IBM Security zSecure Suite 2.5 delivers expanded automated ...

IBM United States Software Announcement221-274, dated July 27, 2021

IBM United States Software Announcement 221-274 IBM is a registered trademark of International Business Machines Corporation 1

IBM Security zSecure Suite 2.5 delivers expandedautomated compliance checking and access monitoringfor UNIX files and z/OS program checkingTable of contents

1 Overview 6 Technical information2 Key requirements 7 Ordering information2 Planned availability date 17 Terms and conditions3 Description 22 Prices5 Program number 23 Order now6 Publications

At a glance

IBM SecurityTM zSecure Suite 2.5 improvements can help your organization accruethe following benefits:

• Strengthen your enterprise security position to better demonstrate compliancewith regulations

• Automate and enhance near real-time security intelligence analytics and alerts

• Deliver digital trust with identity governance to help organizations understand,control, and make business decisions that are related to user access and accessrisks

• Increase security of cloud and mobile applications

• Use the inherent security advantages offered by mainframes (including pervasiveencryption) for enhanced data protection

Overview

Security zSecure Suite consists of products that offer security administration,auditing, and compliance.

Security zSecure Suite 2.5 delivers the following new functions:

• Support for the new RACF(R) option to store its database in a Virtual StorageAccess Method (VSAM) linear data set

• Support for certificate fingerprints

Security zSecure Suite 2.5 delivers new and enhanced capabilities for compliancechecking. These capabilities can help improve Security Technical ImplementationGuide (STIG) support, including new compliance controls for CA Access ControlFacility 2 (ACF2). The IBM(R) zSecure Audit Compliance Framework and its userinterface are extended further.

Security zSecure Suite 2.5 delivers the following additional capabilities:

• Enhanced Access Monitor support for UNIX(R) file access checks, z/OS(R) PROGRAMchecks, and local RACLIST FASTAUTH processing in subsystems

• Improved IBM System Management Facility (SMF) processing, real-time SecurityInformation and Event Management (SIEM) feed, and alerts


• Additional capabilities for IBM z/OS Connect event audit and correlating events inIBM Db2(R), IBM CICS(R), and z/OS Connect

• Extended IBM MQSeries(R) parameters for compliance checking and display withchannel authentication records and authentication information records

• Extended set of PARMLIB parameters available for compliance checking

• Enhanced compliance checking to syslog daemon, inet daemon, and ssh daemonparameters, IBM Job Entry Subsystem (JES2) devices, JES2 remote terminals, IBM CL/Supersession, and BMC INCONTROL

Security zSecure Suite consists of the following components and solution packages:

• zSecure Admin, which provides efficient and effective RACF administration.

• zSecure Visual, which provides a MicrosoftTM WindowsTM-based user interface forRACF administration.

• zSecure Audit, which provides vulnerability analysis for the mainframeinfrastructure and enables analyzing and reporting on security events anddetecting security exposures. The zSecure Audit Compliance Framework is a partof zSecure Audit.

• zSecure CICS Toolkit, which enables RACF administration from a CICSenvironment.

• zSecure Alert, which provides a near real-time event monitor that can send outalerts in various ways.

• zSecure Command Verifier, which helps enforce compliance by preventingerroneous security commands.

• zSecure Adapters for SIEM, which provides a subset of the functionality ofzSecure Audit for the express purpose of feeding enriched security events into anSIEM solution, such as IBM QRadar(R) SIEM or Micro Focus ArcSight.

• The following solution packages are available:

– zSecure Administration, which consists of zSecure Admin and zSecure Visual

– zSecure Audit and Compliance, which consists of zSecure Audit, zSecure Alert,and zSecure Command Verifier

– zSecure Audit and Administration, which encompasses the components ofzSecure Administration and zSecure Audit and Compliance solution packages

Support for External Security Managers by the various product components is asfollows:

Component RACF CA ACF2 CA Top Secret

zSecure Admin Yes No No

zSecure Audit Yes Yes Yes

zSecure Alert Yes Yes No

zSecure CommandVerifier

Yes No No

zSecure Visual Yes No No

Note: All components listed run on z/OS, and zSecure CICS Toolkit runs underCICS.

Key requirements

An IBM Z(R) server that is capable of supporting IBM z/OS 2.3, or later.

Planned availability date

September 30, 2021


Description

In support of new functionality that is provided in z/OS 2.5, Security zSecure Suite2.5 delivers the following:

• Support for enhanced security and data protection. These enhancements aredesigned to improve management of access and privileges in RACF 2.5 and IBMIntegrated Cryptographic Service Facility (ICSF) HCR77D2.

• Support for new general resource names protected in RACF and CA ACF2.

• Support for new ICSF policy settings and master key age.

• Support for new audit trail data in SMF; for instance, certificate fingerprints, newoperator command, and more ICSF events.

Compliance enhancements include:

• Support for STIGs enhanced with new compliance controls for CA ACF2, and thecapability to improve performance substantially.

• Support for MQSeries parameters for compliance checking and display withchannel authentication records and authentication information records.

• Extended set of PARMLIB parameters available for compliance checking.

• Enhanced compliance checking to include syslog daemon, inet daemon, sshdaemon, JES2 devices, JES2 remote terminals, CL/SuperSession, CA-1, CA-MIM,and BMC INCONTROL security parameters and policy profiles.

• zSecure Audit Compliance Framework and its new user interface featuremodifications, including the capability for future upgrades of configurationmembers to be made easier.

• Sensitivity specifications now applied to tape data sets.

• New alerts for logons from disallowed IP addresses and dynamic changes to theAPF list.

Additional enhancements and support include the following:

• zSecure Admin Access Monitor component is extended with z/OS UNIX file accesschecks, z/OS PROGRAM checks, and local RACLIST FASTAUTH processing insubsystems.

• SMF processing is extended, including for z/OS Connect, ssh events, andadditional Db2 IFCids and fields.

• Additional capabilities are added for correlating events in Db2, CICS, and z/OSConnect.

• Real-time SIEM feed is improved.

• Additional general IMS settings are reported on the region level.

• Additional capabilities are added to the user interface for selecting and reportingon certificates in RACF in new data sources, mentioned previously undercompliance enhancements.

• zSecure Command Verifier records additional actions in its command audit trail.This includes the creation of a profile, the use of modelling, and use of variousother keywords. The installation can furthermore choose to record the surrogateuser in the command audit trail for a command submitted by a surrogate user.zSecure Command Verifier has additional command replacement functions anda default value policy for the installation data. Additional messages are issued toassist with diagnosis of missing policy profiles that are required for the ControlledTemporary attributes.

• zSecure CICS Toolkit is extended with support for custom data fields for all RACFprofile types. This function is available for version 2.4 with the PTF for APAROA58802.

Accessibility by people with disabilities


Accessibility Compliance Reports (previously known as a VPAT) containing detailson accessibility compliance to standards, including the Worldwide Consortium WebContent Accessibility Guidelines, European Standard EN 301 349, and US Section508, can be found on the IBM Accessibility Conformance Report Request website.

Value Unit-based pricing

Value Unit pricing for eligible IBM Z IBM International Program License Agreement(IPLA) programs enables a lower cost of incremental growth and enterpriseaggregation. Each IBM Z IPLA product with Value Unit pricing has a single price perValue Unit and a conversion matrix, called Value Unit Exhibit, for converting fromsome designated measurement to Value Units. Most commonly, Millions of ServiceUnits (MSUs) is the measurement designated by IBM to be converted to Value Units.Some other measurements are engines or messages. Since MSUs are the mostcommon measurement, that measurement will be used for the remainder of thisdescription.

Value Unit pricing offers price benefits for you. For each IBM Z IPLA program withValue Unit pricing, the quantity of that program needed to satisfy applicable IBMterms and conditions is referred to as the required license capacity . Each of thevarious Value Unit Exhibits stipulate that the larger your required license capacity,the fewer Value Units per MSU you will need. Value Unit Exhibits are uniquelyidentified by a three digit code and referred to using the nomenclature VUExxx,where xxx is the three digit code.

Subsequent acquisitions of Value Unit priced programs offer additional price benefits.The quantity of each IBM Z IPLA program that you have acquired is referred to asentitled license capacity . If you wish to grow your entitled license capacity for anIBM Z IPLA program, the calculation to determine additional needed Value Units isbased upon the number of Value Units already acquired.

For each IBM Z IPLA program with Value Unit pricing, you should:

• Determine the required license capacity, in MSUs.

• Aggregate the MSUs across the enterprise.

• Convert the total MSUs to Value Units, using the applicable Value Unit Exhibit.

• Multiply the price per Value Unit by the total number of Value Units to determinethe total cost.

To simplify conversion from the designated measurement to Value Units or vice-versa, use the Value Unit Converter Tool. For additional information or to obtain acopy of the Value Unit Converter Tool, see the IBM Z Software Pricing website.

Note that Value Units of a given program cannot be exchanged, interchanged, oraggregated with Value Units of another program.

To determine the required license capacity for the IBM Z IPLA program you selected,see the Terms and conditions section.

Reference information

For more information about IBM Security zSecure, see:

• Software Announcement 221-116, dated March 9, 2021

• Software Announcement 219-370, dated July 23, 2019

• Software Announcement 218-349, dated July 17, 2018

Business Partner information

https://able.ibm.com/request/

http://www.ibm.com/zseries/swprice/vuctool

http://www.ibm.com/common/ssi/cgi-bin/ssialias?infotype=an&subtype=ca&appname=gpateam&supplier=897&letternum=ENUS221-116




If you are a Direct Reseller - System Reseller acquiring products from IBM, you maylink directly to Business Partner information for this announcement. A PartnerWorldID and password are required (use IBMid).

BP Attachment for Announcement Letter 221-274

Program number

Program name VRM Program number

IBM Security zSecureAdmin

2.5.0 5655-N16

IBM Security zSecureAudit

2.5.0 5655-N17

IBM Security zSecure CICSToolkit

2.5.0 5655-N18

IBM Security zSecureCommand Verifier

2.5.0 5655-N19

IBM Security zSecureVisual

2.5.0 5655-N20

IBM Security zSecure Alert 2.5.0 5655-N21

IBM Security zSecureAdapters for SIEM

2.5.0 5655-AD8

IBM Security zSecureAdministration

2.5.0 5655-N23

IBM Security zSecureCompliance and Auditing

2.5.0 5655-N24

IBM Security zSecureCompliance andAdministration

2.5.0 5655-N25

IBM Security zSecure suite

Program PID number Subscription and Support PID number

5655-N16 5655-T03

5655-N17 5655-T04

5655-N18 5655-T06

5655-N19 5655-T08

5655-N20 5655-T10

5655-N21 5655-T12

5655-AD8 5655-AD9

IBM Security zSecure Compliance, Auditing, and Administration solutions

Program PID number Subscription and Support PID number

5655-N23 5655-SE4

5655-N24 5655-SE5

5655-N25 5655-SE6

Education support

IBM training provides education to support many IBM offerings. Descriptions ofcourses for IT professionals and managers can be found on the IBM Training andSkills website.

Call IBM training at 800-IBM-TEACH (426-8322) for catalogs, schedules, andenrollments.

Offering Information

https://www.ibm.com/partnerworld/mem/sla.jsp?num=221-274

http://www.ibm.com/services/learning/

http://www.ibm.com/services/learning/


Product information is available on the IBM Offering Information website.

Publications

Technical documentation can be found in IBM Security zSecure Suitedocumentation.

Services

Software Services

IBM Software Services has the breadth, depth, and reach to manage your servicesneeds. You can leverage the deep technical skills of the lab-based software servicesteam and the business consulting, project management, and infrastructure expertiseof the IBM Global Services team. Also, IBM extends the reach of IBM SoftwareServices through IBM Business Partners to provide an extensive portfolio ofcapabilities. IBM provides the global reach, intellectual capital, industry insight, andtechnology leadership to support a wide range of critical business needs.

To learn more about IBM Software Services, contact your Lab Services Sales orDelivery Leader.

Technical information

Specified operating environment

Hardware requirements

An IBM Z server capable of supporting IBM z/OS 2.3, or later.

Software requirements

Security zSecure Suite 2.5 and IBM Security zSecure Compliance and Administration2.5, IBM Security zSecure Compliance and Auditing 2.5, and IBM Security zSecureAdministration 2.5 solutions are supported in the following environments:

• z/OS 2.3

• z/OS 2.4

• z/OS 2.5

zSecure offerings that include features for CA ACF2 and CA Top Secret require CAACF2 R16 and CA Top Secret to be at R16 for those features to be effective.

Such information is provided subject to the following terms. IT system securityinvolves protecting systems and information through prevention, detection, andresponse to improper access from within and outside your enterprise. Improperaccess can result in information being altered, destroyed, misappropriated, ormisused, or can result in damage to or misuse of your systems, including for usein attacks on others. No IT system or product should be considered completelysecure and no single product, service, or security measure can be completelyeffective in preventing improper use or access. IBM systems, products, and servicesare designed to be part of a lawful, comprehensive security approach, which willnecessarily involve additional operational procedures, and may require othersystems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services areimmune from, or will make your enterprise immune from, the malicious or illegalconduct of any party.

http://www.ibm.com/common/ssi

https://www.ibm.com/docs/en/szs

https://www.ibm.com/docs/en/szs


IBM Support

IBM Support is your gateway to technical support tools and resources that aredesigned to help you save time and simplify support. IBM Support can help youfind answers to questions, download fixes, troubleshoot, submit and track problemcases, and build skills. Learn and stay informed about the transformation of IBMSupport, including new tools, new processes, and new capabilities, by going to the IBM Support Insider.

Planning information

Packaging

This offering is delivered through the internet as an electronic download from Shopz.There is no physical media.

Ordering information

Consult your IBM representative.

Value Unit exhibit VUE020

Level Minimum Maximum Value Units/MSU

Base 1 3 1

Tier A 4 45 0.15

Tier B 46 175 0.08

Tier C 176 315 0.04

Tier D 316 + 0.03

Charge metric

The charge metrics for these licensed products can be found in the following LicenseInformation documents:

Program identifier License Informationdocument title

License Informationdocument number

5655-N16 IBM Security zSecureAdmin V2.5.0

L-RSTR-BYAGZB

5655-N17 IBM Security zSecureAudit V2.5.0

L-RSTR-BYAH2K

5655-N18 IBM Security zSecureCICS Toolkit V2.5.0

L-RSTR-BYAHBG

5655-N19 IBM Security zSecureCommand Verifier V2.5.0

L-RSTR-BYAHCF

5655-N20 IBM Security zSecureVisual V2.5.0

L-RSTR-BYAHHG

5655-N21 IBM Security zSecureAlert V2.5.0

L-RSTR-BYAH4G

5655-N23 IBM Security zSecureAdministration V2.5.0

L-RSTR-BYAHJE

5655-N24 IBM Security zSecureCompliance and AuditingV2.5.0

L-RSTR-BYAHM5

5655-N25 IBM Security zSecureCompliance andAdministration V2.5.0

L-RSTR-BYAHKA

5655-AD8 IBM Security zSecureAdapters for SIEM V2.5.0

L-RSTR-BYAGXC

Select your language of choice and scroll down to the Charge Metrics section.Follow-on releases, if any, may have updated terms. See the License Informationdocuments website for more information.

https://www.ibm.com/support

https://www.ibm.com/support/insider

https://www.ibm.com/support/insider

https://www.ibm.com/client-tools/shopz

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAGZB

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAH2K

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHBG

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHCF

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHHG

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAH4G

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHJE

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHM5

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHKA

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAGXC

https://www.ibm.com/software/sla/sladb.nsf/search?OpenForm



Basic license

On/Off CoD

The following programs are eligible for On/Off CoD with a temporary use chargecalculated based on MSUs per-day usage.

IBM Security zSecure Admin V2.5 (5655-N16)

Entitlement identifier Description License option/Pricingmetric

S01791D zSecure Admin On/Off CoD, TemporaryUse Charge per MSUs perday

IBM Security zSecure Audit V2.5 (5655-N17 )


S01791P zSecure Audit RACF On/Off CoD, TemporaryUse Charge per MSUs perday

S01791R zSecure Audit ACF2 On/Off CoD, TemporaryUse Charge per MSUs perday

S01791S zSecure Audit Top Secret On/Off CoD, TemporaryUse Charge per MSUs perday

IBM Security zSecure CICS Toolkit V2.5 (5655-N18)


S01791W zSecure CICS Toolkit V2 On/Off CoD, TemporaryUse Charge per MSUs perday

IBM Security zSecure Command Verifier V2.5 (5655-N19)


S017920 zSecure Command VerifierV2

On/Off CoD, TemporaryUse Charge per MSUs perday

IBM Security zSecure Visual V2.5 (5655-N20)


S017923 zSecure Visual V2 On/Off CoD, TemporaryUse Charge per MSUs perday

IBM Security zSecure Alert V2.5 (5655-N21)


S01795P zSecure Alert RACF On/Off CoD, TemporaryUse Charge per MSUs perday

S01795R zSecure Alert ACF2 On/Off CoD, TemporaryUse Charge per MSUs perday

IBM Security zSecure Administration V2.5 (5655-N23)


S01796C Security zSecureAdministration



IBM Security zSecure Compliance and Auditing V2. 5 (5655-N24)


S01796G Security zSecure Com/AudV2


IBM Security zSecure Compliance and Administration V2.5 (5655-N25)


S01796K Security zSecure Com/AdV2


IBM Security zSecure Adapters for SIEM V2.5 (5655-AD8 )


S017KDW zSecure Adapters SIEMRACF


S017KF6 zSecure Adapters SIEMACF2


S017KF5 zSecure Adapters SIEMTop Secret


Translation from MSUs to Value Units

MSUs Value Units/MSU

Base 1-3 1.00

Tier A 4-45 0.15

Tier B 46-175 0.08

Tier C 176-315 0.04

Tier D 316 or greater 0.03

To order, specify the program ID number and the appropriate license or chargeoption.

Program name and number: IBM Security zSecure Admin (5655-N16)


S01791D zSecure Admin V2 Use-Based License One-Time Charge Value Units

Multi-VersionMeasurement, No Charge

Orderable supply ID Description Language

S01791G zSecure Admin V2 Multilingual

IBM recommends internet delivery. However, if you still require physical media, youcan choose DVD.

IBM Security zSecure Admin (5655-N16) : Subscription and Support SWS&S Program ID: (5655-T03)


S01471M zSecure Admin S&S SW S&S, Basic AnnualSupport Charge, per ValueUnit

Decline SW S&S, NoCharge



Multi-VersionMeasurement S&S, NoCharge

SW S&S Registration, NoCharge


S015T26 zSecure Admin S&S Multilingual

Program name and number: IBM Security zSecure Audit (5655-N17)


S01791P zSecure Audit RACF Use-Based License One-Time Charge Value Units


S01791R zSecure AuditACF2 Use-Based License One-Time Charge Value Units


S01791S zSecure Audit Top Secret Use-Based License One-Time Charge Value Units



S01791L zSecure Audit RACF Multilingual

S01791M zSecure Audit Top Secret Multilingual

S01791N zSecure Audit ACF2 Multilingual


IBM Security zSecure Audit (5655-N17) : Subscription and Support SW S&SProgram ID: (5655-T04)


S01471N zSecure Audit for RACFS&S

SW S&S, Basic AnnualSupport Charge, per ValueUnit




S01471P zSecure Audit for ACF2S&S





S01471R zSecure Audit for TopSecret S&S








S015TT2 zSecure Audit for RACFS&S

Multilingual

S015TT3 zSecure Audit for ACF2S&S

Multilingual

S015TT4 zSecure Audit for TopSecret S&S

Multilingual

Program name and number: IBM Security zSecure CICS Toolkit (5655-N18)


S01791W zSecure CICS Toolkit V2 Use-Based License One-Time Charge Value Units



S01791V zSecure CICS Toolkit V2 Multilingual


IBM Security zSecure CICS Toolkit (5655-N18) : Subscription and SupportSW S&S Program ID: (5655-T06)


S01472T zSecure CICS Toolkit S&S SW S&S, Basic AnnualSupport Charge, per ValueUnit





S015TP6 zSecure CICS Toolkit S&S Multilingual

Program name and number: IBM Security zSecure Command Verifier (5655-N19)


S017920 zSecure Command VerifierV2

Use-Based License One-Time Charge Value Units



S01791Z zSecure Command VerifierV2

Multilingual



IBM Security zSecure Command Verifier (5655-N19) : Subscription andSupport SW S&S Program ID: (5655-T08)


S01471V zSecure Command VerifierS&S






S015TPD zSecure Command VerifierS&S

Multilingual

Program name and number: IBM Security zSecure Visual (5655-N20)


S017923 zSecure Visual V2 Use-Based License One-Time Charge Value Units



S017922 zSecure Visual V2 Multilingual


IBM Security zSecure Visual (5655-N20) : Subscription and Support SWS&S Program ID: (5655-T10)


S014721 zSecure Visual S&S SW S&S, Basic AnnualSupport Charge, per ValueUnit





S015TPX zSecure Visual S&S Multilingual

Program name and number: IBM Security zSecure Alert (5655-N21)


S01795P zSecure Alert RACF Use-Based License One-Time Charge Value Units


S01795R zSecure Alert ACF2 Use-Based License One-Time Charge Value Units




S01795M zSecure Alert RACF Multilingual

S01795N zSecure AlertACF2 Multilingual


IBM Security zSecure Alert (5655-N21) : Subscription and Support SW S&SProgram ID: (5655-T12)


S014733 zSecure Alert for RACFS&S





S014736 zSecure Alert for ACF2S&S






S015TPZ zSecure Alert for RACFS&S

Multilingual

S015TR0 zSecure Alert for ACF2S&S

Multilingual

Program name and number: IBM Security zSecure Administration (5655-N23)


S01796C Security zSecure AdminV2




S01796B Security zSecure AdminV2

Multilingual


IBM Security zSecure Administration (5655-N23) : Subscription andSupport SW S&S Program ID: (5655-SE4)


S017172 Security zSecure AdminS&S








S017173 Security zSecure AdminS&S

Multilingual

Program name and number: IBM Security zSecure Compliance and Auditing(5655-N24)


S01796G Security zSecure Com/AudV2




S01796F Security zSecure Com/AudV2

Multilingual


IBM Security zSecure Compliance and Auditing (5655-N24) : Subscriptionand Support SW S&S Program ID: (5655-SE5)


S017178 Security zSecure Com/AudS&S






S017179 Security zSecure Com/AudS&S

Multilingual

Program name and number: IBM Security zSecure Compliance andAdministration (5655-N25)


S01796K Security zSecure Com/AdV2




S01796J Security zSecure Com/AdV2

Multilingual



IBM Security zSecure Compliance and Administration (5655-N25) :Subscription and Support SW S&S Program ID: (5655-SE6)


S017175 Security zSecure Com/Adm S&S






S017176 Security zSecure Com/Adm S&S

Multilingual

Program name and number: IBM Security zSecure Adapters for SIEM (5655-AD8)


S017KDW zSecure Adapters SIEMRACF

Basic One Time Charge,per Value Unit


S017KF5 zSecure Adapters SIEMTop Secret



S017KF6 zSecure Adapters SIEMACF2




S017KDV zSecure QRadar SIEMRACF

Multilingual

S017KF3 zSecure QRadar SIEM TopSecret

Multilingual

S017KF4 zSecure QRadar SIEMACF2

Multilingual


IBM Security zSecure Adapters for SIEM (5655-AD8) : Subscription andSupport SW S&S Program ID: (5655-AD9)


S017KF0 zSecure Adapt SIEM RACFS&S







S017KFC zSecure Adapt SIEM TopSecret S&S





S017KFD zSecure Adapt SIEM ACF2S&S






S017KDZ zSecure QRadar SIEMRACF

Multilingual

S017KFB zSecure QRadar SIEM TopSecret

Multilingual

S017KF9 zSecure QRadar SIEMACF2

Multilingual

Subscription and Support

To receive voice technical support by telephone and future releases and versions atno additional charge, Subscription and Support must be ordered. The capacity ofSubscription and Support (Value Units) must be the same as the capacity orderedfor the product licenses.

To order, specify the Subscription and Support program ID referenced above and theappropriate license or charge option.

IBM is also providing Subscription and Support for these programs with a separatelypurchased offering under the terms of the IBM International Agreement forAcquisition of Software Maintenance. This offering:

• Includes and extends the support services provided in the base support toinclude telephone technical support.

• Entitles you to future releases and versions, at no additional charge. Note thatyou are not entitled to new programs.

When Subscription and Support is ordered, the charges will automatically renewannually unless canceled by you.

The combined effect of the IPLA license and the Agreement for Acquisition ofSoftware Maintenance gives you rights and support services comparable to thoseunder the traditional ICA IBM Z license or its equivalent. To ensure that you continueto enjoy the level of support you are used to in the ICA business model, you mustorder both the license for the program and the support for the selected programs atthe same Value Unit quantities.

Customized Offerings

Product deliverables are shipped only through CBPDO and ServerPac. Thesecustomized offerings are offered for internet delivery. For more details on Internetdelivery, go to the Help section on the Shopz website.

http://www.software.ibm.com/ShopzSeries



Many products can be ordered in ServerPac the month following their availabilityin CBPDO. z/OS can be ordered through CBPDO and ServerPac on the plannedavailability date. Many products will also be orderable in a Product ServerPac withoutalso having to order the z/OS operating system or subsystem.

Shopz and CFSW will determine the eligibility based on product requisite checking.For more details on the Product ServerPac, go to the Help section on the Shopzwebsite.

Production of software product orders will begin on the planned availability date.

• CBPDO shipments will begin within 3 business days after the planned availabilitydate.

• ServerPac availability and shipments will begin within 3 - 4 weeks after theplanned product availability date due to additional customization and data inputverification.

Terms and conditions

The information provided in this announcement letter is for reference andconvenience purposes only. The terms and conditions that govern any transactionwith IBM are contained in the applicable contract documents such as the IBMInternational Program License Agreement, IBM International Passport Advantage(R)

Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

Licensing

IBM International Program License Agreement including the License Informationdocument and Proof of Entitlement (PoE) govern your use of the program. PoEs arerequired for all authorized use.

Software Maintenance

The following agreement applies for Software Subscription and Support (SoftwareMaintenance) and does not require client signatures:

• IBM Agreement for Acquisition of Software Maintenance (Z125-6011)

These programs are licensed under the IBM International Program LicenseAgreement (IPLA) and the associated Agreement for Acquisition of SoftwareMaintenance, which provide for support with ongoing access to releases and versionsof the program. These programs have a one-time license charge for use of theprogram and an annual renewable charge for the enhanced support that includestelephone assistance (voice support for defects during normal business hours), aswell as access to updates, releases, and versions of the program as long as supportis in effect. IBM Z Operational Support Services - SoftwareXcel is an option if youdesire added services.

License Information number

The following License Information documents apply to the offerings in thisannouncement:



5655-N16 IBM Security zSecureAdmin V2.5.0

L-RSTR-BYAGZB

5655-N17 IBM Security zSecureAudit V2.5.0

L-RSTR-BYAH2K

https://www.ibm.com/client-tools/shopz

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAGZB

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAH2K




5655-N18 IBM Security zSecureCICS Toolkit V2.5.0

L-RSTR-BYAHBG

5655-N19 IBM Security zSecureCommand Verifier V2.5.0

L-RSTR-BYAHCF

5655-N20 IBM Security zSecureVisual V2.5.0

L-RSTR-BYAHHG

5655-N21 IBM Security zSecureAlert V2.5.0

L-RSTR-BYAH4G

5655-N23 IBM Security zSecureAdministration V2.5.0

L-RSTR-BYAHJE

5655-N24 IBM Security zSecureCompliance and AuditingV2.5.0

L-RSTR-BYAHM5

5655-N25 IBM Security zSecureCompliance andAdministration V2.5.0

L-RSTR-BYAHKA

5655-AD8 IBM Security zSecureAdapters for SIEM V2.5.0

L-RSTR-BYAGXC

Follow-on releases, if any, may have updated terms. See the License Informationdocuments website for more information.

Limited warranty applies

Yes

Limited warranty

IBM warrants that when the program is used in the specified operating environment,it will conform to its specifications. The warranty applies only to the unmodifiedportion of the program. IBM does not warrant uninterrupted or error-free operationof the program or that IBM will correct all program defects. You are responsible forthe results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on knownprogram defects, defect corrections, restrictions, and bypasses at no additionalcharge. For further information, see the IBM Support Guide.

IBM will maintain this information for at least one year after the original licenseeacquires the program (warranty period).

Program technical support

Enhanced support

Technical support of a program product version or release will be available for aminimum of five years from the planned availability date, as long as your SoftwareSubscription and Support is in effect.

This technical support allows you to obtain assistance (by telephone or electronicmeans) from IBM for product-specific, task-oriented questions regarding theinstallation and operation of the program product. Software Subscription andSupport also provides you with access to updates (modifications or fixes), releases,and versions of the program. You will be notified, through an announcement letter,of discontinuance of support with 12 months' notice.

If you require additional technical support from IBM, including an extension ofsupport beyond the discontinuance date, contact your IBM representative or IBMBusiness Partner. This extension may be available for a fee.

For additional information on the IBM Software Support Lifecycle Policies, see theStandard and enhanced IBM software support lifecycle policies website.

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHBG

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHCF

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHHG

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAH4G

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHJE

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHM5

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAHKA

http://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-RSTR-BYAGXC



http://www.ibm.com/support/customercare/sas/f/handbook/home.html

http://www.ibm.com/software/support/lifecycle/lc-policy.html


Money-back guarantee

If for any reason you are dissatisfied with the program and you are the originallicensee, you may obtain a refund of the amount you paid for it, if within 30 days ofyour invoice date you return the program and its PoE to the party from whom youobtained it. If you downloaded the program, you may contact the party from whomyou acquired it for instructions on how to obtain the refund.

For clarification, note that for programs acquired under any of IBM's On/Off Capacityon Demand (On/Off CoD) software offerings, this term does not apply since theseofferings apply to programs already acquired and in use by you.

Volume orders (IVO)

No

Passport Advantage applies

No

Software Subscription and Support applies

Yes. During the Software Subscription and Support period, for the unmodifiedportion of a program, and to the extent problems can be recreated in the specifiedoperating environment, IBM will provide the following:

• Defect correction information, a restriction, or a bypass.

• Program updates: Periodic releases of collections of code corrections, fixes,functional enhancements and new versions and releases to the program anddocumentation.

• Technical assistance: A reasonable amount of remote assistance by telephoneor electronically to address suspected program defects. Technical assistance isavailable from the IBM support center in the organization's geography.

Additional details regarding Technical Assistance, which includes IBM contactinformation, are provided in the IBM Support Guide.

Software Subscription and Support does not include assistance for:

• The design and development of applications.

• Your use of programs in other than their specified operating environment.

• Failures caused by products for which IBM is not responsible under the IBMAgreement for Acquisition of Software Maintenance.

Software Subscription and Support is provided only if the program is within itssupport timeframe as specified in the Software Support Lifecycle policy for theprogram.

For operating system software, the revised IBM Operational Support Services- SoftwareXcel offering will provide support for those operating systems andassociated products that are not available with the Software Subscription andSupport (Software Maintenance) offering.

This will ensure total support coverage for your enterprise needs, including IBM andselected non-IBM products. For complete lists of products supported under both thecurrent and revised offering, go to the Supported product list website.

IBM Operational Support Services - SoftwareXcel

No

http://www.ibm.com/support/customercare/sas/f/handbook/home.html

http://www-03.ibm.com/services/supline/products/index.html


Variable charges apply

No

Educational allowance available

Yes. A 15% education allowance applies to qualified education institution clients.

Multi-Version Measurement

Multi-Version Measurement (MVM) replaces the previously announced MigrationGrace Period time limit of six months and allows unlimited time for clients to runmore than one eligible version of a software program. Clients may run multipleversions of a program simultaneously for an unlimited duration during a programversion upgrade. Clients may also choose to run multiple versions of a programsimultaneously for an unlimited duration in a production environment. MVM does notextend support dates for programs withdrawn from service.

For more information about MVM, including requirements for qualification, see theMVM web page. For a list of eligible programs, see the IPLA Execution-Based webpage.

Sub-capacity terms and conditions

For each IBM Z IPLA program with Value Unit pricing, the quantity of that programneeded to satisfy applicable IBM terms and conditions is referred to as the requiredlicense capacity. Your required license capacity is based upon the following factors:

• The IBM Z IPLA program you select.

• The applicable Value Unit Exhibit.

• The applicable terms.

• Whether your current mainframes are full capacity or sub-capacity.

For more information on the Value Unit Exhibit for the IBM Z IPLA program youselected, see the Ordering information section.

Full-capacity mainframes

In cases where full capacity is applicable, the following terms apply.

Execution-based, z/OS-based, full machine-based: The required capacity of an IBMZ IPLA program with these terms equals the MSU-rated capacity of the machineswhere the IBM Z IPLA program executes.

For more information on mainframe MSU-rated capacities, go to the IBM Z softwarepricing resources web page.

Reference-based: The required license capacity of an IBM Z IPLA program with theseterms equals the license capacity of the applicable monthly license charge (MLC)program. This MLC program is called the parent program.

Sub-capacity mainframes

In cases where sub-capacity is applicable, the following terms apply.

Execution-based: The required capacity of an IBM Z IPLA sub-capacity programwith these terms equals the capacity of the LPARs where the IBM Z IPLA programexecutes.

z/OS-based: The required license capacity of an IBM Z IPLA program with theseterms equals the license capacity of z/OS on the machines where the IBM Z IPLAprogram executes.

http://www.ibm.com/systems/z/resources/swprice/mvm.html

http://www.ibm.com/systems/z/resources/swprice/reference/exhibits/ipla_exe.html

https://www.ibm.com/it-infrastructure/z/software/pricing-resources



Reference-based: The required license capacity of an IBM Z IPLA program with theseterms equals the license capacity of the applicable monthly license charge (MLC)program. This MLC program is called the parent program.

Full machine-based: The required license capacity of an IBM Z IPLA program withfull machine-based terms equals the MSU-rated capacity of the machines where theIBM Z IPLA program executes.

For more information on mainframe MSU-rated capacities, see the IBM z Systems(R)

Machines Exhibit, Z125-3901, or see the Exhibits section on the IBM Z softwarepricing resources web page.

IBM Z IPLA sub-capacity programs with reference-based terms add value to theparent program across the environment, regardless of where in the environment theIBM Z IPLA program executes.

An environment is defined as either a single or stand-alone machine or a qualifiedParallel Sysplex(R). You may have one or more different environments across theenterprise. To determine the required license capacity for each IBM Z IPLA programwith referenced-based terms, each environment should be assessed separately.

When an IBM Z IPLA sub-capacity program with reference-based terms is usedin a qualified Parallel Sysplex environment, the required license capacity of theIBM Z IPLA program must equal the license capacity of the parent program acrossthe Parallel Sysplex. Qualified Parallel Sysplex refers to one where MLC pricing isaggregated across the sysplex.

Sub-capacity eligibility

To be eligible for sub-capacity charging on select IBM Z IPLA programs, you mustfirst implement and comply with all terms of one of the following:

• Sub-capacity Workload License Charges (WLC)

• Sub-capacity Entry Workload License Charges (EWLC)

• Sub-capacity Advanced Workload License Charges (AWLC)

• Sub-capacity Advanced Entry Workload License Charges (AEWLC)

To implement sub-capacity WLC, EWLC, AWLC, or AEWLC, a machine must be anIBM Z (or equivalent). On that machine:

• All instances of the OS/390(R) operating system must be migrated to the z/OSoperating system.

• Any licenses for the OS/390 operating system must be discontinued.

• All instances of the z/OS operating systems must be running in z/Architecture(R)

(64-bit) mode.

For that machine, you must create and submit a Sub-Capacity Report to IBM eachmonth. Sub-Capacity Reports must be generated using the Sub-Capacity ReportingTool (SCRT). For additional information or to obtain a copy of SCRT, go to the IBM Zsoftware pricing tools web page.

You must comply with all of the terms of the WLC or EWLC offering, whichever isapplicable:

• The complete terms and conditions of sub-capacity WLC are defined in the IBMCustomer Agreement - Attachment for z Systems(R) Workload License Charges(Z125-6516).

• The complete terms and conditions for sub-capacity EWLC are defined in the IBMCustomer Agreement - Attachment for EWLC, TWLC, zELC, and z/OS.e LicenseCharges (Z125-6587).

You must comply with all of the terms of the AWLC or AEWLC offering, whichever isapplicable:



https://www.ibm.com/it-infrastructure/z/software/pricing-tools

https://www.ibm.com/it-infrastructure/z/software/pricing-tools


• The complete terms and conditions for AWLC are defined in the IBM CustomerAgreement - Attachment for IBM System z(R) Advanced Workload License Charges(Z125-8538).

• The complete terms and conditions for AEWLC are defined in the IBM CustomerAgreement - Attachment for IBM System z Advanced Entry Workload LicenseCharges (Z125-8755).

Additionally, you must sign and comply with the terms and conditions specified inthe amendment to the IPLA contract - IBM Amendment for IBM System z ProgramsSub-Capacity Pricing (Z125-6929).Once the amendment is signed, the terms inthe amendment replace any and all previous IBM Z IPLA sub-capacity terms andconditions.

Sub-capacity terms and conditions

IBM Getting Started Sub-capacity Pricing for z/OS IPLA Software applies.

Sub-capacity utilization determination

Sub-capacity utilization is determined based on the utilization of an eligibleoperating system and machine, for example, z/OS running in z/Architecture (64 bit)mode on an IBM Z, or equivalent, server.

Sub-capacity utilization is determined based on the product's own execution asreported to IBM in accordance with the requirements for reporting sub-capacityutilization for products.

On/Off CoD

To be eligible for On/Off CoD pricing, you must be enabled for temporary capacity onthe corresponding hardware, and the required contract, Attachment for IBM Systemz On/Off Capacity on Demand (Z125-7883) must be signed prior to use.

Statement of good security practices

IT system security involves protecting systems and information through intrusionprevention, detection, and response to improper access from within and outsideyour enterprise. Improper access can result in information being altered, destroyed,or misappropriated or can result in misuse of your systems to attack others. Withouta comprehensive approach to security, no IT system or product should be consideredcompletely secure and no single product or security measure can be completelyeffective in preventing improper access. IBM systems and products are designedto be part of a regulatory compliant, comprehensive security approach, whichwill necessarily involve additional operational procedures, and may require othersystems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services areimmune from, or will make your enterprise immune from, the malicious or illegalconduct of any party.

Prices

Registered external customers and IBM Business Partners can access IBMLink toview pricing information.

Specify "Price type," "Search type," and "Search value," then click "Search."

Note: Enter program number in the "Search value."

https://www-304.ibm.com/ibmlink/eswprice/PriceESW.wss?lc=en&cc=US


You can also contact your local IBM representative or IBM Business Partner for theapplicable charges.

Order now

To order, contact the IBM Digital Sales Center, your local IBM representative, oryour IBM Business Partner. To identify your local IBM representative or IBM BusinessPartner, call 800-IBM-4YOU (426-4968). For more information, contact the IBMDigital Sales Center.

Phone: 800-IBM-CALL (426-2255)

Fax: 800-2IBM-FAX (242-6329)

For IBM representative: [email protected]

For IBM Business Partner: [email protected]

IBM Digital Sales Offices1177 S Belt Line RdCoppell, TX 75019-4642, US

The IBM Digital Sales Center, our national direct marketing organization, can addyour name to the mailing list for catalogs of IBM products.

Note: Shipments will begin after the planned availability date.

Trademarks

IBM Security is a trademark of IBM Corporation in the United States, othercountries, or both.z/OS, RACF, IBM, Db2, CICS, MQSeries, QRadar, IBM Z, Passport Advantage, z/Architecture, IBM z Systems, Parallel Sysplex, OS/390, z Systems and System z areregistered trademarks of IBM Corporation in the United States, other countries, orboth.UNIX is a registered trademark of The Open Group in the United States and othercountries.Microsoft and Windows are trademarks of Microsoft Corporation in the United States,other countries, or both.Other company, product, and service names may be trademarks or service marks ofothers.

Terms of use

IBM products and services which are announced and available in your countrycan be ordered under the applicable standard agreements, terms, conditions,and prices in effect at the time. IBM reserves the right to modify or withdraw thisannouncement at any time without notice. This announcement is provided for yourinformation only.Additional terms of use are located at

Terms of use

For the most current information regarding IBM products, consult your IBMrepresentative or reseller, or go to the IBM worldwide contacts page

IBM United States

http://www.ibm.com/legal/us/en/

http://www.ibm.com/planetwide/us/

IBM Security zSecure Suite 2.5 delivers expanded automated ...

Documents

Transcript of IBM Security zSecure Suite 2.5 delivers expanded automated ...