SKLM KMIP support
• Concurrent Drawer ExpansionFlashSystem FS5030E
21
Deep Dive Redbook
IBM Storage PortfolioIBM TS7700 Release R5.0.1 Major Line Items
Option to add the second expansion frame
Up to 3.94PB usable capacity • (19PB at 5:1 Compression)
Capacity on Demand (CoD) increment changes• 20TB increment available at all levels• 100TB increments available after first 20TB increment
Client Supplied Rack • Equal to single frame install with up to 780TB cache• Expandable from 18U to 42U form factor• No feature function impact• Available via RPQ
WebUpdater• Automating the fix delivery process• Accelerating the time to update
Three frame capacity Support
1 Frame equivalent Client Supplied Rack
Announce - 04/14/20 (e-Config availability)Super Shipper - 04/17/20GA - 05/15/20
22
IBM Storage PortfolioTS7700 Hybrid Cloud - Support for ICOS Public and RStor
RStor Whitepaper from RStor:https://rstor.io/wp-content/uploads/2020/02/RStorage-Whitepaper.pdf
Leverage TCT for off load to public or private cloud
Physical tape and cloud tier are both policy managed options
• One or the other in 4.2
Once one cluster puts a copy in the cloud, all replicated peer
clusters have access to the object store instance
Cloud provider support
• IBM COS On Prem
• AWS S3 Public
• IBM COS Public or RStor
• SCORE required https://www-
03.ibm.com/systems/support/storage/scorerpq/int/logon.do
Local and cross regional AWS S3 support
TLS 1.2 HTTPS utilized for cloud object store connectivity with
optional customer provided certificates
• Encryption on the wire
TS7700 Public Cloud Storage Tier Setup Guide with NGINXhttp://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP102819 23
IBM DS8880/F
IBM TS4500
IBM Z
Production data
DFSMShsm
Virtual TapeBackup, archive and
long term retention
Virtual TapeMigration
ObjectsMigration
FICON/FC 16Gb
Ethernet
IBM TS7700 used as an Object Store target
Shared TS7700 used as a Virtual Tape Library and as an Object Store target
Optional direct attachment to physical tape for cost effective long term retention
IBM Storage PortfolioIBM TS7700 Release R5.1 Preview
Dual Security Authentication– Secure Administration in multi-tenancy clusters
DS8000 Object Store Compression and Encryption– No impact to TS7700 workload
Cloud Disaster Recovery and Export
Cloud usability enhancements
Planned General Availability 3Q2020
Dual Security Authentication
24
IBM Storage Portfolioz/OS Transparent Cloud Tiering with DS8880 / DS8900F
Current Key Use Case: DFSMShsm Dataset Migrate/Recall
• MIPS reduction via direct data transfer from DS8000 to Object Storage• Recall to volumes participating in Simplex, Flashcopy, Metro Mirror, HyperSwap, Global Mirror, MGM Environment• TCT Client Side Encryption to Cloud Object Storage• 1Gbit (Included) and 10Gbit (Additional) Ethernet Connectivity• Command Line and Automated HSM Migration – Dataset movement to Cloud by policy, size based override• Supports IBM Cloud Object Storage, Amazon S3 API, Openstack Swift, TS7700
IBM Cloud Object Storage
IBM Z IBM DS8900F
Transparent
Cloud Tiering
IBM TS7700
IBM Cloud
25
Deep Dive Redbook
IBM Storage PortfolioTCT in DS8000 Replicated Environments
Topology Minimum Code Level SupportMetro Mirror DS8880 R8.3
• DFSMS APARs OA52386• PTFs on z/OS V2R2 and z/OS V2R3
• GDPS APAR PI98596
DS8900 R9.0
Global Mirror DS8880 R8.5DS8900 R9.0
MGM DS8880 R8.5DS8900 R9.0
Multi-Target MM or MM/GM DS8880 R8.5DS8900 R9.0
zGlobal Mirror (XRC) Not Supported
FlashCopy DS8880 R8.4• DFSMSdss APAR OA55043
• PTFs on z/OS V2R2 and z/OS V2R3
DS8900 R9.0
26
IBM Storage PortfolioTCT with TS7700 R5.x Object Store
DS8000 CEC
TS7700 Data Movement Engine
TS7700
TS7700 Data Server
TS7700 Filesystem
IBM DS8000 IBM TS7700
Ethernet / GRID Links
• TS7700 Filesystem• Object Partition• Container• Objects
• Customer Data Object
• Dataset Metadata
Supports TS7760/TS7770 Virtual Tape and DS8880/DS8900F
Intermix existing FICON tape workloads and TCT Object workloads to the same TS7700
Data flows from DS8000 to TS7700 via GRID network links
Utilizes logical partitions dedicated to TCT objects
Supports data redundancy via writing to two TS7700 clusters within the same GRID
27
Deep Dive Redbook
IBM Storage PortfolioMore on TCT with TS7700 as an Object Store
Multiple DS8000s can connect to the same TS7700 cluster within a Grid
GRID can be up to 8-way, consisting of any generation of TS7700
Coexistence of FICON logical volume data and DS8000 Object Store Data now supported
DS8000 can target one or two TS7700’s for synchronous replication using Grid links forking of writes
• DS8000 will handle resync if a TS7700 cluster goes offline
Uses existing cache
Current limitationso GRID replication is not supported
o Classes (Mgmt, Storage) and DFSMS policies have no effect on objects
o No further migration of objects to physical tape and cloud object
o TCT Encryption is not supported (planned to be supported in 3Q20)
o Data is not compressed as it enters the TS7700 (planned to be supported in 3Q20)
Grid Cloud
Clo
ud
Clo
ud
TS7760C TS7770CTS7760T TS7770T
DS8880 DS8950F DS8880
Ethernet
IBM Z
FIC
ON
FIC
ON
28
IBM Storage PortfolioIBM DS8000 and TS7700 TCT - DR Design Considerations
• Distance/Latency can adversely affect a “split write” deployment by slowing the performance and overall job completion time
• IBM b-type (Brocade) IPEX technology negates distance/latency and provides predictable performance at any distance
Distance/Latency Impact
Local TS7700Remote TS7700
TCT NetworkIBM SAN42B-RBrocade 7840
IBM SAN42B-RBrocade 7840
DS80000
20
40
60
80
100
120
140
0 100 500 5000
Data Migration/Write - Distance Impact
Native IP Job Completion Time (minutes)
Using IPEX Job Completion Time (minutes)
Minutes
Job Time
Miles
0
5
10
15
20
25
0 100 500 5000
Data Recall/Read - Distance Impact
Native IP Job Completion Time (minutes)
Using IPEX Job Completion Time (minutes)
Minutes
Job Time
Miles
• Any deployment > 100 miles between sites or networks with > 0.10% packet loss should consider using IPEX
29
IBM Storage PortfolioIBM DS8000 and TS7700 TCT - DR Design Considerations
Network Packet Loss Impact
• Network Packet Loss is a common issue with IP based WAN’s & can cause data flow failures or re-transmissions that impact throughput
• IBM b-type (Brocade) IPEX technology manages IP WAN packet loss and maintains consistent throughput with no interruption to the backup
Local TS7700Remote TS7700
TCT Network
0
50
100
150
0% 0.10% 0.20% 0.30%
Data Migration/Write - Packet Loss
Impact – 100 miles between sites
Native IP Job Completion Time (minutes)
Using IPEX Job Completion Time (minutes)
Minutes
Job Time
Packet Loss
0
5
10
15
0% 0.10% 0.20% 0.30%
Data Recall/Read - Packet Loss Impact
- 100 miles between sites
Native IP Job Completion Time (minutes)
Using IPEX Job Completion Time (minutes)
Minutes
Job Time
Packet Loss
IBM SAN42B-RBrocade 7840
IBM SAN42B-RBrocade 7840
DS8000 • Any deployment >100 miles between sites or networks with >0.10% packet loss should consider using IPEX
• Job completion times can increase by 10x or more without IPEX
30
IBM Storage PortfolioRequirements for DS8000 TCT with TS7700 as an Object Store
DS8880 and DS8900F supported (all models)
• Part of the zSynergy License Bundle
• DS8880 R8.5SP4.1 minimum level
• DS8900 R9.0SP1 minimum level
• Ethernet connections
• Note: DS8900 10Gb Ethernet CANNOT direct connect to TS7700 GRID adapters (SR vs. LR connectivity). DS8880 10Gb Adapters can direct connect
TS7760 (VEC) and TS7770 (VED) supported
• Minimum code level is R5.0
• Feature Code #5282
• TS7760T tape attached, TS7760C cloud attached, TS7760 tapeless supported
• Uses existing GRID adapters and will share TCPIP traffic with the GRID
z/OS V2R3 and V2R4 supported
• APARs required to enable ”Tape Object” type in SMS Cloud Construct/Network Connection panel
31
Deep Dive Webcast
Deep Dive Redbook
— A business fell victim to a ransomware attack
every 14 seconds in 2019
— and
—every 11 seconds by 2021
All industries and all sizes of companies are targets of cyber crime
Primary Storage Object Tape• IBM DS8000 provides Safeguarded Copy to protect point in time copies of data from being modified or deleted
• IBM z15 and DS8000 provides Fibre Channel Endpoint Security to protect data in flight as well as Data at Rest
• IBM DS8000, IBM SAN Volume Controller, IBM FlashSystem and software defined storage implementations with IBM Spectrum Virtualize and IBM Spectrum Scale all support FlashCopy functions
• IBM Spectrum Control/Insights and Spectrum Discover for monitoring
• IBM TS7700 configured as an object store target enables a secure and high available storage tier for DS8000 Storage Systems
• IBM Cloud Object Storage (COS) provides retention management capabilities to restrict deletion and overwrite of data
• IBM Spectrum Scale provides access to the Object Storage with immutability capabilities preventing objects to be modified of deleted if their retention periods have not expired
Virtual Tape• IBM TS7700 Virtual Tape secures data being replicated within the grid, leverages logical WORM and retention hold. It also enables physical tape, COS or public clouds as cost effective storage tiers for data archiving and long-term retention
Physical Tape• IBM Tape provides secure air gap protection with “Offline by design” tape cartridges only accessible and connected to the network when mounted
Spectrum Protect Suite for copies of revenue producing data and detection
IBM provides a comprehensive portfolio of storage solutions that can be used to provide logical and physical isolation for air gap protection.
IBM Storage Cyber Resiliency Solutions
IBM Storage PortfolioDS8000 Safeguarded Copy for logical corruption protection
Safeguarded Copy provides functionality to create up to 500 recovery points for a production volume• Host independent – IBM Z, POWER, x86• These recovery points are called
Safeguarded Backups • The Safeguarded Backups are stored in a
storage space that is called Safeguarded Backup Capacity (SGBC)
• The Safeguarded Backups are hidden and non-addressable by a host
• The data can only be used after a Safeguarded Backup is recovered to a separate recovery volume
• Recovery volumes can be accessed using a recovery system and used to restore production data
Automation provided via CSM or GDPS
Production volume Recovery
volume
Production System
Recovery System
Safeguarded backup 0
Safeguarded backup 1
Safeguarded backup n (up to
500)
Safeguarded Backup Capacity
…
Safeguarded backup 2
Backup Recover
RestoreProduction
System
IBM DS8880 / DS8900F Safeguarded Copy prevents sensitive point in time copies of data from being modified or deleted due to user errors, malicious destruction or ransomware attacks
34
Deep Dive Redbook
IBM TS7700 – Usability, Security and Resiliency
Usability
• Web and z/OS console managed
• LDAP (RACF and Microsoft Active Directory)
• SNMP Alerts
• LI REQ via MI
Resiliency
• Automatic Failover
• Consistency Awareness
• DR Test even during production
• Copy Export
• Moves & Migrations
Security• AES256 Disk Encryption• In flight data Encryption over Ethernet• TS1100 Tape Encryption• Selected Device Access Control• Logical WORM• Air Gap protection
IBM Storage PortfolioTS7760 / TS7770 R5.x– Secure Data Transfer (SDT)
Encrypt data in flight over Ethernet• Secure file transfer between TS7700 clusters within a grid
• Logical volume data encryption, including remote reads, writes and replication
• If one of the cluster pairs does not have encryption enabled the logical volume data transfer to/from that cluster will not be encrypted
• Support TLS 1.2 using AES128 or AES256 bit encryption• Exploits the p8 (VEC) and p9 (VED) in-core crypto
acceleration• SP 800-131a recommended implementation
• Encryption settings enabled/disabled via MI concurrently• Select default certificates or upload user trusted
certificates• Feature Code 5281• Minimal overhead in performance and CPU utilization when
enabled
36
zHost(s)LAN/WAN
zHost(s)
C) TS7700 Cluster
SDT Enabled
B) TS7700 Cluster
SDT Enabled
A) TS7700 Cluster
SDT Enabled
D) TS7700 Cluster
SDT Not Enabled
Deep Dive Redbook
Reference – https://www.ibm.com/support/knowledgecenter/STFS69_5.0.0/secure_data_transfer.html
IBM Storage PortfolioCyber Resiliency with TS7700 Virtual Tape
Proactive Functions• Copy Export – Dual physical tape data copies, one can be isolated. True “air gap” solution;
no access to exported volumes from z/OS or Web
• Physical Tape and Cloud Attach – Data copy not directly accessible from IBM Z hosts. Partial “air gap” solution; manipulation of DFSMS, tape management system and TS7700 settings required to delete virtual tape volumes
• Delete Expired – Delay (up to 2000 years) the actual deletion of data (in disk cache or physical) for any logical volume moved to scratch status. Transparent protection from accidental or malicious volume deletion
• Logical Write Once Read Many (LWORM) – TS7700 enforced preservation of data stored on private logical volumes. Immutability (i.e. no change to existing data once created) assured
• Grid Replication - Allows many copies of data to be geographically dispersed. If one cluster is attacked and becomes inoperable, host can still access data in any other cluster in the grid
Reactive Function• FlashCopy with Write Protect – “Freeze” the contents of production TS7700 systems
during an emergency situation (such as with an active cyber intruder). Read activity can continue
37 37
Deep Dive Webcast
IBM Storage PortfolioPOLL
TS7760 / TS7770 R5.0 Secure Data Transfer requires all members of the grid to be at R5.0 with Secure Data Transfer enabled before data will be encrypted between the clusters?
a) True
b) False
IBM Systems TechU © Copyright IBM Corporation 2020 38
Accelerate with IBM Storage Webinars
39
The Free IBM Storage Technical Webinar Series Continues in 2020...
Washington Systems Center –Storage experts cover a variety of technical topics.
Audience: Clients who have or are considering acquiring IBM Storage solutions. Business Partners and IBMers are also welcome.
To automatically receive announcements of upcoming Accelerate with IBM Storage webinars, Clients,
Business Partners and IBMers are welcome to send an email request to [email protected].
Located on the Accelerate with IBM Storage Site: https://www.ibm.com/support/pages/node/1125513
Also, check out the WSC YouTube Channel here: https://www.youtube.com/channel/UCNuks0go01_ZrVVF1jgOD6Q
2020 Upcoming Webinars:
May 12 - Artificial Intelligence (AI) Scalability for a DecadeRegister Here: https://ibm.webex.com/ibm/onstage/g.php?MTID=e924abbd43805da99eb809265f0fe20f5
May 14 - Building a Data Protection Solution for Cyber ResiliencyRegister Here: https://ibm.webex.com/ibm/onstage/g.php?MTID=e59cfcff05215c95622cb022b00bd00c7
May 21 - Storage Insights, Storage Insights Pro or Spectrum Control, which one is right for me?Register Here: https://ibm.webex.com/ibm/onstage/g.php?MTID=eeb831096e67ff598348a5bb301d3038d
Upcoming TS7770-in-a-Rack Webinar
Webinar: Introducing a new TS7770 Enterprise Functionality in A Small Package - a Customer Supplied 19' Rack!
Date: May 19, 2020
Time: 11:00 am (Eastern Daylight Time)
Register: https://webinars.on24.com/Systems/newTS7700suppliedin19inch
Abstract: The TS7770 Rack Mount model provides organizations with World Class capacity and performance options
as well as end-to-end encryption functionality to address todays data security requirements. Starting with a capacity assmall as 20TBs (uncompressed), the TS7770 enables customers to economically leverage both tape for physical air-gapprotection as well as the ability to tier to the cloud for off-site protection and DR capabilities.
Register for this webcast to learn how this new offering is ideal for small and medium size businesses, customersdeploying the new IBM z15 offering or customers looking to use cloud technology for the Backup & Recoveryrequirements.
40
IBM Z + IBM StorageIntegrated by design
#1enterprise storage solutions for mainframe environments
9 of the top 10 largest public banks in the world
rely on IBM Storage
More than 30advanced capabilities integrated by design
IBM DS8900FAll-flash enterprise storage for production environments with mission-critical requirements
IBM TS7770High-Performance Virtual Tape Library for Modern
Data Protection
Session Summary
• What’s new with DS8000 – R9.0 / R9.0.2• Program updates
• New models – DS8910F/DS8950F
• Fibre Channel Endpoint Security
• Remote Pair FlashCopy
• What’s new with TS7700 – R5.0 / R5.0.1
• New model – TS7770
• Leverages organic storage solution
• Enhanced Security for Replication
• DS8000 / TS7700 Offload Optimization
• Client supplied rack option
• Miscellaneous Enhancements
• DS8000 / TS7700 Cyber Resiliency Solutions
IBM Systems TechU © Copyright IBM Corporation 2020 42
DS8900F TS7770
Replay availability!
Brian Sherman
Distinguished Engineer
+1-416-347-8462
ibm.com
• Please feel free to send Questions you were unable to ask in the live call to my email
• The replay, presentation pdf and Q&A transcript will be available on the TechU Talks page within 48 hours.https://www.ibm.com/services/learning/events/techutalks
IBM Systems TechU © Copyright IBM Corporation 2020 43
IBM DS8900F IBM Blog by Chris Dittmer Here
IBM DS8900F BP Blog by Jose Castano and
Eric Herzog Here
IDC: IBM DS8900F & TS7770 White
Paper Here
IBM DS8900F Advanced HA/DR White Paper Here
IBM DS8900F Data Sheet Here
IBM DS8900F Infographic Here
DS8000 Additional Resources
IBM Redbook
IBM DS8900F Architecture and Implementation R9.0 http://www.redbooks.ibm.com/redpieces/abstracts/sg248456.html?Open
IBM DS8000 and Transparent Cloud Tiering http://www.redbooks.ibm.com/abstracts/sg248381.html?Open
IBM DS8900F Product Guidehttp://www.redbooks.ibm.com/abstracts/redp5554.html?Open
IBM DS8000 High-Performance Flash Enclosure Gen2 (DS8000 R9.0)http://www.redbooks.ibm.com/abstracts/redp5422.html?Open
IBM DS8900F Storage System Web Page Here
IBM DS8900F Cyber Resilient Storage Video Here
IBM DS8950F 3D Interactive demo tour Here
IBM DS8910F 3D Interactive demo tour Here
DS8000 Additional Resources
Useful TS7700 Reference Documents
46
(Knowledge Center) IBM TS7700 – Customer Documentation (R5.0.1 Updates Now Available)
• https://www.ibm.com/support/knowledgecenter/en/STFS69/landing/welcome_002.htm
TS7700-related White Papers • See http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebAllDocs2/?Search&Query=[HTMLDocumentName=WM*]+AND+(ts77*)&Start=1&Count=100&SearchOrder=4&DateSearch=1&SearchMax=10000for a list of
the TS7700-related White Papers (Can access the White Paper site by using the term “IBM techdocs” in your favorite search engine)
WP102819 TS7700 Public Cloud Storage Tier Setup Guide with NGINX 04/16/2020
FQ116133 What are the supported FICON Director and Channel Extender Configurations for the TS7700? 03/19/2020
WP101092 White Paper - TS7700 Copy Export 01/17/2020
WP101000 White Paper - TS7700 Encryption Support V2.0 01/16/2020
WP101689 TS7700 Notification Messages v5.0.3 01/15/2020
WP102742 IBM TS7700 Series Grid Resiliency Improvements User's Guide V1.1 01/02/2020
WP100831 TS7700 Grid Failover Scenarios V1.5 01/02/2020
PRS5328 TS7700 Grid To Grid Migration V1.5 User's Guide 01/02/2020
WP102415 TS7700 Best Practices - FlashCopy for DR Testing V1.6 01/02/2020
WP101094 TS7700 Bulk Volume Information Retrieval Version R5.0 01/02/2020
WP101091 TS7700 Library Request Command V5.0 01/02/2020
WP100829 TS7700 Statistical Data Format V50 12/16/2019
TS7700 Additional Resources
IBM Redbook
IBM TS7700 Release 5.0 Guide http://www.redbooks.ibm.com/abstracts/sg248464.html?Open
IBM TS7700 R5.0 cloud Storage Tier Guidehttp://www.redbooks.ibm.com/abstracts/redp5573.html?Open
IBM TS7700 Series DS8000 Object Store User's Guide Version 1.0http://www.redbooks.ibm.com/abstracts/redp5583.html?Open
IBM TS4500 R6 Tape Library Guidehttp://www.redbooks.ibm.com/abstracts/sg248235.html?Open
IBM TS77xx Support Statement
• IBM SSIC• Select:
• Storage Family: IBM System Storage Virtualization Engine for Tape
• Storage Model: TS7700
• Storage Version: TS7700 R5.0 (8.50.0.134)
• Adapter: IBM FC0409
• SAN or Networking: Brocade x6-8
• <click> Submit
• Select Show for: IBM z/OS 2.4
• In Search Details: SAN or Networking <click on url in notes>
• TS7700 FAQ with Details:• Direct url:
• http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/FQ116133
• See Notes: Item #5• RPQ should be submitted for Brocade platforms not listed in Note #5
Recover Backup from VM or Containers• Instant recovery from file or VM• Application aware• Global catalog of recovery points• RTO = Minutes
4Key
Considerations for aCyber
Resilient Infrastructure
Recover Primary Data from Snapshots• Instant recovery from file or VM• Application aware, orchestrated• Global recovery of recovery points• RTO < = Minutes
Recover from Immutable Storage or Cloud• Logical air-gap• Immutable storage• RTO = Hours
Recover from Tape• Offline copies provide a true
air-gap• RTO = > Hours
IBM Tape
IBM Storage PortfolioCyber Incident Response Made Simple with Lab Services expertise
Enterprise Data Protection
High-throughput Air Gap
WORM immutable storage
Safeguarded Copy
Transparent Cloud Tiering supporting hybrid multi-
cloud
Cyber Resiliency Storage
Assessment
Implementation Services
Post Deployment Health checks
Advise
✓ Educate on Cyber Resiliency trends and best practices
✓ Explore current capabilities for protection, detection, and recovery
✓ Recommend solutions and project roadmap
✓ Spectrum Protect Cyber Resiliency workshop
✓ Configure and integrate recommendations
✓ Skills Transfer and Document of Implementation
✓ Assist with recovery planning/testing and Run Book creation (optional)
✓ Ongoing Review for Code Currency
✓ Best Practice Configuration Guidance
✓ New Feature Deployment✓ Assist with recovery
retesting and Run Book review (optional)
Configure Review
Contact us: [email protected]
Notices and disclaimers
— © 2020 International Business Machines Corporation. No part of this document may be reproduced or transmitted in any form without written permission from IBM.
— U.S. Government Users Restricted Rights — use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM.
— Information in these presentations (including information relating to products that have not yet been announced by IBM) has been reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM shall have no responsibility to update this information. This document is distributed “as is” without any warranty, either express or implied. In no event, shall IBM be liable for any damage arising from the use of this information, including but not limited to, loss of data, business interruption, loss of profit or loss of opportunity. IBM products and services are warranted per the terms and conditions of the agreements under which they are provided.
— IBM products are manufactured from new parts or new and used parts. In some cases, a product may not be new and may have been previously installed. Regardless, our warranty terms apply.”
— Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without notice.
— Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are presented as illustrations of how those
— customers have used IBM products and the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary.
— References in this document to IBM products, programs, or services does not imply that IBM intends to make such products, programs or services available in all countries in which IBM operates or does business.
— Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not necessarily reflect the views of IBM. All materials and discussions are provided for informational purposes only, and are neither intended to, nor shall constitute legal or other guidance or advice to any individual participant or their specific situation.
— It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s business and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice or represent or warrant that its services or products will ensure that the customer follows any law.
IBM Systems TechU © Copyright IBM Corporation 2020 52
Notices and disclaimers continued
— Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products about this publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. IBM does not warrant the quality of any third-party products, or the ability of any such third-party products to interoperate with IBM’s products. IBM expressly disclaims all warranties, expressed or implied, including but not limited to, the implied warranties of merchantability and fitness for a purpose.
— The provision of the information contained herein is not intended to, and does not, grant any right or license under any IBM patents, copyrights, trademarks or other intellectual property right.
— IBM, the IBM logo, ibm.com and [names of other referenced IBM products and services used in the presentation] are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml
IBM Systems TechU © Copyright IBM Corporation 2020 53
