Download IBM z/OS Operating System

Survey
yes no Was this document useful for you?
   Thank you for your participation!

* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project

Document related concepts

Lag wikipedia , lookup

Computer security wikipedia , lookup

Zero-configuration networking wikipedia , lookup

Cracking of wireless networks wikipedia , lookup

Distributed firewall wikipedia , lookup

Remote Desktop Services wikipedia , lookup

Parallel port wikipedia , lookup

Transcript
DPRO-96040
Mary I. Hubley, MaryAnn
Richardson
Product Report
27 August 2003
IBM z/OS Operating System
Summary
IBM z/OS, which supports the zSeries 990 server, provides high-level availability, scalability and quality of
service to meet the unpredictable workload demands of today’s computing environments.
Table of Contents
Overview
Analysis
Pricing
Competitors
Strengths
Limitations
Insight
List Of Tables
Table 1: z/OS Version V1R4.0 Features/Functions
Gartner
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.Reproduction of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be
reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations
thereof. The reader assumes sole responsibility for the selection of these materials to achieve its intended results. The opinions expressed herein are subject to change without notice.
IBM z/OS Operating System
Corporate Headquarters
IBM
Old Orchard Road
Armonk, NY 10504, U.S.A.
Tel: +1 914 1900
Fax: +1 914 4190
Internet: www.ibm.com
Overview
z/OS is the flagship operating system for IBM’s zSeries mainframe servers, which also support z/OS.e,
Linux, z/VM, VSE/ESA and TPF. z/OS is also the upgrade to OS/390 v.2.10. The current version of z/OS,
v.1.4, runs on the following IBM servers:
•
zSeries z990
•
zSeries z900
•
zSeries z800
•
G5 and G6 models of S/390 Parallel Enterprise Servers
•
All models of the Multiprise 3000 Enterprise Server
Enhancements added to z/OS 1.4 include self-optimizing improvements, such as better dynamic
balancing of batch workloads across a sysplex and better self-tuning. Specifically, version 1.4 provides:
•
Improved operator messaging architecture
•
Concurrent access to Virtual Storage Access Method (VSAM) datasets for both batch and Customer
Information Control System (CICS) online transactions
•
IBM Health Checker for z/OS and Sysplex in the msys for Operations
•
Enterprise Identity Mapping (EIM) for managing multiple user registries across an enterprise
•
Updates to Data Facility Storage Management Subsystem (DFSMS) Removable Media to help
improve usability, availability and security
•
New versions of the optional Open Systems Adapter Support Facility (OSA/SF) and Device Support
Facilities (ICKDSF)
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
2
IBM z/OS Operating System
Table 1: z/OS Version V1R4.0 Features/Functions
Base Control
Provides essential operating system services:
Program (BCP)
• Input/output (I/O) configuration program (IOCP)
• Workload manager (WLM)
• System management facilities (SMF)
• Z/OS Unix System Services (z/OS Unix) kernel
• Unicode support
• Program management binder
Bulk Data Transfer
Provides base services for data transfer between computer systems; required for
(BDT)
optional BDT features.
BookManager
Converts BookManager documents to HTML for display through a Web browser.
BookServer
C/C++ IBM Open
Provides a set of C++ class libraries that can be used by applications at runtime. No
Class Library
license for C/C++ with Debug Tool or C/C++ without Debug Tool is required.
Communications
Includes:
Server (CS z/OS)
• Systems Network Architecture (SNA) Services — includes AnyNet function; uses
Data Encryption Standard (DES) algorithm for encryption
• IP Services — uses the firewall Commercial Data Masking Facility (CDMF) DES
40-bit, Simple Network Management Protocol version 3 (SNMPv3) DES 56-bit and
IPsec DES 56-bit algorithm for encryption
• HiperSockets 16 Internal LANs Support — support for up to 16 internal LANs on all
z990 servers
• HiperSockets Internal-Queued-Direct (IQD) Channel Path Identifier (CHPID)
Spanning Support — allows z990 TCP/IP stacks to communicate using
HiperSockets channels configured to multiple Channel Subsystems and
transparently shared by any or all configured logical partitions (LPARs) without
regard to the Logical Channel Subsystem (LCSS) to which the LPAR is configured
Cryptographic
Base cryptographic functions:
Services
• Data secrecy
• Data integrity
• Personal identification
• Digital signatures
• Management of cryptographic keys
Includes:
• Integrated Cryptographic Service Facility (ICSF)
• Open Cryptographic Services Facility (OCSF)
• System Secure Sockets Layer (SSL)
Distributed
Facilitates the interaction between DCE and CICS or Information Management
Computing
System (IMS) regions.
Environment Clients
(DCE) Application
Support
DCE Base Services
Provides services for developing and running client/server applications:
(The Open Group
• Remote procedure call
[OSF] DCE Level
• Directory
1.1)
• Security
• Distributed time services
• Limited DES algorithm for encryption
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
3
IBM z/OS Operating System
Table 1: z/OS Version V1R4.0 Features/Functions
DFSMS Data Facility
Provides storage, data, program and device management functions.
product (DFSMSdfp)
Distributed File
Supports:
Service (DFS)
• OSF DFS Level 1.2.2 (uses 56-bit DES encryption)
• zSeries File System (zFS)
• Server Message Block (SMB version 2) file/print services (uses 56-bit DES
encryption)
Encina Toolkit
Toolset for developing client components of distributed transactional applications.
Executive
Environmental
Edits and prints reports for records placed in the error recording dataset (ERDS).
Record Editing and
Printing Program
(EREP)
Enterprise Systems
Reports on ESCON director device errors.
Connection
(ESCON) Director
Support
First Failure Support
Provides immediate notification and first fail data capture for software events.
Technology (FFST)
Graphical Data
Provides presentation services and device-driving capability; includes PC Link
Display Manager
(PCLK) and Restructured Extended Executor Language (REXX) code.
(GDDM)
Hardware
Defines a system’s operating system configuration and processor hardware
Configuration
configuration.
Definition (HCD)
High Level
Integrates earlier assembler version functions, adding extensions and
Assembler (HLASM)
improvements.
IBM HTTP Server
Web server; supports SSL, Fast Response Cache Accelerator, multiple IP
addresses, proxy authentication and double-byte character sets.
Device Support
Provides functions for installation and use of IBM direct-access storage device
Facility (ICKDSF)
(DASD).
IBM License
X/Open Software License Management (XSLM)-based software license
Manager (ILM)
management tool.
Job Entry Subsystem
Accepts submission of work for the BCP; exercises independent control over its job
2 (JES2)
processing functions.
Language
Runtime environment for programs generated with C, C++, COBOL, FORTRAN and
Environment
PL/1; uses limited DES algorithm.
Magnetic Ink
Provides device support code to support a range of magnetic and optical devices.
Character
Recognition/Optical
Character
Recognition
(MICR/OCR)
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
4
IBM z/OS Operating System
Table 1: z/OS Version V1R4.0 Features/Functions
Managed System
Automates operator tasks and events for Parallel Sysplex configuration. Features:
Infrastructure for
• IBM Health Checker for z/OS and Sysplex
Operations (msys for
• Hardware policy validation
Operations)
• Critical ENQ resources detection
• Ability to remove failed systems from a Parallel Sysplex
Managed System
Provides graphical user interface (GUI) for defining and customizing configuration
Infrastructure for
parameters.
Setup (msys Setup)
Network File System
TCP/IP network file server. Consists of Network File System Client and Network File
Server. Supports Berkeley sockets.
Interactive System
Full-screen editor and dialogue manager.
Productivity Facility
(ISPF)
Open Systems
Provides user interface for monitoring and controlling the zSeries Open Systems
Adapter/Support
Adapter feature for connecting zSeries networks to LANs and WANs that support IP
Facility (OSA/SF)
and SNA protocols.
System Modification
Software installation, maintenance and inventory management tool.
Product/Extended
(SMP/E)
Text Search
Includes:
• IBM Text Search Engine — database search engine
• NetQuestion Solution — Web server search engine
Terminal
Allows console services and Time Sharing Option/Extensions (TSO/E) to
Input/Output
communicate with terminal hardware.
Controller (TIOC)
TSO/E
Interactive terminal interface; includes command lists (CLISTS) and REXX.
z/OS Unix System
Standard command interface for interactive Unix users. Includes:
Services (z/OS Unix)
• Applications services — Shell, Utilities, Debugger and Parallel Environment
• Connection Manager
• Integrated Call Level Interface (ICLI)
• Process Manager
3270 PC File
Transfers files from the host to the workstation for offline data manipulation,
Transfer Program
updating or correction or for the transfer and storage of local data in the host
system.
Optional Features
BDT File-to-File
Allows datasets to be copied to and from two z/OS systems in a SNA network.
BDT SNA Network
Allows JES3 users to transmit jobs, output, commands and messages from one
Job Entry (NJE)
computer system to another within a SNA network.
BookManager BUILD
Creates softcopy documents that can be used by any of the BookManager products,
such as BookManager READ or BookManager BookServer.
BookManager READ
Displays, searches and manages online documents and bookshelves.
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
5
IBM z/OS Operating System
Table 1: z/OS Version V1R4.0 Features/Functions
C/C++ with Debug
Includes:
Tool
• Two C compilers: one at z/OS v.1r.2 level and one at OS/390 r.10 level (for
migration purposes only)
• Two C++ compilers: one at z/OS v.1r.2 level (supports International Organization
for Standardization [ISO] 198 Standard level C++) and one at OS/390 R10 level (for
migrations purposes only)
• Debug tool
• C/C++ application development utilities
C/C++ Without
Same as C/C++ with Debug Tool but without Debug tool.
Debug Tool
Communications
Works in conjunction with CS z/OS to provide greater than 64-bit encryption using
Server Security
the Triple DES (TDES) algorithm.
Level 3
DFSMS Data Set
Copies and moves data for backup and recovery and to reduce free-space
Services
fragmentation.
(DFSMSdss)
DFSMS Hierarchical
Provides automated DASD storage management, including space management for
Storage Manager
low inactive data, and availability management for accidental data loss caused by
(DFSMShsm)
local and site disasters; also supports tape media. Requires DFMSdss.
DFSMS Removable
Manages removable media as one enterprisewide library across systems that can
Media Manager
share DASD.
DFSMSrmm)
Data Facility Sort
Sorts, merges and copies data.
(DFSORT)
GDDM-Presentation
Set of programs for creating presentation material in a variety of styles.
Graphics Feature
(PGF)
GDDM-REXX
Used to prototype GDDM applications and create small routines and utility
programs.
Hardware
Personal workstation-client/server interface to the HCD.
Configuration
Manager (HCM)
HLASM Toolkit
Provides application development, debugging and recovery tools.
IBM HTTP Server
Adds support for 128-bit SSL encryption to IBM HTTP Server.
NA Secure
InfoPrint Server
Allows any TCP/IP-connected workstation to send files to any z/OS printer. Includes
IP PrintWay, NetSpool, Print Interface, Printer Inventory Manager and Transform
Manager.
JES3
Accepts the submission of work for the BCP; exercises centralized control over its
job processing functions.
OCSF Security Level
Adds support for TDES, DES and Rivest code 2 (RC2) RC4/RC5 algorithms for
3
encryption to base OCSF Cryptographic Services.
Resource
Collects resource use data and provides reports at any system in a sysplex.
Management Facility
(RMF)
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
6
IBM z/OS Operating System
Table 1: z/OS Version V1R4.0 Features/Functions
System Display and
Provides information for monitoring, managing and controlling the operating system.
Search Facility
(SDSF)
Security Server
Components:
• DCE Security Server
• Firewall Technologies (supports DES algorithms for encryption)
• LDAP Server
• Network Authentication Service
• Open Cryptographic Enhanced Plug-ins
• Resource Access Control Facility (RACF) (supports DES and Dynamic Channel
Path Management (DCM) algorithm and RC2 40-bit algorithm
• Public Key Infrastructure (PKI) Services
Security Server
Together with Net Authentication Service of Security Server, provides greater than
Network
64-bit encryption. Supports TDES encryption algorithm.
Authentication
Service Level 3
System SSL Security
Together with System SSL base Cryptographic Services, provides greater than 64-
Level 3
bit encryption. Supports RC2/RC4, TDES and Advanced Encryption Standard (AES)
encryption algorithms.
Analysis
To take advantage of the z/990 z/Architecture and still support the older ESA/390 architecture, z/OS v.1.4
and the next version v.1.5 (projected to be released in early 2004) will provide simulations or dual paths.
As of release v.1.6 (projected release date: September 2004), IBM will no longer support the ESA/390
architecture.
As of September 2004, IBM will no longer support OS/390 v.2.10. For the short term, users who are on
OS/390 version 2.10 can choose to move to z/OS 1.4 and continue running the operating system and all
applications in 31-bit mode on their established 31-bit System 390 hardware. IBM has extended the endof-service date for z/OS v.1.4 (and v.1.5) to March 2007. However, to avoid the risk of working with
unsupported systems, OS/390 users will eventually need to migrate from a 31-bit environment to full 64bit functionality before support ceases for the older hardware. Migrating code and applications that work
well in 31-bit mode can be difficult and typically will involve extensive testing. IBM provides migration
programs to ease the transition from 31- to 64-bit mode; these programs allow applications that don’t run
in 64-bit mode to be moved back to 31-bit mode while they are being fixed.
Thus, users running OS/390 version 2.10 on S/390 hardware have two routes to the 64-bit z/OS:
•
Move to 31-bit z/OS version 1.4 on their established hardware, then move to either z/800 or z/900
hardware and run z/OS in full 64-bit mode, with the option of switching back to 31-bit mode for the
first six months.
•
Move OS/390 version 2.10 in 31-bit mode to z/800 or z/900 hardware, then switch to 64-bit OS/390
version 2.10 and upgrade to full 64-bit z/OS.
To take full advantage of z/OS enhancements, users should consider migrating to z990. For example,
while the built-in workload manager (WLM) has been available for OS/390 for some time, its resource
management capability was limited to a single image. When z/OS is deployed together with the z990
Intelligent Recourse Director (IRD), users can group logical partitions that are resident on the same
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
7
IBM z/OS Operating System
physical server into an LPAR cluster and use WLM to manage processor and I/O resources across an
entire cluster of logical partitions.
Version 1.4 security enhancements also rely on built-in security features of z990 for their implementation.
ICSF uses the Peripheral Component Interconnect Extended Cryptographic Coprocessor (PCIXCC)
feature of z990 to support Secure Key data encryption and decryption. Likewise, it supports Clear Key
data encryption and decryption through the use of the Control Program Assist feature on z990 and SSL
acceleration via the Peripheral Component Interconnect Cryptographic Accelerator (PCICA) feature.
Pricing
Software charges for a z/OS system are determined by the choice of pricing model. For example, z/OS
running on a 2,500-million instructions per second (MIPS) system is approximately $1,130,000 per year.
This price is based on a Workload License Charge for a 15-way 2064-115, 2,490 MIPS and 426 million
service units (MSUs). The equivalent Parallel Sysplex License Charge is $1,374,000 per year.
Under the Workload License Charge (WLC) pricing model, z/OS software charges can be based on
workload capacity requirements, not the full capacity of the machine if the customer chooses to use the
LPAR Use Model (known as “subcapacity WLC”). With this option, capacity added for new workloads in a
new LPAR will have no affect on charges for established or stable workloads. When capacity is added to
an existing workload, charges are increased for that workload’s LPAR only. This allows users to reserve
hardware capacity for future increases in capacity while only paying for what is currently being used.
Users can license as little as three MSUs of software capacity, yet reserve additional without an additional
license. Full z/Architecture and using the Subcapacity Reporting Tool (SCRT) are prerequisites for the
LPAR Use Model under WLC.
For its zSeries servers, IBM provides, at no charge, the SCRT that analyzes a month of data for zSeries
central processor complexes (CPCs). From this analysis, SCRT produces a subcapacity report that is
used to determine the required license capacity (in MSUs) of each eligible Variable WLC product running
on a zSeries CPC. Under subcapacity WLC, users can be charged for less than the full capacity of the
CPC on which the products run. For example, the charge for z/OS is based on the highest observed fourhour rolling average use of LPARS, as measured by SCRT.
IBM also offers z/OS.e, a specially priced version of the operating system, specifically designed to
accommodate new e-business applications on z800 machines. Internally, z/OS.e 1.4 has all of the base
elements of z/OS v.1.4, but not all those elements are functional or licensed for use or both. Additionally,
some optional features available for z/OS are not available to z/OS.e. Priced at about 10 percent of the
cost of a full-function z/OS, z/OS.e makes deploying new enterprise or e-business applications on a
zSeries server a viable alternative to high-end Unix/Windows systems.
GSA Pricing
Yes.
Competitors
Other mainframe operating system providers include Unisys in the United States and European vendors
Fujitsu Siemens Computers (FSC) and Bull. In the low-to-midrange mainframe market (less than 1,000
MIPS), z/OS competes with high-end Unix and Wintel-based systems from Sun, Hewlett-Packard and
Dell.
Mainframe outsourcing is another alternative that mainframe customers are choosing for the long term or
as an interim step in migrating off the mainframe altogether.
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
8
IBM z/OS Operating System
Strengths
•
64-bit addressing support for workloads with large memory requirements
•
HiperSockets for interpartition communications
•
Dynamic Virtual Internet Protocol Addressing (VIPA) for intelligent load balancing of TCP/IP traffic
across a Parallel Sysplex cluster
•
Z/OS Workload pricing, which bases software charges on the use of one or more LPARs, not the
total capacity installed in the server
•
Self-configuring via wizards, msys for Setup and Health Checker
•
Self-healing via msys for Operations; fast data recovery with System-Managed Coupling Facility (CF)
Structure Duplexing
•
Support for Advanced cryptography for SSL, PKI and Enterprise Identity Mapping
Limitations
•
OS/390 users risk running an unsupported system if migration to z/OS is delayed — support for
release v.2.10 of OS/390 ends September 2004. Support for all earlier releases of OS/390 has
already been discontinued.
•
Fallback/coexistence support — only z/OS v.1.4 provides fallback and coexistence support for
OS/390, and this support is limited to OS390 v.2.10. z/OS 1.4 is the last release of z/OS that OS/390
users will be able to migrate to in a single step.
•
ISVs’ shrinking application mainframe portfolio — few new applications are being developed for z/OS,
and many older ISV programs are not being upgraded.
•
Shrinking pool of skilled mainframe systems personnel — majority of current workforce is nearing
retirement age, while the majority of new IT workers are being trained in Windows and Unix.
To address some of these issues, z/OS provides a step-by-step installation guide and automated system
updates. z/OS’s Managed Systems Infrastructure for Setup provides a GUI for establishing a Parallel
Sysplex cluster that transparently creates the policies, parmlib specifications and initialization parameters
necessary to configure a basic Parallel Sysplex environment. Also provided are Security Planner and
SystemPac. Security Planner is a Web-based network security policy-planning tool for IBM eserver
platforms. It includes recommendations for network architecture, firewall technologies, TCP/IP security
and intrusion detection. SystemPac is designed to help users with limited skill to install or upgrade a z/OS
system.
Insight
IBM mainframe users must weigh the costs of delaying full deployment to 64-bit z/OS against the benefits
of migration. To get the full benefit of their investment, users committed to the zSeries hardware should
plan a migration to 64-bit z/OS in the near term. G5/G6 users should plan their migration to 64-bit before
support for OS/390 v.2.10 is scheduled to end in September 2004.
© 2003 Gartner, Inc. and/or its Affiliates. All Rights Reserved.
DPRO-96040
27 August 2003
9