IBM Redbooks

Paola Bari

Marian Gasparovic

Helio Almeida

Gary Detro

David Druker

Manfred Gnirss

Jean Francois Jiguet

Discussions about server sprawl, rising software costs, going green, or moving data centers to reduce the cost of business are held in many meetings or conference calls in many organizations throughout the world. And many organizations are starting to turn toward System zTM and z/VM® after such discussions. The virtual machine operating system has over 40 years of experience as a hosting platform for servers, from the days of VM/SP, VM/XA, VM/ESA® and especially now with z/VM. With the consolidation of servers and conservative estimates that approximately seventy percent of all critical corporate data reside on System z, we find ourselves needing a highly secure environment for the support of this infrastructure. This document was written to assist z/VM support and security personnel in providing the enterprise with a safe, secure and manageable environment. This IBM® Redbooks® publication provides an overview of security and integrity provided by z/VM and the processes for the implementation and configuration of z/VM Security Server, z/VM LDAP Server, IBM Tivoli® Directory Server for z/OS®, and Linux® on System z with PAM for LDAP authentication. Sample scenarios with RACF® database sharing between z/VM and z/OS, or through Tivoli Directory Integrator to synchronize LDAP databases, are also discussed in this book. This book provides information about configuration and usage of Linux on System z with the System z Cryptographic features documenting their hardware and software configuration. The Consul zSecure Pro Suite is also part of this document: this product helps to control and audit security not only on one system, but can be used as a single point of enterprise wide security control. This document covers the installation and configuration of this product and detailed information is presented on how z/Consul can be used to collect and analyze z/VM security data and how it can be helpful in the administration of your audit data.

Security on z/VM

Paul Rogers

Alvaro Salla

Valeria Sokal

Luiz Fadel

Andreas Horn

Redelf Janssen

Thomas Stoeckel

The ABCs of z/OS® System Programming is an eleven-volume collection that provides an introduction to the z/OS operating system and the hardware architecture. Whether you are a beginner or an experienced system programmer, the ABCs collection provides the information you need to start your research into z/OS and related subjects. If you would like to become more familiar with z/OS in your current environment, or if you are evaluating platforms to consolidate your e-business applications, the ABCs collection will serve as a powerful learning tool. The contents of the volumes are: Volume 1: Introduction to z/OS and storage concepts, TSO/E, ISPF, JCL, SDSF, and z/OS delivery and installation Volume 2: z/OS implementation and daily maintenance, defining subsystems, JES2 and JES3, LPA, LNKLST, authorized libraries, Language Environment®, and SMP/E Volume 3: Introduction to DFSMS, data set basics, storage management hardware and software, VSAM, System-Managed Storage, catalogs, and DFSMStvs Volume 4: Communication Server, TCP/IP and VTAM® Volume 5: Base and Parallel Sysplex®, System Logger, Resource Recovery Services (RRS), global resource serialization (GRS), z/OS system operations, Automatic Restart Management (ARM), Geographically Dispersed Parallel SysplexTM (GPDS), availability in the zSeries® environment Volume 6: Introduction to security, RACF®, Digital certificates and PKI, Kerberos, cryptography and z990 integrated cryptography, zSeries firewall technologies, LDAP, Enterprise identity mapping (EIM), and firewall technologies Volume 7: Printing in a z/OS environment, Infoprint Server and Infoprint Central Volume 8: An introduction to z/OS problem diagnosis Volume 9: z/OS UNIX® System Services Volume 10: Introduction to z/Architecture®, zSeries processor design, zSeries connectivity, LPAR concepts, HCD, and HMC Volume 11: Capacity planning, performance management, RMF, and SMF Volume 12: WLM Volume 13: JES3

ABCs of z/OS System Programming: Volume 5

Brian Hatfield

Richard Young

Mike Ebbers

Bill White

Elsie Ramos

Octavian Lascu

Gwen Dente

Wolfgang Fries

Jeff McDonough

Iain Neville

Giancarlo Rodolfi

Thomas Schulze

Paul Sutera

Qi Ye

For the first time it is possible to deploy an integrated hardware platform that brings mainframe and distributed technologies together: a system that can start to replace individual islands of computing and that can work to reduce complexity, improve security, and bring applications closer to the data that they need. With the zEnterprise System a new concept in IT infrastructures is being introduced: zEnterprise ensembles. A zEnterprise ensemble is a collection of highly virtualized diverse systems that can be managed as a single logical entity where diverse workloads can be deployed. Ensembles, together with the virtualization, flexibility, security, and management capabilities provided by the zEnterprise System are key to solving the problems posed by today's IT infrastructure. The zEnterprise System consists of three components: - IBM® zEnterprise Central Processor Complex (CPC) The zEnterprise CPC can either be a zEnterprise 196 (z196) or a zEnterprise 114 (z114). Both zEnterprise CPCs offer z/OS, z/VSE, and z/TPF operating systems, as well as the ability to run many virtualized Linux servers under the z/VM operating system. - IBM zEnterprise BladeCenter Extension (zBX) The zBX provides the capability to run the wide variety of applications typically found in UNIX and x86 architectures. The zBX supports select POWER7 blades running AIX and System x blades running Linux on System x and Microsoft Windows. - IBM zEnterprise Unified Resource Manager Unified Resource Manager runs in the Hardware Management Console (HMC). It provides integrated management across all elements of the zEnterprise System. This IBM Redbooks® publication discusses how to plan and implement an ensemble, using the zEnterprise Unified Resource Manager. This book assumes a knowledge of IT systems, networks, and storage devices.

Building an Ensemble Using IBM zEnterprise Unified Resource Manager

Paola Bari

Books

Your next favorite book is out there