z/OSMF Guild 19 Q&A

Q:

Does the USS files being edited in z/OS MF has ENQ enabled ?

A:

We have ENQ enabled for data set but not for USS files today.

Q:

is there plan to enable this? To avoid inconsistency in updating .

A:

It is in our backlog. You are welcome to open formal IBM requirement to us.

Comment:

To learn z/OSMF and ALL its plugins there is a 3 days class that IBM is offering (fee based): https://www.ibm.com/training/course/zos-management-facility-implementation-and-use-ESB3G

Q:

We  no longer have a ZIIP and now wait a  LONG time even to get z/OSMF initialized.  z/OSMF seems to disdain 'smaller'  mainframes

A:

We shipped several enhancements in the past couple years to improve z/OSMF initialization time. Those enhancements are supposed to be also helpful for small system. Therefore, you are welcome to contact me via zhuxiaoz@cn.ibm.com. We will see what we can help. Thanks!

Q:

From 2.4 to 2.5, do we need to do any type of migration from the backing stores?

A:

When V2R5 NCA opens a file from V2R4 NCA for the first time, it performs migration automatically.  There is nothing you have to do.

Q:

When I use the z/OSMF Software Updates to apply updates, I know that we can download the outputs of the Apply to the workstation. Recently, I noticed that these outputs are also saved in /global/zosmf/data/app/dm/swupdate. are you planning to let us specifying where to save the outputs in the Host?

A:

We have no plans to provide an alternate location for the saved output outside of the z/OSMF data directory.  Are you asking for the ability to simply load the saved output to z/OS in addition to your workstation?

Q:

As the output is also saved in the z/OSMF data directory, I think maybe we will have to check about the space requirement for these outputs if they become bigger or move them to another place. I was just surprised to see the outputs in the  z/OSMF Data directory.

A:

The output is zipped/compressed when stored in the z/OSMF data directory, but I hear you about the potential large space required.  We are currently working on an action to delete a process and its saved output.  In the future we will need to provide settings to perhaps automatically purge.

There is an icon on the right cornor of z/OSMF Desktop task bar which is monitoring and displays the current space usage of z/OSMF data file system. It will be turned into red color if the usage exceeds 90%.

Q:

Is there are issue with "Security level" using tls 1.3 ??, i defined  secp521r1,secp384r1,secp256r1,x25519,x448 , but as soon as i install the configuration they go away. About the configuration file,,, how to change the ftpdata to take ftp secure instead?

A:

Re: "about the configuration file,,, how to change the ftpdata to take ftp secure instead?"  NCA has its own built-in FTP client, it does not use the z/OS FTP client.  Therefore the FTPDATA file has nothing to do with NCA FTP client settings.   If you want secure FTP you can use AT-TLS or check the "Use TLS/SSL" checkbox on the FTP panel. Regarding your question about curves used with TLS 1.3 I'd need to do more research, please email my your question at mjfox@us.ibm.com

Q:

Are there controllable retention periods for this stored o/p?

A:

Access to the saved output in the z/OSMF data directory is controlled by the user's authorization to the Software Instance that was updated.

Q:

o/p on spool or in view can be restricted as to who can view. Is this facility in the data dir via uid/gid of the logged on user?

A:

There is no output on the spool as Software Update does not submit a job to run SMP/E.

Q:

Does NCA have the ability to easily revert a configuration that was installed? I ask because if NCA had the ability to fully manage Policy Agent members (install, backup, revert, PAGENT Refresh) - I think that would make NCA significantly more valuable

A:

NCA does not have a built-in undo capability, we do have a requirement to keep few previous generations of backing stores saved for this purpose, you might want to find that IDEA and vote for it or add yourself as an intersted party.

Q:

Is there a doc on how to us the API?

A:

IBM zOSMF Programming Guide provides how to use the data set and file REST apis. If you click on the 2nd icon from left on the z/OSMF desktop task bar, you will find a icon named z/OSMF REST APIs, double click on that will open Open API document of z/OSMF REST API where you can see all the document and even try the REST API without having to write any code.

Q:

A question from my customer: Can we import policy agent configuration files for the different technologies: IPSec, AT-TLS,  etc? It seems before if was possible in z/OSMF NCA, but no options in z/OSMF 2.5 to do that.

A:

Policy file import capability was removed in V2R5 because it had been deprecated in V2R2... it had not been updated so even when you had the capability, it would not import any parameters or functions added after V2R1. Policy import was designed as an interim function to let customers who had policy files before NCA existed, to migrate to NCA.  Now that we significant adoption for policy technologies and NCA is more mature, that function was considered no longer needed. TCP/IP profile import (for NCA TCP/IP technology) is still supported and kept up to date however. 

Q:

We have found it challengintg to develop our own workflows. Starting int he Workflow Editor when you are ready to test a step (or the entire workflow) I believe we are taken to the Workflows app (to create and execute an instance of the workflow). If the workflow has a failure progress is halted in the Workflows app and one must return to the Workflow Editor to make a change. Testing the change requires a launch of the entire workflow again in the Workflows app - thus the longer your workfloe the more you have to reprocess to get to the step that required a fix/test. This is quite painful for the workflow developer. Are we missing something? The 'test' button in Workflow Editor just launches the workflow in Workflows. We'd like to have a better way to test individual steps without having to start from the beginning of the workflow.

A:

Regarding to your question of developing workflow definition, would you please reach to me via zhuxiaoz@cn.ibm.com. I will talk with our workflow colleagues and see if anything we can help.

Comment:

FYI we created an "IDEA" request to have PortGroup to be used in NCA.

Comment:

IRA200E AUXILIARY STORAGE SHORTAGE is not related to Spool  - refer to https://www.ibm.com/docs/en/zos/2.1.0?topic=messages-ira200e