z/OS - Group home

z/OS 3.1 1Q 2024 Enhancements

  

IBM z/OS 3.1 was announced on August 8th, 2023 and made generally available September 29th, 2023. z/OS 3.1 intends to follow the traditional z/OS continuous delivery (CD) model by delivering new features and enhanced capabilities quarterly, which is intended to avoid the effort of a full release upgrade with no impact to stability, complexity or costs. The following enhancements have been delivered for z/OS 3.1 in 1Q 2024. 

 

Please note: These z/OS announcements will now be published on this z/OS Community page. To stay up to date, please ‘Join Community’ to ensure you don’t miss an announcement!

--------------------- What’s new ---------------------

Overview 

z/OS System Programmers will benefit from enhancements that allow for new management abilities to be performed via modern and consistent graphical interfaces and tooling, designed to reduce the manual steps and skills required to perform z/OS management tasks. 

  • z/OSMF Desktop support. Remote system support has been added so that z/OSMF users can perform data set and z/OS Unix file actions on a remote system in a different sysplex, which helps facilitate cross-sysplex management from a single location 
  • z/OSMF Feedback Collection enhancement. z/OSMF can now gather certain system operational usage information to be stored and used for reporting purposes by users.  
  • Parmlib Syntax Validation REST APIs. A new REST API has been delivered, designed to help simplify the management of parmlibs by driving automatic and consistent syntax validation of many z/OS parmlib members. 
  • Resource Management Facility (RMF) enhancements. Support has been added for WLM AI Initiator and Implicit CPU protection reports, as well as support for the RMF Grafana plugin so users can effectively explore and analyze RMF Monitor III metrics. 

Security engineers, architects, and evidence providers can find value in the following enhancements that are designed to expand data set encryption support, simplify compliance collection abilities, and strengthen authentication & authorization capabilities: 

  • z/OS Encryption Readiness Technology (zERT) enhancements. Support has been added to recognize and report new SSH cryptographic attributes. 
  • Integrated Cryptographic Service Facility (ICSF) enhancements. Support has been added for CCA 8.2, including updated CRYSTALS-Kyber keys for key exchange mechanisms and new services in support of DK banking initiative. ICSF will also now exploit an EP11 Crypto Express Coprocessor (CEXxP) running in new FIPS compliance modes.  
  • New z/OS UNIX callable service. Support has been added to authenticate application users using identity tokens.  
  • Thread-safe zlib compression. Support has been added for a thread-safe way to set compression implementation for multi-threads scenarios.

z/OS infrastructure architects and storage administrators can utilize the following enhancements that are designed to better manage the growth of data and eliminate impactful data constraints and complexities:  

  • EzNoSQL enhancements. Support has been added to scan NoSQL documents sequentially using a new ordered index parameter.  
  • Data Set File System enhancements. Support has been added to store data set attributes as extended attributes and allow access to JES spool via DSFS. 
  • zFS Health Check and Conversion utility. Two new zFS health checks now support the ability to tune and configure z/OS UNIX file systems to prevent outages and failures. 
  • Cloud Data Access (CDA) enhancements. The ability for z/OS applications to target Microsoft Azure Blob Storage and File Service objects is now available on z/OS V2.5 and above.
  • DFSMShsm Incremental UNIX file backup.  A new option, -i, has been added to the Java hbackup command to allow clients to specify which DFSMShsm host in a multiple address space HSM (MASH) environment to direct the request to. This enables clients to distribute the workload among multiple DFSMShsm hosts. 
     

---------------------------------------------------------------------------------------- 

Description 

z/OSMF Desktop support  

Previously, users could not use the z/OSMF desktop UI to perform actions on data sets and files of a remote system, only on a local system. Now, remote system support has been added in the Data set and File Search tool so that users can perform data set and z/OS Unix file actions on a remote system in a different sysplex, just as they can on the local system. Users can also compare two sequential data sets, data set members, or files from two different systems. This is designed to help support the management of multiple sysplexes from a single place for efficiency improvements. Additionally, the z/OSMF Desktop editor has added support for syntax highlighting of Python programming language. With the PTF for APAR PH56708, this support is available on z/OS 3.1. 

z/OSMF Feedback Collection  

To help customers learn more about their functional exploitation across their enterprise, z/OSMF now has the capability to gather certain product usage information, including system operational data. This information can be stored and used for reporting purposes by the customer. For instance, using this information, a simple report could be written to compare similarities or differences between systems. With the PTF for APAR PH56716, this support is available on z/OS 3.1. 

Parmlib Syntax Validation REST APIs 

z/OSMF has added new REST APIs to greatly simplify the management of Parmlibs by driving automatic and consistent syntax validation of many z/OS Parmlib members. Users can use their preferred programming language to drive the automatic syntax validation with one API call to identify possible Parmlib syntax errors before using them. This support is designed to reduce risk by avoiding failure caused by syntax error in Parmlib members with little skill or effort requirements. With the PTFs for APARs PH56207 and PH56233, this support is available on z/OS 3.1. 

Resource Management Facility (RMF) enhancements 

The following support has been added: 

  • Support for WLM AI Initiator and Implicit CPU protection
    • The WLMGL report now includes enhancements incorporating AI technology to improve its internal processing capabilities. The BATCH INITIATOR AI-INFUSED field is introduced in the Service Class report and Service Class Period report, respectively. These enhancements allow WLM to leverage the power of AI to predict regular spikes by analyzing and modeling historically repeating batch workloads, optimizing the system's overall performance.
    • Additionally, the Service Class and Service Class Period reports will introduce a new value, CPUI* and CPUI, for the CRITICAL field. This new value is designed to support Implicit CPU protection for systems that process workloads. With Implicit CPU protection, WLM can better manage resource allocation and ensure critical workloads receive the necessary processing power to run smoothly without affecting the overall system's performance.
  • IBM RMF for z/OS Grafana plugin 
    • The IBM RMF for z/OS Grafana plugin enables you to visualize and analyze the performance metrics and reports generated by the RMF Monitor III. With this plugin installed and configured in Grafana, you can gain valuable insights into the performance of your z/OS system and identify potential issues before they become critical. You can install the IBM RMF for z/OS plugin in Grafana and configure it to work with your system by creating a Datasource connection to a DDS. You can then explore the RMF Monitor III metrics and reports. This allows you to visualize and analyze the data in various ways, including charts, graphs, and tables. 

With the PTF for APAR OA66145, all of the above support is available on z/OS 3.1. 

z/OS Encryption Readiness Technology (zERT) enhancements  

zERT has been updated to recognize and report new SSH cryptographic attributes. zERT now supports the following new SSH key exchange methods:  

  • gss-group14-sha256- 
  • gss-group16-sha512- 
  • gss-curve25519-sha256- 
  • gss-nistp256-sha256- 

zERT also now supports the following new SSH key types:  

  • sk-ecdsa-sha2-nistp256@openssh.com 
  • sk-ecdsa-sha2-nistp256-cert-v01@openssh.com 
  • sk-ssh-ed25519@openssh.com 
  • sk-ssh-ed25519-cert-v01@openssh.com 

With the PTF for TCP/IP APAR PH58110, this support is available on z/OS 3.1. With the PTF for the IBM zERT Network Analyzer APAR PH58105, the network analyzer is updated to recognize and display the above values on z/OS 3.1. 

 

zERT policy-based enforcement is also updated to allow specification of the new key exchange methods on zERT SSH rules. With the PTF for the IBM Network Configuration Assistant for z/OS Communications Server APAR PH57412, the configuration assistant panels for configuring zERT enforcement rules are updated with the new key exchange methods on z/OS 3.1 

ICSF support  

ICSF Support for CCA Releases 7.5 and 8.2 provide additional flexibility for quantum safe key exchange with additional CRYSTALS-Kyber keys, creates a new callable service CSNBMMS “Multi Mac Scheme” in support of the evolving German Banking Industry Committee standards, and implements the CKM-RAKW algorithm for RSA import operations. With the PTF for APAR OA64883, this support is available on z/OS V2.4 or later.

In addition, ICSF will now exploit an EP11 Crypto Express Coprocessor (CEXxP) configured to run in FIPS 2021 or FIPS 2024 mode. With the PTFs for APARs OA65205 and OA65206, this support is available on z/OS V2.4 or later.  

New z/OS UNIX callable service for RACF Identity Tokens 

A new z/OS UNIX callable service has been provided to allow applications to authenticate using User ID, Password or Passphrase, or a signed or unsigned Identity Token against the security database. This service addresses the needs of new authentication methods being adopted by the industry. With the PTFs for APARs OA64356 and PH55271, this support is available on z/OS V2.4 or later. 

Thread-safe zlib compression  

Users of z/OS provided zlib can choose to use compression accelerators or not. To make zlib usage more flexible to users in multi-threads environment, this new feature is designed to let the user specify the compression method for each thread, in a way that does not affect other threads. For example, if the user enabled the new feature by creating TSD key hzc_compression_method before creating threads and specified a string "software" or "hardware" to the key in threads, zlib will check the TSD value in each thread and ignore the environmental variable _HZC_COMPRESSION_METHOD. With the PTF for APAR OA65661, this support is available on z/OS V2.5 or later. 

Ordered Index support for EzNoSQL 

EzNoSQL provides a comprehensive set of C and Java-based APIs designed to easily create and access JSON databases on z/OS that can be shared from multiple application instances running on different systems in a parallel sysplex environment. This enhancement provides the ability to scan NoSQL documents sequentially using a new ordered index parameter on the C and Java EzNoSQL create APIs. To migrate from an existing unordered index database to an ordered index database, or vice versa, use IDCAMS REPRO. This enhancement is also available for VSAMDB databases with a new ordered index DEFINE CLUSTER parameter. With the PTF for APAR OA64954, this support is available on z/OS V2.5 or later.  

 

To learn more and view the updated API reference documentation for both C and Java, visit theEzNoSQL for z/OS content solutionweb page. 

Data Set File System enhancements  

Support has been added to enhance the capabilities of the new data set file system by representing data set characteristics as extended attributes. Additional enhancements allow z/OS UNIX users direct access to their jobs on the JES spool. IBM has also provided support to allow users to handle migrated data sets. With the PTFs for APARsOA63902 and OA65560, this support is available on z/OS V2.5 or later. 

zFS Health Check and Conversion utility 

IBM has provided two zFS health checks that allow system programmers and storage administrators the ability to optimally tune their z/OS UNIX file system and to configure them to prevent outages and failures. In addition, a new conversion utility is being provided to help customers migrate their zFS directories from v4 to v5, which provides better performance characteristics. With the PTF for APAR OA63911, this support is available on z/OS V2.5 or later.   

Cloud Data Access (CDA) enhancements to support Microsoft Azure 
CDA is enhanced to allow CDA APIs to successfully authenticate with Microsoft Azure Blob Storage, and perform GDKGET, GDKWRITE, GDKDEL, and GDKLIST actions on objects in Azure Blob Storage. This support already shipped with z/OS 3.1, and with the PTF for APAR OA65925, is now available on z/OS V2.5.

DFSMShsm Incremental Unix file backup 

A new -i option is added to the Java hbackup command for incremental UNIX file backup allowing clients to specify which DFSMShsm host should receive the request. Distributing large file backups across multiple DFSMShsm hosts in a single LPAR is intended to better balance the backup workload and improve performance. With the PTF for APAR OA65319, this support is available on z/OS V2.5 or later. 

 

----------------------------------------------------------------------------------------------------------------------

Have a question or comment on the announced content above? Leave a comment down below!  

Additional Resources