z/OSMF Overview
10th March, 2020
© 2018 IBM Corporation
Agenda
§ What’s z/OSMF
§ How does z/OSMF fit in your environment
§ z/OSMF configuration
§ z/OSMF portfolio
§Plugins with UI (Demo)
§Workflow
§Cloud Provisioning
§RESTful services
2 IBM Systems
What’s z/OSMF
§ The IBM z/OS Management Facility is a
part of z/OS since V2R2 that provides
support for a modern, Web-browser
based management console for z/OS.
Since V2R3, z/OSMF can be started by
default during IPL.
§ It helps system programmers more
easily manage and administer a
mainframe system by simplifying day to
day operations and administration of a
z/OS system.
§ More than just a graphical user
interface, the z/OS Management Facility
is intelligent, addressing the needs of a
diversified skilled workforce and
maximizing their productivity.
§ Automated tasks can help reduce the
learning curve and improve productivity.
§ Embedded active user assistance (such as
wizards) guide you through tasks and helps
provide simplified operations.
3 IBM Systems
Agenda
§ What’s z/OSMF
§ How does z/OSMF fit in your environment
§ z/OSMF configuration
§ z/OSMF portfolio
§Plugins with UI (Demo)
§Workflow
§Cloud Provisioning
§RESTful services
4 IBM Systems
How does z/OSMF fit in your environment
IBM 64-bit SDK for z/OS
Java Technology Edition V8
§ The z/OS Management Facility applications run on the z/OS enabling you to manage z/OS from
z/OS
► Information is presented on a PC using a browser
§ The z/OS Management Facility requires:
► TCP/IP
► CEA
► SAF
► IBM 64-bit SDK for z/OS Java Technology Edition V8
► Other components are required for specific z/OSMF plug-ins
5 IBM Systems
Agenda
§ What’s z/OSMF
§ How does z/OSMF fit in your environment
§ z/OSMF configuration
§ z/OSMF portfolio
§Plugins with UI (Demo)
§Workflow
§Cloud Provisioning
§RESTful services
6 IBM Systems
z/OSMF configuration overview
• Process overview
• Configure z/OSMF base
• Setup security
• Create z/OSMF data file system
• Optionally, configuring z/OSMF parmlib options
• Start z/OSMF server
• Access the z/OSMF welcome page
• Add z/OSMF optional plugin
• Customize z/OS system
• Set up security
• Update z/OSMF parmlib
• Please refer to <z/OSMF Configuration Guide> for details
https://www.ibm.com/support/knowledgecenter/SSLTBW_2.4.0/com.ibm.zos.v2r4.izua300/abstract.htm
7 IBM Systems
Configure z/OSMF base – setup security
► Setting up Security
• Run SAMPLIB(IZUSEC)
– You may need to modify the sample job to either:
♦ Conform to installation standards
♦ Uncomment out definitions based on your existing security environment
• If your installation uses a security management product other than RACF, do not use
the SAMPLIB member
– Instead, you can obtain sample from Broadcom for ACF/2 and Top Secret
products
– See Appendix A in the z/OSMF Configuration Guide for a list of resources, groups,
IDs, and authorizations that need to be defined to your security product
► With z/OS 2.4, z/OSMF provides simplified security configuration
called z/OSMF Lite
● Additional security jobs need to be run to enable each z/OSMF plugin
► With z/OS 2.4, z/OSMF provides “Security Assistant” plugin that helps
resolving missing security configuration
8 IBM Systems
Configure z/OSMF base – create data file system
• Creating the z/OSMF data file system
• Run a modified SAMPLIB(IZUMKFS)
• You must select a volume for this allocation.
• By default the filesystem data set name is IZU.SIZUUSRD
• If you want to change the data set name, it needs to be changed in three (3) steps:
DEFINE, CREATE, and MOUNT
• With z/OS 2.3, default mountpoint is /global/zosmf
• It is recommended that you give the z/OSMF file system sysplex-wide scope
– By default, the job mounts the user directory at a shared mount point.
♦ /global/zosmf
– If you change the default mountpoint, you will have to change all references of
/global/zomsf in z/OSMF parmlib also (e.g. IZUPRM00).
9 IBM Systems
Configure z/OSMF base – configure z/OSMF parmlib
• Optionally, Configuring z/OSMF parameters
§ Create one or more IZUPRMxx parmlib members that you want to use
HOSTNAME(’*’)
HTTP_SSL_PORT(443)
1. Specify values only for those defaults
INCIDENT_LOG UNIT(’SYSALLDA’) that you want to override (that is, omit
JAVA_HOME(’&JAVA80_HOME’) /* System symbol used to define Java home directory */
KEYRING_NAME(’IZUKeyring.IZUDFLT’)
any statement for which the default
LOGGING(’*=warning:com.ibm.zoszmf.*=info:com.ibm.zoszmf.environment.ui=finer’) value is acceptable).
RESTAPI_FILE ACCT(IZUACCT) REGION(32768) PROC(IZUFPROC) 2. Options of z/OSMF base are in blue
/* Common TSO logon proc, account, and region size, used by all plug-ins by default. */
COMMON_TSO ACCT(IZUACCT) REGION(50000) PROC(IZUFPROC) color
SAF_PREFIX(’IZUDFLT’)
CLOUD_SAF_PREFIX (’IYU’)
SEC_GROUPS USER(IZUUSER),ADMIN(IZUADMIN),SECADMIN(IZUSECAD)
SESSION_EXPIRE(495)
TEMP_DIR(’/tmp’)
CSRF_SWITCH(ON)
SERVER_PROC(IZUSVR1)
ANGEL_PROC(IZUANG1)
AUTOSTART(LOCAL)
AUTOSTART_GROUP(’IZUDFLT’)
USER_DIR(‘/global/zosmf’)
UNAUTH_USER(IZUGUEST)
WLM_CLASSES DEFAULT(IZUGHTTP)
LONG_WORK(IZUGWORK)
/* Uncomment the following statement and any plugins that are desired */
/* PLUGINS( INCIDENT_LOG,COMMSERVER_CFG,WORKLOAD_MGMT,RESOURCE_MON,
CAPACITY_PROV,SOFTWARE_MGMT,SYSPLEX_MGMT,ISPF ) */
§ Specify which z/OSMF parmlib to use during IPL by adding IZU={xx|(xx,…,zz)} in IEASYSxx
10 IBM Systems
Configure z/OSMF base – start z/OSMF server
§ z/OSMF server consists of two process: angel process and server
process.
§ To start the z/OSMF server manually, you can enter the START
command from the operator console.
§ The START command specifies the procedure name to start and,
optionally, the job name to use. For example:
● START IZUANG1,JOBNAME=jobname
● START IZUSVR1,JOBNAME=jobname,IZUPRM=‘(xx,yy)’,SERVER=AUTOSTART|STANDALONE
– You ONLY need the IZUPRM parameter if you want to point to one or more IZUPRMxx
PARMLIB members for configuration values
§ Start the tasks in the following sequence: IZUANG1 followed by
IZUSVR1.
● Otherwise, z/OSMF users might encounter authorization errors later when they attempt to log in
to z/OSMF.
§ NEXT IPL might also start z/OSMF depends on the IZUPRMxx specified
in IEASYSxx
11 IBM Systems
Accessing the z/OSMF welcome page
§ At the end of the z/OSMF configuration process, you can verify the
results of your work by opening a web browser to the Welcome page.
§ The URL for the Welcome page has the following format:
► https://hostname:port/zosmf/
where:
● hostname is the hostname or IP address of the system in which z/OSMF is
installed
● port is the secure application port for the z/OSMF configuration. port is optional.
If you specified a secure port for SSL encrypted traffic during the configuration
process (through variable IZU_HTTP_SSL_PORT), that value is required to log
in. Otherwise, it is assumed that you are using port 443, the default.
§ To find the URL, see message IZUG349I, which was written to the job
log file when IZUSVR1 was started.
IZUG349I: The z/OSMF Server home page can be accessed at
: https://ALPS4142.POK.IBM.COM/zosmf
: after the z/OSMF server is started on your system.
12 IBM Systems
Add z/OSMF optional plugins
§ Customize z/OS system (optional for some plugins)
§ Setup security
§ Update z/OSMF parmlib
PLUGINS(INCIDENT_LOG,
COMMSERVER_CFG,
WORKLOAD_MGMT,
RESOURCE_MON,
CAPACITY_PROV,
SOFTWARE_MGMT,
ISPF,
SYSPLEX_MGMT)
§ Restart z/OSMF server
13 IBM Systems
Other considerations for z/OSMF configuration
§ One z/OSMF instance is usually sufficient for one Sysplex
§ One z/OSMF instance per JES MAS will be needed if there are multiple JES MAS in
a Sysplex.
§ You can setup a backup z/OSMF instance in a sysplex to provide
continuous availability
§ The backup z/OSMF instance should not be active simultaneously with primary
z/OSMF
§ The z/OSMF data file system is recommended to be mounted at a
shared mount point such that the primary z/OSMF and the backup
z/OSMF can share same data file system.
14 IBM Systems
Agenda
§ What’s z/OSMF
§ How does z/OSMF fit in your environment
§ z/OSMF configuration
§ z/OSMF portfolio
§Plugins with UI (Demo)
§Workflow
§Cloud Provisioning
§RESTful services
15 IBM Systems
Notifications
§ Supports sending/receiving notification
§ Supports z/OSMF internal notification, Email notification
16 IBM Systems
Network Configuration Assistant
§ Provides assistance in configuring TCP/IP networking policies
§ The only supported UI client for z/OS Communication Server
17 IBM Systems
z/OS Operator Consoles
• Provides web-browser based interface to work with z/OS console:
• Console overview of local sysplex
• Console summary view and Console view
• Issue command and get command response
• Search
• Filter
• Automatically retrieve message help from Knowledge Center on z/OS
• Retrieve historic messages from OPERLOG or SYSLOG
• REST APIs are also provided
18 IBM Systems
z/OS Operator Consoles
19 IBM Systems
SDSF (1/2)
• Provides graphic and browser based interface to work with SDSF:
20 IBM Systems
SDSF (2/2)
21 IBM Systems
Links
• Provides centralized place for shared links
22 IBM Systems
Capacity Provisioning
• Provides browser based interface to manage z/OS CPM component which is used to dynamically manage
capacity based on On/Off Capacity On Demand feature
• The only supported client of z/OS CPM component
23 IBM Systems
Resource Monitoring
• Provides browser based interface to monitor performance metrics which are retrieved from z/OS RMF Monitor
III
24 IBM Systems
Workload Management
• Provides browser based interface to manage z/OS WLM policy
• Covers full functionality of ISPF WLM panel as well as additional functions like policy preview, one click print,
linkage to RMF.
25 IBM Systems
Incident Log (1/2)
• Facilitates problem data management tasks for new or less skilled system
programmers and system administrators
• Monitor dump related incident cross sysplex
• Automatically capture diagnostic data such as dump data set, OPERLOG, etc.
• View diagnostic data
• Provide wizard help with packaging and sending diagnostic data to IBM support
team.
• Allow search APAR based on incident symptom
26 IBM Systems
Incident Log (2/2)
27 IBM Systems
Software Management (1/2)
• Provides the software deployment functions along with additional software
management functions via a set of reports
28 IBM Systems
Software Management (2/2)
• Provides the software deployment functions along with additional software
management functions via a set of reports
29 IBM Systems
Sysplex Management (1/5)
• Provides graphic view to manage sysplex
• Sysplex Topology View
• Sysplex Physical View
• Sysplex CF Structure View
• Sysplex CF Connectivity View
30 IBM Systems
Sysplex Management (2/5)
31 IBM Systems
Sysplex Management (3/5)
32 IBM Systems
Sysplex Management (4/5)
33 IBM Systems
Sysplex Management (5/5)
34 IBM Systems
Web ISPF
• Provides browser based ISPF interface
35 IBM Systems
Agenda
§ What’s z/OSMF
§ How does z/OSMF fit in your environment
§ z/OSMF configuration
§ z/OSMF portfolio
§Plugins with UI (Demo)
§Workflow
§Cloud Provisioning
§RESTful services
36 IBM Systems
Agenda
§ What’s z/OSMF
§ How does z/OSMF fit in your environment
§ z/OSMF configuration
§ z/OSMF portfolio
§Plugins with UI (Demo)
§Workflow
§Cloud Provisioning
§RESTful services
37 IBM Systems
Agenda
§ What’s z/OSMF
§ How does z/OSMF fit in your environment
§ z/OSMF configuration
§ z/OSMF portfolio
§Plugins with UI (Demo)
§Workflow
§Cloud Provisioning
§RESTful services
38 IBM Systems
Why RESTful services?
§ z/OSMF RESTful services are based on HTTP:
§ Easy to call
§ Could be driven remotely (via HTTPS) and securely
§ Language and platform independent
§ Exploiters could be anyone who can issue HTTP requests:
- Web application
- Stand alone application
- Mobile App
39 IBM Systems
z/OSMF REST services *
-- z/OS jobs service
-- z/OS data set and file service
-- z/OSMF workflow service
-- z/OS Cloud Provisioning and Management
-- Application Linking Manager interface service
-- TSO/E address space service
-- Data persistence service
-- Topology service
-- Multisystem routing service
-- Software Management service
-- Notification service
-- z/OS Operator Consoles services
Please refer to <z/OS Management Facility Programming Guide> for details:
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.izu
a700/toc.htm
40 IBM Systems
z/OSMF REST services Swagger Documentation
41 IBM Systems
z/OSMF REST services Swagger Documentation
42 IBM Systems
z/OSMF REST service example (1/2)
§ z/OS jobs service – List jobs you owned
43 IBM Systems
z/OSMF REST service example (2/2)
§ z/OS data set and file service – List data sets for “SYS1.*lib”
44 IBM Systems
Thanks!
45 IBM Systems
