VM66457: Z/VM CSM SUPPORT FOR KEYVAULT UTILITY USE

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• New z/VM Centralized Service Management (CSM) support to utilize
  the CMS KEYVAULT utility. Use of this new function will better
  accommodate the entry of user credentials (user names and
  passwords) when working with z/VM CSM commands.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All customers using z/VM Centralized Service *
  *                 Management (z/VM CSM) to manage z/VM system  *
  *                 service.                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION: APPLY PTF                                    *
  ****************************************************************
  This APAR provides applicable updates for z/VM Centralized
  Service Management (z/VM CSM) to support the use of a CMS
  KEYVAULT database as a source for FTP login credentials, for
  interaction with a managed system.
  
  The KEYVAULT support introduced with this APAR allows a KEYVAULT
  database to be used for a given CMS z/VM CSM work session (the
  duration of a given IPL of zCMS).  The identified KEYVAULT
  database then will be used as a source for FTP login
  credentials, as a z/VM system administrator interacts with
  remote, managed systems.
  
  For more information about the KEYVAULT support introduced with
  this APAR, consult the updated publications that are referenced
  later herein.
  
  Notes:
  
   * This support relies on new function introduced with the
     PTFs for these related APARs:
  
     + VM66453 - CMS PASSWORD/KEY MANAGEMENT UTILITY - KEYVAULT
     + PH51239 - FTP CLIENT SUPPORT FOR KEYVAULT UTILITY USE
  
   * The APAR updates for the aforementioned APARs, as well as
     those that pertain to this APAR (VM66457) must be in
     production on the designated z/VM CSM principal system, to
     allow for effective use of the introduced CMS KEYVAULT
     utility function.
  

Problem conclusion

Temporary fix

Comments

• The following changes are implemented by the updates provided
  via this APAR:
  
  Updates to the $CSMUTL$ EXEC part:
  
   * The Host_Credentials() function is updated to acquire
     host system FTP login credentials from a KEYVAULT database
     that has been designated for use by z/VM CSM.
  
  Updates to the SERVMGR EXEC part:
  
   * Applicable changes have been implemented to support
     designation (via prompt messages) of a KEYVAULT database as a
     source for FTP login credentials.  In relation to these
     changes, logic for the setup and management of a select set
     of SERVMGR program 'work files' (inclusive of the SERVMGR
     EXEC itself) is added, to accommodate KEYVAULT use
     across differing z/VM CSM release-level environments.
  
  Updates to the VMSESMSC COPY part:
  
   * The '!rc.7Cmd_Cancel' definition for return code 90
     is added, in relation to KEYVAULT support changes.
  
  Updates to the VMFUME REPOS part:
  
   * Included new and changed messages that are associated with
     the above-listed part changes.
  
     Affected messages are:
  
      VMF2760E VMF4150R VMF4151R VMF4152R VMF4153I VMF4154I
      VMF4155E VMF4156E VMF4157I VMF4158I VMF4159W VMF4160I
      VMF4161R VMF4162W VMF4163W VMF4164E
  
     Updated message help files (file type HELPMSG) are provided
     for each of these messages.
  
  In addition, updated command help files (file type HELPVMSE) are
  provided for the following commands:
  
   * SERVMGR (SERVMGR, SERVMINI, SERVMMAN, SERVMREM, SERVMSRV,
              SERVMSYS)
  
  The change that follow have been made to the system reference
  libraries:
  
  ***START PUBLICATION CHANGE*************************************
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  
  Publication Title: z/VM: VMSES/E Introduction and Reference
  Release:      z/VM 7.3.0
  Order number: GC24-6336-73    GC24633673
  
  Updates related to KEYVAULT usage are added.  In addition to
  applicable usage notes, a new section titled "Using a KEYVAULT
  Database with the SERVMGR Command" is added to the SERVMGR
  command documentation.
  
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  Publication Title: z/VM: Other Components Messages and Codes
  
  Release:      z/VM 7.3.0
  Order number: GC24-6300-73    GC24630073
  
  Documentation for the previously cited new and changed messages
  is added.
  
  Information is modified for message:
  
   VMF2760E
  
  Information is added for messages:
  
   VMF4150R VMF4151R VMF4152R VMF4153I VMF4154I VMF4155E VMF4156E
   VMF4157I VMF4158I VMF4159W VMF4160I VMF4161R VMF4162W VMF4163W
   VMF4164E
  
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  Publication Title: z/VM: Service Guide
  Release:      z/VM 7.3.0
  Order number: GC24-6325-73    GC24632573
  
  Information is added to the section titled 'The SERVMGR command'
  in 'Chapter 10.  Setting up z/VM CSM', which provides additional
  information about SERVMGR command operation changes related to
  KEYVAULT use support, inclusive of added SERVMGR program 'work
  file' use and management.
  
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  
  For publication change details, consult the updated PDF
  instances of the aforementioned publications, which are
  available via this URL:
  
    https://www.ibm.com/docs/en/zvm/7.3
  
  
  ***END PUBLICATION CHANGE***************************************
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UM90289

Modules/Macros

• $CSMUTL$ SERVMGR  SERVMINI SERVMMAN SERVMREM SERVMSRV SERVMSYS
  VMFUME   VMFUMEB  VMF2760E VMF4150R VMF4151R VMF4152R VMF4153I
  VMF4154I VMF4155E VMF4156E VMF4157I VMF4158I VMF4159W VMF4160I
  VMF4161R VMF4162W VMF4163W VMF4164E VMSESMSC
  

Fix information

• Fixed component name

  ESA VMSESS

• Fixed component ID

  568411209

Applicable component levels

• R730 PSY UM90289

     UP23/05/30 P 2401

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.