What is zOSMF and Why would I want it - New Era · IBM may not offer the products, services or features discussed in this document in other countries, and the information may be subject

© 2013 IBM Corporation

What is z/OSMF and Why Would IWant It

Session zZS02

Greg DaynesIBM STSM – z/OS Installation

Deployment [email protected]

2 © 2013 IBM Corporation

Trademarks

Notes:

Performance is in Internal Throughput Rate (ITR) ratio based on measurements and projections using standard IBM benchmarks in a controlled environment. The actualthroughput that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, thestorage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput improvements equivalent to theperformance ratios stated here.

IBM hardware products are manufactured from new parts, or new and serviceable used parts. Regardless, our warranty terms apply.

All customer examples cited or described in this presentation are presented as illustrations of the manner in which some customers have used IBM products and the resultsthey may have achieved. Actual environmental costs and performance characteristics will vary depending on individual customer configurations and conditions.

This publication was produced in the United States. IBM may not offer the products, services or features discussed in this document in other countries, and the informationmay be subject to change without notice. Consult your local IBM business contact for information on the product or services available in your area.

All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only.

Information about non-IBM products is obtained from the manufacturers of those products or their published announcements. IBM has not tested those products and cannotconfirm the performance, compatibility, or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to thesuppliers of those products.

Prices subject to change without notice. Contact your IBM representative or Business Partner for the most current pricing in your geography.

* Registered trademarks of IBM Corporation

The following are trademarks or registered trademarks of other companies.

* All other products may be trademarks or registered trademarks of their respective companies.

Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/orother countries.Firefox is a trademark of Mozilla FoundationCell Broadband Engine is a trademark of Sony Computer Entertainment, Inc. in the United States, other countries, or both and is used under license there from.Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both.Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.Internet Explorer is a trademark of Microsoft CorpInfiniBand is a trademark and service mark of the InfiniBand Trade Association.Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registeredtrademarks of Intel Corporation or its subsidiaries in the United States and other countries.UNIX is a registered trademark of The Open Group in the United States and other countries.Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.ITIL is a registered trademark, and a registered community trademark of the Office of Government Commerce, and is registered in the U.S. Patent and Trademark Office.IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency, which is now part of the Office of Government Commerce.

The following are trademarks of the International Business Machines Corporation in the United States and/or other countries.IBM*IBM (logo)RACF*

ServerPac*WebSphere*z/OS*

See url http://www.ibm.com/legal/copytrade.shtml for a list of IBM trademarks.


Agenda

Overview of z/OS Simplification Efforts The z/OS Management Facility (z/OSMF)

z/OSMF Management Tasks (highlightingnew function) Configuration Performance Problem Determination Software z/OS Classic Interface: ISPF

Other z/OSMF Capabilities Internet and Intranet Links REST API for Job management Application Linking

z/OSMF Security What customers are saying about z/OSMF


Agenda






Within each domain to enhance productivity

Need for simplification of tasks

Data Architect

Operator

Database Administrator

Database Developer

Application Developer

IT Organizational Domains

Modernization and integration of tools

Across domains to enhance collaboration

System Programmer


Problem Determination andAnalysis

Monitoring health; identifying real andpotential problems

Analyzing and resolving problems

Configuration

Adding or changing systemcomponents; enabling new features;defining and updating policies that affectsystem behavior.

Simplify and modernize the System Programmer User Experience

Deliver solutions in a task-oriented browser-based user interface with integrated user assistance

Information

Finding the information needed to use z/OS

Focus Areas for Simplification

Installation

•Ordering and acquiring software•Analyzing and identifying service needed for new hardware and software functions•Migrating from on release to the next

IBM HealthCheckerPredictive

FailureAnalysis

Run TimeDiagnostics

Auto-IPLCF Sizer

IBM EducationAssistantLookAT

SMP/E InternetService RetrievalElectronic

Delivery

ShopzSeriesProgrammaticProcessing ofFix Categories

MigrationHealth Checks

zAware

z/OSMF

z/OSMF

z/OSMF

WTORAuto Reply

z/OSMF

CapacityProvisioning

z/OSMF

zDAC


What is z/OSMF?

IBM z/OS Management facility (z/OSMF) delivers onIBM’s strategy for mainframe simplification andmodernization

z/OSMF is a new product for z/OS customers z/OSMF provides a modern browser based interface to

managing the z/OS system The first release of z/OSMF was delivered as z/OSMF

1.11 at the same time as z/OS 1.11 z/OSMF has a zero price for z/OS customers z/OSMF has it’s own product number and must be

ordered It can be ordered with z/OS in the same ServerPac Can be ordered as its own ServerPac

• Can also be ordered as a separate CBPDO

Product ID is 5655-S28 S&S PID is 5655-S29

• Both PIDs must be ordered


IBM z/OS Management Facilityz/OSMF helps system

programmers more easilymanage and administer amainframe system by simplifyingday to day operations andadministration of a z/OS system.

More than just a graphical userinterface, the z/OS ManagementFacility is intelligent, addressingthe needs of a diversified skilledworkforce and maximizing theirproductivity.

Automated tasks can help reduce thelearning curve and improveproductivity.

Embedded active user assistance(such as checklists and wizards)guide you through tasks and helpsprovide simplified operations.


z/OS Management Facility

Incident Log (R11-R13) TheIncident Log provides aconsolidated list of SVC Dumprelated problems, along withdetails and diagnostic datacaptured with each incident. Italso facilitates sending the datafor further diagnostics.

Configuration Assistant for z/OSCommunications Server (R11-R13)Simplified configuration and setup ofTCP/IP policy-based networkingfunctions

WLM Policy Editor (R12-R13)Simplified management of WLMservice definitions and policies.Facilitate the creation and editing ofWLM service definitions, installationof WLM service definitions, andactivation of WLM service policies

Resource Monitoring (R12-R13)

Provides dynamic real time metricsfor system performance

Capacity Provisioning (R13)simplify the work of a z/OS CPadministrator to manage connectionsto CPMs, view reports for domainstatus, active configuration and activepolicy.

Software Management (R13) The z/OSMFSoftware Management provides a simple,structured approach to deploying SMP/E installedsoftware, In addition, it allows for inspection of asoftware instance to view the product, feature,FMID content, SYSMODS, as well as the physicaldatasets that comprise a particular softwareinstance. It also enables you to perform actions toanalyze and report on software instances (such asidentifying installed products with an announcedend of service date).

Simplify and modernize the user experience and programming requirementsTask-oriented browser based user-interface; end-to-end task simplification ; eliminating opportunity for error

Problem Management & Analysis

Monitoring z/OS system health; identifying realand potential problems; Analyzing and

resolving problems

Installation, Migration, and Maintenance Configuration

Planning, installing, and upgrading z/OSsystems and products that run on z/OS

Adding or changing z/OS system components;enabling new features; defining and updating

policies that affect system behavior

z/OSMF Base Services:The ability to add non-z/OSMF launch points and links to any categoryin the navigation tree allows a central tool for effective information andknowledge sharing.•Internet and Intranet Links (R11)•Application linking•Security integration with SAF•ISPF Web UI•REST API for Jobs

New

New

New

New

New

New


IBM z/OS Management Facilityz/OS application, browser access

z/OS Management Facility is a Web 2.0application on z/OS Manages z/OS from z/OS Browser communicates with z/OSMF via secure

connection, anywhere, anytime

z/OS LPAR

WAS OEMApp. Server

z/OS Components

• CommunicationsServer IP• SAF• System Logger• and others forspecific plug-ins

Browser

HTTP(s)

Windows IEFireFox

z/OSMFApplication


z/OSMF Welcome page

Secure connection from browser to z/OSMF host To log in you will need a z/OS userID that has been defined and enabled to for

z/OSMF (and the WebSphere® runtime environment)

Guidance is provided.


IBM z/OS Management Facility V1.13 (5655-S28)

Configuration– Configuration Assistant for z/OS Communication Server (R11) – Simplified

configuration and setup of TCP/IP policy-based networking functions

Performance– Capacity Provisioning (R13) - simplified monitoring of CP status for domains– Resource Monitoring and System Status (R12) – single view of sysplex and

Linux® performance status. Dynamic real time metrics.– Workload Management (R12) – creation, editing, and activation of WLM

policies

Problem Determination– Incident Log (R11) – Simplified capture, packaging, sending of SVC dump

diagnostic data

Software– Deployment/Management (R13) – analyze and report on SMP/E installed

software; and deploy SMP/E installed software more easily and consistently

z/OS Classic Interface– ISPF Task (R13) integrates existing ISPF into z/OSMF to launch to ISPF

functions directly


Agenda






z/OSMF Management Tasks

Configuration Configuration Assistant for z/OS Communications Server

Performance Capacity Provisioning Resource Monitoring and System Status Workload Management

Problem Determination

Incident Log

Software

Management (originally called Deployment)

z/OS Classic Interface

ISPF

Workflows (coming in z/OSMF V2.1*)

* Planned. All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice.



Configuration Configuration Assistant for z/OS Communications

Server



Incident Log

Software



ISPF




A GUI for the z/OS Communications ServerPolicy Agent – it simplifies theconfiguration and setup of TCP/IP policy-based networking functions.

Supports the following technologies

• Application Transparent TLS (AT-TLS)

• IP Security (IPSec) including filters and VPNs

• Network Security Server(NSS)

• Intrusion Detection Services (IDS)

• Policy-based Routing (PBR)

• Quality of Service (QoS)

Also available as a Microsoft® Windows® Web

Initially available as a Microsoft® Windows®

Configuration Assistant for z/OS Communications Server


Available with z/OSMF V1.11 Configuration files can now be saved to local disk storage that is

accessible to your z/OS system where the Configuration Assistant isrunning so FTP (from Windows) is not required

Can also import configuration text files in cases where users havealready defined policies and would like to begin using the ConfigurationAssistant

For z/OSMF V1.12 Support for Internet Key Exchange (IKE) version 2 Support for FIPS-140 cryptographic mode for IPSec and IKE Simpler AT-TLS rules Support the configuration of certificate trust chains and certificate

revocation lists. For z/OSMF V1.13 Define policies once and use for multiple stacks, Configure networks for both z/OS R12 and R13 mixed environments Import existing stack settings Improved Intrusion Detection function



Create configuration files for anynumber of z/OS images with anynumber of TCP/IP stacks per image.

Select theTCP/IP stackthat you want toconfigure andthe technology,such as AT-TLSor IPSec.

Click on "Action" andselect "Configure" to beginconfiguring that technology.

ConfigurationAssistant for thez/OS Comm.Server is availableon the z/OSManagementFacility

All the samefunction as in theWeb-download tool,but now on z/OS

No need to FTPnetworkconfiguration files!

Requires z/OSV1.11 and later



•Configuration Assistant guidance• Go to AT-TLS Perspective• Select the AT-TLS rule for the TN3270 serverand enable• Use Application Setup Tasks to assist withthe configuration and setup of the requiredapplications•The Configuration Assistant will generateand help you deploy the configuration files toyour z/OS system

As little as 30 minutes

•Manual process•Review the IP Configuration Guide

•Configure the Policy Agentapplication•Configure TTLS in the TCP/IP profile•Configure the Syslogd application•Create configuration policy for AT-TLS for your TN3270 Server

Hours (or even days for initial setup)

Secure yourTN3270serverconnectionswith SSL

• Configuration Assistant guidance• Go to IP Security Perspective• Add a connectivity rule for an IP Filter• Use Application Setup Tasks to assist withthe configuration and setup of the requiredapplications•The Configuration Assistant will generateand help you deploy the configuration files toyour z/OS system

As little as 30 minutes

•Learn how to set up IP filters•Review the IP Configuration Guide

•Configure the Policy Agentapplication•Create configuration policy for IPFilter rules•Configure default filter rules in theTCP/IP profile•Configure the TRMD application•Configure the Syslogd application

Hours (or even days for initial setup)

Filterunwantednetworktraffic fromyour z/OSsystem

With Configuration Assistant** in z/OSMFGUI for Policy Agent

Without Configuration Assistant**With Policy Agent only

** Based on IBM laboratory results, your results may vary

Get started faster! The Config. Assistant takes the rules and best practices found in various configuration publicationsand puts them under a single, simple user interface, saving you much time and effort.







Incident Log

Software



ISPF




Background

System z On/Off Capacity on Demand

Ideal if your business has few periodic workload peaks over the year. Potentially:

Save on hardware - No need to purchase hardware, ‘you rent it’ for the daysyou need it.

Save on monthly software charges – only pay for software charges for On/OffCoD peak capacity in the month it is incurred**

Also ideal if you own extra hardware capacity (banked capacity). Potentially:

Save on monthly software charges – budget for peak ‘banked’ capacity andturn off the resources when not needed to possibly gain software savings.

The Capacity Provisioning Manager (CPM) is in the base of z/OS z/OS Capacity Provisioning Manager can automate On/Off CoD for z/OS

• Can manage processing capacity more reliably, more easily, and faster.

• What had taken minutes or hours to discover, identify, decide, and resolve, now canbe specified to happen automatically in as little as two minutes.

The Capacity Provisioning Control Center (CPCC) is the user GUI toCPM used for administering the Capacity Provisioning policies Available as a separate Windows-based stand-alone client.

z/OSMF Capacity Provisioning (z/OSMF V1.13)


New z/OSMF Capacity Provisioning task(R13) Simplifies the monitoring of z/OS CP connections,

domains, configurations, and policies

Initially a separate Windows-based tool required for z/OSCP management functions.

• With APAR PM74519 the z/OSMF CapacityProvisioning application is enhanced to allow you tocreate, edit, and activate domain configurations andcapacity provisioning policies.

– With these new functions z/OSMF CapacityProvisioning supports all the functions available inthe Microsoft Windows-based Capacity ProvisioningControl Center (CPCC).

z/OSMF Capacity Provisioning (z/OSMF V1.13)


z/OSMF Capacity Provisioning (V1.13)Navigation

The Capacity Provisioning task can be found in the Performance category.


z/OSMF Capacity Provisioning (V1.13)

Manage CIM connections to access a Provisioning Manager in acentral shared repositoryCreate, modify and delete CIM connections. Local and remote CIMservers can be used.

Domain status reportView the status of a domain. The same data is displayed that isretrieved when a REPORT DOMAIN command on the z/OS console isissued.

Active configuration reportView the active configuration of a domain. The same data isdisplayed that is retrieved when a REPORT CONFIGURATIONcommand on the z/OS console is issued.

Active policy reportView the active policy of a domain. The same data is displayed thatis retrieved when a REPORT POLICY command on the z/OS consoleis issued.


z/OSMF Capacity Provisioning

Manage CIM connections toaccess a Provisioning Managers

View detailed status about a domain

Quick switch between reports for same domain

View information about the activeconfiguration for a domain•Drill down to CPC or system

View information about theactive policy for a domainDrill down to policy element


Usage of shared connection repository inz/OSMF. List of available domains isretrieved form server and shown to user.

No extra time to be spent

Connection information like hostname,protocol and port needs to be manuallygathered from primary person. Availabledomains must be known.

Up to 5 minutes

Operating personneeds to reuseexisting connection

Centrally managed z/OSMF applicationavailable to all authorized users.

No extra time to be spent

Install Windows client (CPCC) on workstation.

Hard to install on managed clients, 20 minutesotherwise

Installation of thecapacityprovisioning UIapplication**

Use integrated z/OSMF GUI to work with CP,RMF and WLM and compare data providedby each exploiter.

2 – 3 minutes until all tasks are completed

Start stand-alone Windows-based client(CPCC) for Capacity Provisioning, connect toCPM and display active configuration report.Open z/OSMF in a browser and inspect RMFand WLM data.

5 – 10 minutes until all tasks are completed

View active CPpolicy and comparewith data providedby RMF and WLM

With Capacity Provisioning in z/OSMF**Without Capacity Provisioning in z/OSMF**


** NOTE: Montoring only, complete set of CPCC management functionality is originally provided inz/OSMF V1.13,

z/OSMF Capacity Provisioning (V1.13)Benefits

The z/OSMF Capacity Provisioning task requires the base feature z/OS Capacity Provisioning

R13






Incident Log

Software



ISPF




z/OSMF Resource Monitoring The z/OSMF Resource Monitoring application provides

integrated performance monitoring in the customer'senvironment Supports z/OS, z/OS sysplexes, and Linux images (System z

and Intel) in your installation Requires the RMF z/OS Data server (DDS) on each sysplex being monitored

and the Linux data gatherer (rmfpms) running on the Linux image that is beingmonitored.

There are two z/OSMF tasks:Sysplex status: A snapshot of the performance of workloads running on your systems RED, YELLOW GREEN status gives instant indication if workloads are meeting

WLM goals Monitor z/OS AND Linux workloads Drill down to see workload resource metrics Renamed System Status (V1.13)

Monitoring Desktops GUI for RMF Monitor most Resource Measurement Facility (RMF) Monitor III metrics, create

and save custom views, and display real-time performance data as bar charts. Renamed Monitoring Dashboards (V1.13)


Resource Monitoring : System Status

A snapshot of the performance of workloads runningon your sysplexes. The System Status task alsoprovides a single location where you can definesysplexes and Linux images to be monitored.

Why is this status red? Drill down intothe details with the ResourceMonitoring task.


Resource Monitoring: MonitoringDashboards

Pre-loaded with standardmetrics. Can be customized,can add your own.

Click to open the dashboard

Monitor most of the metrics supported by theResource Measurement Facility (RMF™) Monitor III,create and save custom views of the metrics, anddisplay real-time performance data as bar charts.


Monitoring Dashboard - example

A running dashboard shows real-time performance data


Dashboards – add a metric

Add your own metrics and filters tocreate custom views with more detailedinformation, or correlation of events.


Integrated z/OS and Linux Monitoring

Processor Utilizationof z/OS Jobs

Processor Utilization of Linux Processes

Monitor z/OS and Linuxfor System z and Linuxon Intel platforms withthe help of a separatedownloadable tool

Have integrated z/OS and Linuxmetrics monitoring in one view


z/OSMF Resource Monitoring

The monitoring desktops are fullycustomizable. Specific metrics ofselected resources can be added to adesktop and are presented as charts.Multiple desktops can be started inparallel in different tabs. Advancedfiltering features allow you to conductmore sophisticated performanceanalysis.

About 5 minutes to set up a custommonitoring desktop, 3 key clicks to viewreal-time statistics

Tabular reports are a fixed layout andcan be viewed only one at a time withlimited ability to customize and filterthe data presentation. You have tomanually consolidate data fromdifferent reports

A long time, depending on datarequired and correlations needed. Insome cases, generating reports is notpossible.

Explore &compare theprocessorusage ofspecificsjobs

Cross-sysplex performance monitoringfrom a single point of control with aquick red-yellow-green health indicatorfor your systems on a single panel.

(Linux monitoring features are fullyintegrated.)

Just seconds to see the health of allyour sysplexes (and Linux images)

You need a Monitor III Reportersession on each sysplex, andmanually consolidate data fromdifferent reports. (Monitoring of Linuxresources has to be done with othertools)

Up to 15 minutes to look up eachsysplex and high degree of skillneeded to interpret reports

Checking theperformancestatus forseveralsysplexes

With z/OSMF Resource MonitoringWithout z/OSMF Resource Monitoring(using RMF ISPF Monitor III Reporter)






Incident Log

Software



ISPF




z/OSMF Workload Management (V1.12)

All the same functionsas in the ‘as is’ Web-download tool and manynew features Direct access to the

WLM Couple Data Setto install/extract servicedefinitions. No need to FTP WLM

policy files! Activation of service

policies and monitoringof the WLM status in thesysplex Enables you to manage

WLM service definitions

For z/OSMF V1.13 More granular

authorization Persistent settings

Click to view, edit,print, install aservice definition

Store all service definitions in one repository

Messages based onbuilt in bestpractice checks

WLM Policy Editor available on the z/OS Management Facility provides:


z/OSMF Workload ManagementEditing service definitions

Simplified creation, modificationand review of service definitions

Policy elements are presented intables; Tables can be edited,filtered, and sorted

Best-practice hints are displayedautomatically

Several service definitions canbe opened simultaneously

Serialization of the editing of theactive service definition

Simplified migration: Policyelements can be copied fromone service definition to another

Simplified operation: A user canstart to edit a service definition,interrupt the editing to activate aservice policy, and then continuewith editing without loosing thecontext

Cut, Copy, Paste of policyelements between servicedefinitions

Best-practicehints help tooptimize servicedefinitions

Easy to checkwhere theelement is used

Copy to clipboard forinsertion into anotherservice definition


z/OSMF Workload Management

Open a service definition from theservice definition repository. Navigatethrough it using links. Filter and sortpolicy elements in the tables.

Seconds until review can start

To get an overview of a servicedefinition you have to print it to a dataset, download the data set, and print itout or feed it into the Service DefinitionFormatter tool to filter and sort policyelements.

5-10 minutes until review can start

Review of servicedefinitions for dailychanges, migration,consolidation

Open the test and production servicedefinition simultaneously and copyover the changed policy elements viacopy and paste operations.

Seconds per policy element

Print out the test service definition andupdate the production service definitionby typing in the changes.

Up to several minutes per policy element

Transfer policyelements from a testservice definition toa productionservice definition

Check the best-practice hints the GUIdisplays for policy elements. Ifrequired, modify the policy elementscorrespondingly.Minutes (or hours when done initially)

Read through WLM-related manuals andidentify best-practices. Print out theservice definition and investigate it withrespect to proposed best-practices. Ifrequired, modify the policy elementscorrespondingly.Hours (or days when done initially)

Optimization of aservice definitionbased on best-practices

With WLM Policy Editor** in z/OSMFWithout WLM Policy Editor**

using WLM Administrative Application







Incident Log

Software



ISPF




New capability, never before available on z/OS Auto-capture basic diagnostic materials, triggered when the dump is written to a

data set• Diagnostic data “snapshots” for transient data: Snapshots of 30 min

OPERLOG or SYSLOG, 1 hr LOGREC detail, and 4-hour LOGRECsummary

– Incident Log will also support the creation of diagnostic log snapshotsbased on the SYSLOG and LOGREC data sets, as well as theOPERLOG and LOGREC sysplex log streams

View, sort, and act on abend related incidents (identified by subsystem) Package dump and log data for transmission in minutes

For z/OSMF V1.12 Add additional comments and diagnostic data Encrypted parallel FTP of the incident files, to IBM .

• Requires download fromhttp://www14.software.ibm.com/webapp/set2/sas/f/zaids/pduf.html

Sending additional user-defined data with an incident

For z/OSMF V1.13 APAR search terms displayed View error log (LOGREC) or operations log (SYSLOG) via ISPF application link Utilizes new Problem Documentation Upload utility in base of z/OS V1.13

z/OSMF Problem Determination – Incident Log


Incident Log – Manage Incidents

Select incident, getpopup with actions

Add Notes


Incident Log – Incident Details

Tab shows lists of data(logrec and error log)


Incident Log – Diagnostic Data

Attach user defineddiagnostic data(V1.12)


Incident Log – Send Diagnostic Data

Wizard guides you through


z/OSMF Problem Determination – Incident Log

Make the update happen in 3 mouseclicks

As little as 10 seconds

Requires 7 to 12 manual steps, plusskill on effective use of IPCS to locatethe dump data set, obtain the symptomstring, get into the IPCS DAE display,locate the matching symptom string(could be non-trivial) and indicateTakeNext on the IPCS display

Up to 15 minutes

Allow newdump to betaken for thesame symptom

Send the material in 8 clicks:

Select the incident materials

Specify the FTP destinationinformation

Send the material

Check whether the information wasFTP’d successfully


Requires 7 to 15 manual steps, plusskill to locate the right log files, buildand run jobs, rename the outputdatasets, and use an FTP job to sendthe different data sets to the targetdestination.

Up to 20 minutes

Up to 30 minutes for sysplexcomponents

Collecting andsendingdiagnostic data

Display in 1 click. Greatly reduced skillrequired


Requires 5 to 7 manual steps, plus skillon effective use of IPCS to extract datafrom each of the dumps.

Up to 5-6 minutes

Recognizing asystem-detected(dumped)problemoccurred

With z/OSMF Incident Log **Without z/OSMF Incident Log **







Incident Log

Software



ISPF




z/OSMF Software Management (Deployment) z/OSMF Software Deployment will provide rigor in the deployment of SMP/E

installed software.

New task designed to make deployment of installed software simpler and safer.

Replaces manual and error prone procedures with a user friendly application

Incorporates IBM recommended best practices for software deployment.

Software Deployment can clone software

Locally, either on a single system or system-to-system within a sysplex

Remotely, system-to-system across a network, even multiple sysplexes.

Software Deployment can also: Identify, modify, delete software instances Generate jobs to copy a software instance Verify cross-system and cross-product requisites, verify fixes Copy ALL parts of the software (including SMP/E CSI inventory) Helps identify actions including catalog, configuration, and security updates

Software scope includes all SMP/E installed software: IBM and ISV z/OS, stack or individual products, Service upgrades for all of the above (via complete replacement)


An intuitive checklisthelps guide you thoughthe z/OS and relatedsoftware deploymentprocess Select the software to

deploy (a softwareinstance)

Select the deploymentobjective

Report missing requisitesand possible regressions

Configure the targetsoftware instance

Validate the configurationagainst the target system,Summarize the deploymentactions, and Generate thedeployment jobs

Execute the deploymentjobs

z/OSMF Software Management (Deployment)


Automatically use SMP/E inventory toidentify the all of the data sets thatcompose the source to be deployed.

Done manually. Usually requires strictdata set naming conventions or volumeplacement.Problems occurred when customers: For WAS V6, copying PDSE without filesystem or visa versaFor fixes, copying one library w/o anotherresulting in part of the APAR installed,Not copying a data set that had been renamedand enlarged

Identify completecontent ofsoftware to bedeployed.

Task Without z/OSMF Software Deployment With z/OSMF Software Deployment

Identify missingrequisite PTFs oninstances that willshare resourceswith the deployedsoftware.

Done manually prior to activation.System programmer can create and runSMP/E jobs to identify missing requiredservice on other instances if the knowthe proper Fix Categories andcommands.Problems occurred when customers weremissing coexistence maintenance:Cause an outageIn one case caused a sysplex wide outagewhen fallback was required

Automated.The task is optional, butrecommended.

Identify regressedsoftware on theprior levelinstance.

Done manually prior to activation.System programmer can create and runSMP/E jobs to compare source withprior instance. Can not be done if sourceand prior instance are in differentsysplexes.Problems reoccurred

Automated.Supports cross-sysplex checkingThe task is optional, butrecommended.



Automated.

Supports cross-system checking.

The task is optional, butrecommended.

Done Manually. No SMP/E reportcapability to compare source with theprior instance available. Systemprogrammer has to keep track of allSYSTEM HOLDs installed and checkapplicable to each system they deployto.Problems occurred because ACTIONS notperformed on deployed to system

Identify requiredactions from PTFHOLDs.

Automated

Does not allow a user to accidentallyclobber an existing data set.

Analyzes target system catalogs toidentify which will be updated for thetarget data sets, calling out new,updated, or deleted catalog entries.

Analyzes existing space used,accounting for data sets added,replaced, and deleted.

Done manually.

Compare source data sets with thetarget system catalog and volumes

Compare target data set names withthe target system catalogs to ensure thedesired catalogs will be updated andnew HLQs are identified

Best-guess comparison of availablefree space and required space for targetdata sets.Problems typically result in the deploymentjobs having to be rerun

Modify the targetinstance data setlayout (names,placement, andcatalog

AutomatedDone manuallyAbility to modeltarget instanceafter currenttest/prod instance




AutomatedComplete and accurate jobs areautomatically created that alwaysdeploy complete software instances.Supports current technologies.

Done manually.Create jobs from scratch, copy IBMsupplied samples, or reuse priordeployment jobs.Inhibits exploiting new technologies,like zFS.Problems occurred when customersmistakenly deploy subsets of softwaremiss copying new libraries

Createdeployment jobs.

Automatically generate reports tosummarize the changes to the targetsystem before making those changes.Save reports for later audit or problemdetermination.

No real way to do this. If done at all,manually:Compare source volumes with thetarget system,Review deployment jobsProblems typically result in the deploymentjobs having to be rerun

View the plannedtarget systemupdates beforerunning the jobs.

SameDone manually. Jobs and output can besaved for audit purposes

Run the jobs

Simple update required using the GUIN/ASave instance forfuturedeployments


Note: The same z/OSMF Software Deployment tool can be used for z/OS, middleware and vendor software.Customers have separate tools/techniques for z/OS and other software.


52 © 2013 IBM Corporation52

Focus on: z/OSMFz/OSMF Software Management In addition to deploying a software instance,

the Software Management task will: Allow inspection of a software instance to

view the product, feature, and FMIDcontent;

View the physical data sets that composea software instance; and

Perform actions to analyze and report onsoftware instances and installed products.

• Identify software products that areapproaching, or have reached, end of servicesupport.

• Validate the SMP/E structure and content of asoftware instance is correct.

• Identify missing HIPER and PE fixes, andfixes associated with one or more fixcategories

• Determine if individual fixes are installed andin which software instances.

• Compare the service and functional content oftwo software instances to aid in debugging ormigration planning.






Incident Log

Software



ISPF




Enables systemprogrammer to performtasks from one interface. Also makes ISPF

applications URL Web-accessible for linking andlaunching from otherapplications

Up to 4 panes Panes can be sized. Each

pane can have multipleISPF sessions, tabs canbe moved between panesfor a total of 8 tabs

Shows ISPF Menu bar,Command line, Functionkeys

Also available in tabbedformat

z/OSMF and ISPF (R13)Work with existing interfaces


Customizesettings

z/OSMF and ISPF (R13)Additional screens

TSO messageshave priorityand pop up

Example: SDSFstatus






Incident Log

Software



ISPF




z/OSMF Workflow Application A new z/OSMF Workflow Application is planned in z/OSMF V2.1*

This application is designed to allow exploiters to provideconfiguration assistance for functional setup tasks to simplify z/OSconfiguration.

This application is planned to route tasks to complete a workflowamong a number of defined users or people assigned to specificroles, such as "system programmer"

"security administrator"

z/OSMF user notified of assigned workflow steps via Notification task

Plan to provide a guided flow through steps to accomplish a task XML metadata file contains steps and details

Steps may be manual or invoke wizards

Wizards to update and submit jobs, execute shell scripts and REXX execs

Steps may define dependency on other steps

Steps go through various stages until complete

May be skipped or overridden

History maintained of all activities in the workflow task* Planned. All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice.


Agenda






z/OSMF Internet and Intranet Links

The Links category contains the pre-defined links provided by IBM aswell as any new links added by thez/OSMF administrator

Administrator can define which roleshave access to each of the definedlinks. The Links task in Administration category allows

the administrator to dynamically add links to non-z/OSMF resources, e.g. ISV products, commonlyused installation Web sites

The IBM pre-defined links areaccessible to all users, includingguests, by default.

Also, a new interface enables you toadd non-z/OSMF launch points andlinks to any category on the lefthand side navigation tree. (V1.12)


z/OSMF Administration: Adding a link

Need to share informationwith the team?

Need to go to anotherapplication?

Add a link!

Select who can see it

Define the link

Where it goes (on the nav bar) planned for V1.12


Agenda






Today’s options:

Allocate and open internal reader

TSO/ISPF submit,

FTP “interface-level2”

Java z/OS submit interface

New RESTful HTTPs based API

Secure, Firewall friendly, text like

Any web-based, Java, PHP, Perlapplication, etc. supporting HTTP

z/OSMF R13

z/OS JES2

z/OS JES3

Complex programming

Security protocol limitations

Break the barriers ofbatch

Submit JCL, getstatus, retrieve

output files, changejobclass, cancel job,

purge job

New programmatic interface for z/OS z/OSMF R13 Introduces a new REST API (HTTP(s)-based) interface to z/OS

Easy programmatic access to z/OS jobs

REST API web services can be used by: web applications (javascript/AJAX, Flex(Flash), etc) andother web service clients, such as Java, PHP, Perl, etc

The REST API web service will connect to both JES2 and JES3, as well as select secondarysubsystems

This interface is an open API which can be driven locally on a z/OS system or driven from a remotesystem

• The remote system need only support the HTTP(s) protocol


RESTful service for JOBs managementHTTPServiceURLService

DELETEhttps://host:port/zosmf/restjobs/j obs/jobname/jobidPurge a job

PUThttps://host:port/zosmf/restjobs/j obs/jobname/jobid

JSON document : {“cl ass”: ”<new_j ob_cl ass>”}

Change the job class for ajob

PUThttps://host:port/zosmf/restjobs/j obs/jobname/jobid

JSON document : {“request ”: ”cancel ”}

Cancel a job

PUThttps://host:port/zosmf/restjobs/jobsSubmit a job

GEThttps://host:port/zosmf/restjobs/jobsGet a list of jobs, optionallybased on owner, prefix, orjobid parameters* supports secondary JES

GEThttps://host:port/zosmf/restjobs/jobs/jobname/jobid/files/nnn/records

Get the contents of a spoolfile for a job

GEThttps://host:port/zosmf/restjobs/jobs/jobname/jobid/filesGet the list of spool filesrelated to a job* supports secondary JES

GEThttps://host:port/zosmf/restjobs/jobs/-JESB/jobname/jobidGet the status for a job forsecondary JES

GEThttps: //host:port/zosmf/restjobs/ jobs/jobname/jobidGet the status for a job


Agenda






Application linking (R13)

Provide a more seamless experience forsystem programmers as they work withdifferent tools and tasks on the z/OSsystem. This is accomplished by enabling Cross

application linkage and context sensitivelaunching between z/OSMF applicationsand also between z/OSMF applicationsand external applications Link z/OSMF apps to z/OSMF apps … or

…. Link non-z/OSMF web-based apps toz/OSMF apps


Application linking (R13)Example, link from z/OSMF to LookAt

Define an‘event’ (suchas “LookAt”)

Then definethe ‘eventhandler’ actionandparameters(such as ‘go toLookAt’ withtext search)


Application LinkingExample, link Incident Log to SDSF in context

Action from the Incident Log:Launch to view job status - SDSF


Application Linking - APIs

DELETE/zosmf/izual/rest/eventtype/<id>unregisterEventType

DELETE/zosmf/izual/rest/handler/<id>unregisterHandler

GET/zosmf/izual/rest/handlergetHandlersForEventType

{

type : “EXTERNAL”,

id: “RM.SYSTEM_STATUS”,

displayNam e : “Default English name”,

bundleFile: “optionalBundleFileName.js”,

bunleUrl: “optional/bundle/url/path”,

options: {

“CONTEXT_SUPPORT”:

“OPT_CONTEXT_SUPPORT_NONE”

} }

Valid values for the type are:- EXTERNAL or – INTERNAL

Various values for the “CONTEXT_SUPPORT” option

POST/zosmf/izual/rest/handler/<id>registerExternalHandler

{

id: “IBM.ZOSMF.EVENT_TYPE_ID”,

displayNam e : “Default English name”,

desc: “Default English description”,

bundleFile: “optionalBundleFileName.js”,

bunleUrl: “optional/bundle/url/path”,

ow ner : “ow nerId”,

params: {“key1”: “English description of the param”}

}

POST//zosmf/izual/rest/eventtype/<id>registerEventType

•Request Parameters•HTTPMethod

•URL

•Servlet API MethodMethod


Application Linking – GUI interface


Agenda






z/OSMF Administration: SAF-based authorization

z/OSMF is enhancing its authorization model toprovide tighter integration with Enterprise SecurityManagement products. New resource class pair for z/OSMF

• ZMFAPLA resource class• GZMFAPLA grouping class

Use of SAF groups to represent z/OSMF roles• connection of z/OSMF users to these new Groups

Resource names associated with all z/OSMF tasks andlinks.

Resource class profiles control authorization to z/OSMFmanaged resources.

Support for custom roles via creation of additionalSAF groups at system programmer’s discretion. Granularity of access determined by z/OSMF

resource profile permissions for a given group.



Option to stay with repository mode or convertto SAF mode Can switch to SAF mode at a later time

• Configuration support for conversion to SAF mode via scripts.

• Requires activation of ZMFAPLA resource class– Enable for generic profiles if needed.

Ability to switch back to repository mode if needed. Notrecommended to switch back and forth repeatedly. SAFmode is the strategic destination.

Users, Roles (groups) and Task authorizationmanagement SAF Mode: via ESM and customer security change

control processes.

Repository Mode: via z/OSMF Users and Roles tasks



Exploitation of new Resource Classes, profiles, andgroups

Plug-ins register resource names associated with each oftheir tasks

All task resource names associated with the ZMFAPLAresource class.

IBM reserved resources: ZOSMF.<plugin-name>.<task-name>.<action-control-qualifier>

• The plug-in profile will be defined at deployment time.

• For delayed deployment and activation of plug ins create profileswhen plug-in is deployed

Definition of SAF Groups and connection of z/OSMFusers to these new Groups

Groups permitted to z/OSMF resource profiles (inZMFAPLA) to facilitate z/OSMF Role support


Agenda






"The z/OS Management Facility initiative

has been expanded with a number of newfunctions available with z/OS V1.13. Thisproduct shows great promise of being agreat help for the younger z/OS systemprogrammers, who may not have manyyears of experience with the platform. "

Bertil Andersson, Senior Enterprise ITArchitect, Svenska Handelsbanken

What our customers are saying


What our customers are saying……..

“We are using z/OSMF primarily for WorkloadManagement (WLM) and z/OS CommunicationServer purposes. The WLM component isamazing. It simplifies the maintenance of theWLM policy and makes it much easier to reviewand update. It also alerts us to warnings anderrors in our policy. The Configuration Assistantis being utilized for z/OS Communication ServerAT-TLS and IPSec configuration. We are alsousing Incident Log, which seamlessly retrieveserror data and sends it to IBM for analysis. Thisfunction has greatly simplified the daily work of asystem programmer. “

‘Large Government Customer’


What our customers are saying……..“My z/OSMF migration from V1R11 to V1R13 went very smoothly! Of all

the new features in V1R13, I was particularly interested in the newSoftware Deployment capability for cloning and deploying software.I found it easy to use and especially liked that it supports anySMP/E installed product. I plan to use it with our ISV products.”‘Information Technology and Marketing Services’

“We are using z/OSMF 1.12 and the Incident Log function is veryefficient. After entering the PMR number, the diagnostic data weresent in just a few clicks!”'Large equipment manufacturing'

“Being relatively new to the Systems Programming role, IBM’s z/OSManagement Facility (z/OSMF) has helped my role as a SystemsProgrammer, by providing a web browser based tool that bringstogether some routine day-to-day operations and administration ofz/OS systems into one simple to use web interface. Using z/OSMFhas helped me to become more productive in my new role as aSystems Programmer.”Government Agency (Europe)


What our customers are saying……..

Upon seeing the new z/OSMF Software

Management functionality, Cheryl Watson (a

consultant at Watson and Walker) said:

“I think the new features are neat enough to encourage people

who haven't installed z/OSMF yet to reconsider installing it.”

Obviously, I agree


Shameless Plugs

Attend session (zZS10) New z/OSMF SoftwareManagement Capabilities (Thursday 9:00 AM) For more information on z/OSMF Software Management

Attend session (zZS01) z/OSMF Hands On Lab(Thursday 1:00 PM) To try each of the z/OSMF Management applications

Attend session (zZS11) z/OSMF SoftwareManagement Hands On Lab (Thursday 2:30 PM) To use z/OSMF Software Management

Attend session (zZS12) z/OSMF SoftwareDeployment Hands On Lab (Thursday 4:15 PM) To use z/OSMF Software Management to deploy

previously SMP/E installed software


z/OSMF V2.1*

z/OSMF is planned to use the Liberty profile inWebSphere Application Server for z/OS V8.5.

This is expected to provide significant reductions inthe resource requirements for z/OSMF

• No more WASOEM FMID, reduces the size andseparate configuration

Simplified z/OSMF setup

• Reduced steps to configure z/OSMF

• Applying service is easier

Faster startup

* Statements regarding IBM future direction and intent are subject to change or withdrawal, and represents goals and objectives only.


Summary






Thank you for attending this session!

Don’t miss these valuable opportunities:

Keep the momentum going

ibm.com/training

Now is the time to explore your options for

additional training. One stop shopping for all

your technical training needs.

ibm.com/training/trainingpaths

IBM Training Paths – These flowcharts map

out the sequence of classes you need, to

obtain a specific skill or professional

certification. Get started today!

ibm.com/certify

Stand out from the crowd when you earn a

valuable credential of an IBM Certified

Professional. Find certifications by product or

solution.

We value your feedback

1. Submit Session Evaluations on

ibmtechu.com and receive an

entry to WIN prizes. The more

evaluations submitted, the

greater your chance of winning!

2. Submit your Overall Session

Evaluation and receive a free

gift at the registration desk.

Upcoming events

IBM Edge2013June 10 – 14, 2013 | Las Vegas, Nevada

2013 IBM Power Systems

Technical UniversityOct 21 – 25, 2013 | Orlando, Florida

2013 IBM System z Technical

UniversityOct 21 – 25, 2013 | Orlando, Florida

(*Note: IBM Clients - Alumni Early Bird Pricing for you andanyone from your company. Enroll using Promotion Code A6A. )

ibm.com/systems/conferenceseries

Match your interests with other IBM

Technical Events.


BACKUP


Additional Information

z/OS Management Facility website http://ibm.com/systems/z/os/zos/zosmf/

IBM z/OS Management Facility educationmodules in IBM Education Assistant http://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/index.jsp

• Scroll down to z/OS Management Facility

z/OS Hot Topics, Issue 21 and 23: http://ibm.com/systems/z/os/zos/bkserv/hot_topics.html

IBM z/OS Management Facility ConfigurationGuide (SA38-0652)


z/OSMF V1.12 Requires z/OS V1.12 Client machine

• Windows XP, Windows Vista,and Windows 7

• Mozilla Firefox 3.0, 3.5(recommended)

• Internet Explorer® 7, 8

Support added for Windows 764 bit

• 32bit version of FF3.5 and IE8• Requires PM27082

• Firefox 3.6 also found towork

• Ignore message IZUG809W

z/OSMF 1.13 Requires z/OS V1.13 Client machine

• Windows Vista, Windows 7(32 & 64 bit), and WindowsXP

• Mozilla Firefox 3.5, 3.6, ESR 10• Internet Explorer 7, 8, 9• Later releases of Mozilla Firefox

known to work.• Ignore message IZUG809W

Prerequisites

Browser checker available.Your browser connects tothe z/OS ManagementFacility and checks thebrowser settings


Incident Log PTFs UK74705 and UA63395 - Migrated data set

handling Currently, Incident Log returns an error if a diagnostic data

item is migrated and the recall does not complete beforethe CIM server times out.

This PTF provides support in Incident Log for new CEAreason codes pertaining to migrated diagnostic data.

• 0x398: Signals that some or all of the diagnostic data for an incidenthas been migrated by HSM

• 0x399: Signals that some or all migrated diagnostic data cannot beretrieved from HSM

In the past, working with migrated diagnostic data setscould be lengthy resulting in timeouts; now z/OSMF canprocess migrated data sets with improved handling

Rolled back to z/OSMF V1.12 with PTFs UK74704 andUA63394

ISPF Usability enhancement - PM47241

Documents

What is zOSMF and Why would I want it - New Era · IBM may not offer the products, services or features discussed in this document in other countries, and the information may be subject