IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 39

additional CP commands that will be made available are designed to alter CP or real hardware resources, such as CPUs or I/O devices, and may affect the security and integrity of the system as a whole. IBM designed z/VM privilege classes with the organizational hierarchy of a typical computing installation in mind. If the privilege classes IBM has assigned to each command and function don’t meet the needs of a particular installation, the system administrator can change them. It’s possible to define up to 32 privilege classes that partly or completely override the default privilege-class structure. In this way, a virtual server can be given access to a specific subset of privileged commands and functions without giving access to all other CP commands and functions that are, by default, in the same privilege class. A z/VM customer can add an external security manager (ESM) product—such as the RACF* Security Server feature for z / V M—to aug me nt C P’s nat i ve security capabilities. The ESM offloads many security functions to a separate subsystem, allowing the administrator to i mplement va r iou s acce s s r u le s and groups and simplify user administration. It provides more granular authorization and auditing capabilities than are available without an ESM. IBM recommends all z/VM customers obtain and use the ESM of their choice. discretion, disclose the information to individuals, institutions or organizations it determines have a legitimate need to know about them. T he I BM com m it me nt to r e solve s y s t e m - i n t e g r i t y p r o b l e m s i s n’ t just “wishf ul thinking.” To suppor t it, IBM publishes a System Integrit y Statement for z/ V M in t he product documentation (see page 36). z/VM V5R3 with the RACF Security Server feature was awarded a Common Criteria certification in July 2008. This assures customers z/V M was evaluated and determined to conform to the Controlled Access Protection Profile (CAPP) and Labeled Security Protection Profile (LSPP) of the Common Criteria standard for IT security, ISO/IEC 15408, at Evaluation Assurance Level 4+ (EAL4+). Included in the certification, was an evaluation of IBM’s z/VM Secure Configuration Guide, SC24-6139. z / V M is specif ica l ly designed to provide a virtual server environment. Virtual servers aren’t an afterthought of OS design, or some sor t of graf t on another OS. For four decades, IBM’s z/VM has provided a secure, reliable, stable operating environment. Alan Altmark is the IBM security architect for z/VM development based in Endicott, N.Y. Alan can be reached at Alan_Altmark@us.ibm.com. A Matter of Trust IBM has developed and improved the virtual-ser ver technology contained within z/VM for more than 40 years. As a direct result of this commitment, the chance of a new integrity or security exposure being identified is extremely small. But, in the event an integrity or securit y exposure is identified, IBM i s c om m i t t e d to r e a c t q u i c k l y to address the problem. As a matter of policy, I BM doesn’t disclose details of integrity or security defects to the general public, though it may, at its M AY/J U N E 2 0 0 8 ibms ystemsmag .com/mai nframe 39

IBM Systems Magazine, Mainframe digital edition - May/June 2009

Table of Contents for the Digital Edition of IBM Systems Magazine, Mainframe digital edition - May/June 2009

IBM Systems Magazine, Mainframe digital edition - May/June 2009
Table of Contents
Editor's Desk:  High-Flying Security
Trends:  IBM Cognos 8 BI for Linux on System z Makes Reliable Data Available Anywhere
IT Today:  New System x and BladeCenter Servers Help Your Organization Reach Its Goals
Focus on Storage: Virtual Tape Facility for MainframeJoins IBM Arsenal
Q & A:  Hybrid Technology Takes Supercomputing Beyond Moore’s Law
Case Study:  The City and County of Honolulu Allows Its Applications to Dictate the Platforms on Which They Run
Cover Story:  IBM’s z/VM is a Proven Solution for Today’s IT Environments
Feature:  IBM’s Dynamic Infrastructure Helps Companies Reduce Costs, Manage Risks and Improve Services
Administrator:  DB2 9 Features Help Ensure Compliance
Product News
Advertiser Index
Stop Run:  Barry Merrill’s Accidental DiscoveriesEnhance the Mainframe
Reference Point
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - IBM Systems Magazine, Mainframe digital edition - May/June 2009
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Cover2
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 1
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Table of Contents
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 3
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 4
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 5
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 6
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 7
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Editor's Desk:  High-Flying Security
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 9
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Trends:  IBM Cognos 8 BI for Linux on System z Makes Reliable Data Available Anywhere
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 11
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 12
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 13
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - IT Today:  New System x and BladeCenter Servers Help Your Organization Reach Its Goals
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 15
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 16
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 17
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 18
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 19
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Focus on Storage: Virtual Tape Facility for MainframeJoins IBM Arsenal
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 21
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 22
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 23
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Q & A:  Hybrid Technology Takes Supercomputing Beyond Moore’s Law
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 25
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 26
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 27
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Case Study:  The City and County of Honolulu Allows Its Applications to Dictate the Platforms on Which They Run
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 29
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 30
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 31
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Cover Story:  IBM’s z/VM is a Proven Solution for Today’s IT Environments
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 33
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 34
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 35
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 36
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 37
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 38
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 39
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Feature:  IBM’s Dynamic Infrastructure Helps Companies Reduce Costs, Manage Risks and Improve Services
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 41
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 42
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 43
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 44
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 45
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 46
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 47
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Administrator:  DB2 9 Features Help Ensure Compliance
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 49
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 50
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 51
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Product News
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 53
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - 54
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Advertiser Index
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Stop Run:  Barry Merrill’s Accidental DiscoveriesEnhance the Mainframe
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Cover3
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Cover4
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - Reference Point
IBM Systems Magazine, Mainframe digital edition - May/June 2009 - RF2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20191112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/relevantz_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2019mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20181112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2018mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20171112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_sesupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_linuxsupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20161112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/MainframeSecurity
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20151112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910_se
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910
http://www.ibmsystemsmagmainframedigital.com/MFSkills
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506_supp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20141112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_gt_201405
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/BigData
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20131112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20121112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/buyersguide2013
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/ibmsystems_mainframe_2012bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20111112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20101112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910_bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20091112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090506
http://www.nxtbook.com/nxtbooks/ibmsystemsmag/mainframe_20090304
http://www.nxtbook.com/nxtbooks/mspcomm/ibmsystems_mainframe_200901
http://www.nxtbookMEDIA.com