A fix is available
APAR status
Closed as new function.
Error description
Z/OSMF function enhancements. ****************** * PE INFORMATION * ****************** Users Affected: APAR PI41259 / PTF UI28554 is in error. FMID HSMA210 is affected. User Impact: APAR PI41259 fixed the problem it reported, but introduced a new problem. When starting the z/OSMF server with PTF UI28554 applied, z/OSMF may return the follwing error message in its job log: CWPKI0028E: SSL handshake protocol ${izu.ssl.Protocol} is not valid. This protocol is specified in the SSL configuration alias ${izu.ssl.config} loaded from SSL configuration file null. The server will be unable to accept incoming connections and not be usuable through browsers. Verification Steps: 1) The z/OSMF job log shows the above mentioned CWPKI0028E message. 2) PTF UI28554 is applied 3) The /etc/zosmf/servers/zosmfServer/bootstrap.properties file is missing fields izu.ssl.config="izuSSLConfig" izu.ciphers.list="" izu.ssl.Protocol="SSL_TLS" ****************** * RECOMMENDATION * ****************** DO NOT apply UI28554 If you have applied UI28554, please apply APAR PI54286 / PTF UI90034 at your earliest convenience Otherwise, you can perform the following workaround: 1. Delete the symlink bootstrap.properties in /etc/zosmf/servers/zosmfServer/bootstrap.properties Also delete the file /etc/zosmf/servers/zosmfServer/bootstrap.template (you should back this file up somewhere else) 2. Copy the default bootstrap.properties from /usr/lpp/zosmf/V2R1/defaults/servers/zosmfServer/bootstrap.prope rties to the location /etc/zosmf/servers/zosmfServer/bootstrap.template (note we've renamed the copied properties file to template) 3. You may need to alter the ownership and permissions of the new bootstrap.template file to match the following: PERMS OWNER OWNER GROUP FILE ---------- ------ ----------- ---- -rwxrwxr-x IZUSVR IZUADMIN bootstrap.template 4. Modify the new bootstrap.template you've created to include the updated hostname, port numbers and any other custimizations you have from your old file. 5. Restart the z/OSMF server STC (IZUSVR1 by default)
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM z/OS Management Facility * * Version 2 Release 1, HSMA210. * **************************************************************** * PROBLEM DESCRIPTION: This APAR provides function that was * * originally provided with z/OSMF V2R2. * **************************************************************** * RECOMMENDATION: * **************************************************************** This APAR provides function that was originally provided with z/OSMF V2R2. The process for configuring z/OSMF is changed to provide a smoother configuration experience, as follows: 1. z/OSMF includes a simplified set of options for creating a base configuration, with default values that are suitable for most installations. You might find the defaults to be sufficient for your environment; if so, use them for a quick-start experience with z/OSMF. 2. If z/OSMF requires customization, you can modify the product settings by using the IZUPRMxx parmlib member, which is new. A sample member, IZUPRM00, is provided with z/OSMF, with settings that match the defaults. Using IZUPRM00 as a model, you can create a customized IZUPRMxx parmlib member for your environment. Previously, you ran an interactive UNIX shell script, called izusetup.sh, to create a base configuration on your z/OS system. 3. Security authorizations for z/OSMF can be created by using sample jobs that are provided with z/OSMF. Previously, the configuration scripts created one or more REXX execs with sample RACF commands for creating authorizations. 4. After you create the base configuration, you can add significant function to z/OSMF through the addition of optional plug-ins. Now, you can add plug-ins to z/OSMF by using the Configuration Workflow. Previously, you were required to customize the host system manually for each plug-in and run the izusetup.sh -add script to add the plug-ins. This APAR also includes the following functional enhancements, which were originally provided with z/OSMF V2R2: 1. z/OSMF provides a modern, intuitive interface that is consistent with other IBM products. 2. The z/OSMF configuration workflow is further enhanced. 3. Topology Services adds support for central processor complexes (CPCs) so that you can retrieve a list of the systems included in a CPC. 4. Systems task provides a graphical view -- the system topology -- of the systems, sysplexes, CPCs, and groups that have been defined to z/OSMF. 5. Support is added to allow the user to change a password or passphrase on logging in to z/OSMF.
Problem conclusion
Temporary fix
Comments
------------- ENHANCEMENTS ---------------------------------- This APAR provides function that was originally provided with z/OSMF V2R2. 1. The process for configuring z/OSMF is changed to provide a smoother configuration experience. In short, configuring an instance of z/OSMF is done by running the IBM-supplied jobs IZUSEC and IZUMKFS, and then starting the z/OSMF server. The old script invocations, such as -config and -finish, are now deprecated. The z/OSMF configuration process occurs in three stages, and in the following order: Security setup, Configuration, and Server initialization. a. To set up security for the z/OSMF core functions, you can use the supplied sample job IZUSEC, which is shipped in SIZUJCL data set. Default SIZUJCL data set is 'IZU.SIZUJCL'. b. To create the user file system, you can use the sample job IZUMKFS, which is shipped in SIZUJCL data set. If z/OSMF requires customization, you can modify the product settings by creating an IZUPRMxx parmlib member. c. To start the z/OSMF server, you use the START command. On the START command, you can specify options that control the operation of the z/OSMF server on your system. To have the server started automatically at IPL, add the START command to your active COMMNDxx parmlib member. 2. z/OSMF provides a modern, intuitive interface that is consistent with other IBM products. Most of the UI widgets have the same behavior as before, except for the table widget: a. There are a lot changes in the format of table filter settings. Some fields of the filter settings are no longer supported. Therefore, there will be an expected one-time loss of user customized filters. After applying this APAR, z/OSMF does not retain the table filter settings which were set in previous release. Default table filter settings will be used. You can reset the filter to restore your filter settings. b. The more/less feature in the tables are not supported. c. The behavior of the sort in tree table in non-tree view is changed. Before, the sort is applied to every row in the table and the tree structure may be destroyed after the sort. After applying this APAR, the sort is applied to the rows on the same level in the tree structure, and the tree structure can not be destroyed. 3. The z/OSMF configuration workflow is further enhanced, as follows: a. Workflows for "-config" and "-finished" are removed. New instructions for adding plug-ins are provided. b. New workflow is added for the Software Management plug-in. c. Discovery workflow for Dump Analysis and Elimination (DAE) for the Incident Log plug-in is improved. d. Workflow for the Common Information Model (CIM) server is improved. e. Parmlib updating is improved. 4. Topology services adds support for central processor complexes (CPCs) to allow you to retrieve a list of the systems included in a CPC. 5. Systems task provides a graphical view -- the system topology -- of the systems, sysplexes, CPCs, and groups that have been defined to z/OSMF. 6. Support is added to allow the user to change a password or passphrase on logging in to z/OSMF. ------------- DOCUMENTS UPDATES ------------------------------ Updated z/OSMF documentation will be available with the March refresh of the z/OS V2R1 library. http://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com. ibm.zos.v2r1.izu/izu.htm Interim documentation is available as follows. --------------------------------------------------------------- - IBM z/OS Management Facility Configuration Guide, - - SA38-0657-05, Version 2 Release 1. - --------------------------------------------------------------- http://publibz.boulder.ibm.com/zoslib/pdf/PI54286.izu23150.pdf --------------------------------------------------------------- - IBM z/OS Management Facility Programming Guide, - - SA32-1066-05, Version 2 Release 1. - --------------------------------------------------------------- http://publibz.boulder.ibm.com/zoslib/pdf/PI54286.izu27150.pdf
APAR Information
APAR number
PI54286
Reported component name
Z/OSMF CORE
Reported component ID
5655S28SM
Reported release
210
Status
CLOSED UR1
PE
YesPE
HIPER
NoHIPER
Special Attention
YesSpecatt / New Function / Installability /
Xsystem
Submitted date
2015-12-17
Closed date
2016-01-21
Last modified date
2016-02-24
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
PI54291 PI54292 PI54294 PI54324 PI54333 PI54346 PI54351 PI54357
PI54358 PI54359 PI54360 UI90034
Modules/Macros
IZUANG1 IZUAUTH IZUCASEC IZUCLNUP IZUCPSEC IZUDELET IZUDELFN IZUDLDDF IZUDMSEC IZUGNAAA IZUGNAAQ IZUGNAAS IZUGNAAV IZUGNAAW IZUGNAAX IZUGNABR IZUGNABS IZUGNABT IZUGNABU IZUGNABV IZUGNABX IZUGNABY IZUGNACU IZUGNAEY IZUGNAEZ IZUGNAFA IZUGNAFB IZUGNAFC IZUGNAFD IZUGNAFE IZUGNAFF IZUGNAFG IZUGNAFH IZUGNAFI IZUGNAFJ IZUGNAFK IZUGNAFL IZUGNAFM IZUGNAFN IZUGNAFO IZUGNAFP IZUGNAFQ IZUGNAFR IZUGNAFT IZUGNAFU IZUGNAFV IZUGNAFW IZUGNAFX IZUGNAFY IZUGNAFZ IZUGNAGA IZUGNAGB IZUGNAGC IZUGNAGD IZUGNAGE IZUGNAGF IZUGNAGG IZUGNAGH IZUGNAGI IZUGNBAA IZUGNBAB IZUGNBAC IZUGNBAD IZUGNBAG IZUGNBAL IZUGNBAM IZUGNBFA IZUGNBFB IZUGNBFC IZUGNBFD IZUGNBFE IZUILSEC IZUIPPVT IZUISALC IZUISDDD IZUISHFS IZUISMKD IZUISSEC IZUISZFS IZUMKDIR IZUMKFS IZUMNTFS IZUPARMS IZUPRM00 IZURMSEC IZUSEC IZUSVR1 IZUWMSEC
SA38065700 | SA32106600 |
Fix information
Fixed component name
Z/OSMF CORE
Fixed component ID
5655S28SM
Applicable component levels
R210 PSY UI90034
UP16/01/28 P F601
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":null,"label":null},"Product":{"code":"SG19O","label":"APARs - MVS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"210","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"210","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
24 February 2016