Architect's Guide to IBM CICS on System z - IBM Redbooks

266 Pages·2012·4.07 MB·English

Front cover
Architect’s Guide to
IBM CICS on System z
Discover the value to your business of
CICS on System z
Understand how to design and
develop CICS applications
Explore the qualities of
service CICS can provide
Phil Wakelin
Ahmed Farrag
Steve Hobson
Manuel Jaen
Tommy Joergensen
Thiago Rotta
ibm.com/redbooks

International Technical Support Organization
Architect’s Guide to IBM CICS on System z
November 2012
SG24-8067-00
Note: Before using this information and the product it supports, read the information in “Notices” on
pagevii.
First Edition (November 2012)
This edition applies to Version 5, Release 1 of CICS Transaction Server for z/OS.
© Copyright International Business Machines Corporation 2012. All rights reserved.
Note to U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule
Contract with IBM Corp.
Contents
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .vii
Trademarks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
The team who wrote this book. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
Now you can become a published author, too! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Comments welcome. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Stay connected to IBM Redbooks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xii
Part 1. Why CICS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Chapter 1. Business value of CICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.1 Today’s enterprise computing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.1.1 Reliability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.1.2 Business agility. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.1.3 Flexibility. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.1.4 Cost effectiveness. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.2 CICS: The smart choice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1.2.1 Simplifying the environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1.2.2 Application design. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
1.2.3 Reliability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
1.2.4 Creating a market advantage with CICS TS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1.3 CICS market presence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
1.4 Cost effectiveness. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
1.4.1 Understanding the cost of CICS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
1.4.2 Cost benefits of CICS qualities of service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
1.5 The future of CICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Chapter 2. CICS capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
2.1 Agile development & deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
2.1.1 CICS application programming interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
2.1.2 Programming languages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2.1.3 Java framework. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
2.1.4 Development and deployment lifecycle. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
2.1.5 CICS and cloud computing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
2.2 Flexible integration options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
2.3 Proven integrity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
2.3.1 Transaction integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
2.3.2 Data integrity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
2.4 Secured environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
2.4.1 CICS security integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
2.4.2 End-to-end security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
2.5 Highly available and scalable processing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
2.5.1 High availability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
2.5.2 Scalability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
2.5.3 Techniques and facilitators. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
2.5.4 z/OS Workload Manager. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
2.6 Simplified administration with CICSPlex System Manager. . . . . . . . . . . . . . . . . . . . . . 44
© Copyright IBM Corp. 2012. All rights reserved. iii
Part 2. Developing CICS applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Chapter 3. CICS application architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
3.1 Application architecture. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
3.1.1 CICS application architecture principles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
3.1.2 Reusable modular model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
3.2 Adapter layer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
3.2.1 Message serialization adapters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
3.2.2 Adapter technology. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
3.3 Presentation layer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
3.3.1 The 3270 terminals. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
3.3.2 Web support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
3.3.3 Liberty JSP support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
3.3.4 State management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
3.4 Integration layer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
3.4.1 Service flows. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
3.4.2 Enterprise service bus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
3.5 Business layer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
3.5.1 Business rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
3.5.2 Event processing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
3.5.3 Transaction integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
3.5.4 Threadsafe programming . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
3.6 Data access layer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
3.6.1 Data stores . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
3.6.2 Batch integration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Chapter 4. CICS application modernization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
4.1 Introduction to application modernization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
4.2 Business rules modernization overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
4.2.1 Analyzing existing CICS applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
4.2.2 Introduction to the business rules mining process . . . . . . . . . . . . . . . . . . . . . . . . 77
4.2.3 Preparation activities for rules mining process . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
4.2.4 Rule mining activities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
4.3 Event processing in CICS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
4.3.1 Why is events processing important to today’s business? . . . . . . . . . . . . . . . . . . 83
4.3.2 Key concepts about CICS event processing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
4.3.3 How CICS events work. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
4.3.4 Events consumers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
4.3.5 Designing event driven solutions for CICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
4.3.6 Business scenarios for CICS events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
4.4 Reusing business logic from CICS applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
4.4.1 Migration from COMMAREAs to channels and containers. . . . . . . . . . . . . . . . . . 91
4.4.2 CICS integration options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
4.4.3 Java Connector Architecture through CICS Transaction Gateway. . . . . . . . . . . . 95
4.4.4 JCA through WebSphere z/OS Optimized Local Adapters (WOLA). . . . . . . . . . . 98
4.4.5 CICS web support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
4.4.6 Asynchronous messaging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
4.4.7 CICS sockets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
4.4.8 Integration options comparison. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
4.5 Modernizing data layer using CICS VSAM Transparency. . . . . . . . . . . . . . . . . . . . . . 103
4.6 Modernizing 3270 presentation layer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
4.6.1 Front End Programming Interface (FEPI). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
4.6.2 Rational Host Access Transformation Services (HATS). . . . . . . . . . . . . . . . . . . 106
iv Architect’s Guide to IBM CICS on System z
4.6.3 CICS Link3270 bridge. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
4.6.4 Service Flow Modeler (SFM). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Chapter 5. Application development lifecycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
5.1 CICS application development lifecycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
5.1.1 Eclipse-based environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
5.1.2 CICS Explorer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
5.2 Procedural application development lifecycle. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
5.2.1 Application analysis and design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
5.2.2 Development and build. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
5.2.3 Functional testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
5.2.4 Performance testing and tuning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
5.2.5 Deployment to production. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
5.2.6 Service delivery management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
5.3 Java application development and deployment lifecycle . . . . . . . . . . . . . . . . . . . . . . 122
5.3.1 Basic concepts of Java development in CICS . . . . . . . . . . . . . . . . . . . . . . . . . . 122
5.3.2 Java application development on CICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
5.3.3 Debugging and troubleshooting Java applications running on CICS . . . . . . . . . 131
5.3.4 CICS diagnostics tools for Java . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
5.3.5 Profiling and tuning CICS Java applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Chapter 6. Exploring the CICS development tools . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
6.1 Rational tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
6.1.1 Rational Asset Analyzer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
6.1.2 Rational Developer for System z. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
6.1.3 Rational Development and Test Environment for System z . . . . . . . . . . . . . . . . 148
6.1.4 Rational Team Concert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
6.2 CICS and z/OS tools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
6.2.1 CICS Interdependency Analyzer (IA) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
6.2.2 z/OS Problem Determination Tools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
6.2.3 CICS Performance Analyzer for z/OS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
6.2.4 CICS Application Performance Analyzer for z/OS . . . . . . . . . . . . . . . . . . . . . . . 166
6.2.5 CICS Configuration Manager for z/OS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168
6.2.6 CICS Deployment Assistant for z/OS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
6.2.7 IBM Session Manager for z/OS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172
Part 3. CICS system design. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
Chapter 7. High availability and continuous operation. . . . . . . . . . . . . . . . . . . . . . . . 177
7.1 Availability requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
7.1.1 Types of availability requirement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
7.1.2 Unplanned outages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
7.1.3 Planned outages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
7.2 z/OS Parallel Sysplex and CICSplex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
7.2.1 z/OS Parallel Sysplex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
7.2.2 CICSplex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
7.3 Data availability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
7.3.1 CICS data requiring high availability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
7.3.2 Application data requiring high availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
7.3.3 WebSphere MQ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
7.4 Application availability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
7.4.1 Transaction deadlocks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
7.4.2 Application errors: Damage limitation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
7.4.3 Isolating applications in separate CICS regions . . . . . . . . . . . . . . . . . . . . . . . . . 198
Contents v
Chapter 8. Scalability and workload management. . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
8.1 Building a scalable enterprise system. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
8.1.1 Scalable architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
8.2 Single region considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
8.2.1 Virtual storage constraint relief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203
8.2.2 CPU contention. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203
8.2.3 Managing the workload in a single region. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204
8.3 Multiregion considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
8.3.1 Client access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
8.3.2 Data access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
8.3.3 Other multiregion considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208
8.3.4 Global CICS ENQ/DEQ. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210
8.3.5 Considerations for multi-LPAR CICS regions. . . . . . . . . . . . . . . . . . . . . . . . . . . 211
8.3.6 Communication options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211
8.3.7 Workload management in a CICSplex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215
8.3.8 Workload separation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217
8.3.9 Preparing for workload management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218
Chapter 9. Security and auditing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219
9.1 Security requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
9.2 Authentication and identification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
9.2.1 Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
9.2.2 Identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221
9.2.3 CICS and identity propagation: The end-to-end security solution. . . . . . . . . . . . 223
9.3 Authorization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225
9.3.1 Securing access to resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225
9.3.2 Securing access to DB2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
9.3.3 Intercommunication security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
9.3.4 Securing network access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230
9.4 Integrity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
9.4.1 System z security and integrity capabilities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
9.4.2 CICS storage protection and transaction isolation . . . . . . . . . . . . . . . . . . . . . . . 233
9.5 Confidentiality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233
9.6 Cryptography. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234
9.7 Auditing and non-repudiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237
9.7.1 Auditing unauthorized access to CICS resources. . . . . . . . . . . . . . . . . . . . . . . . 237
9.7.2 Auditing updates to CICS resource definitions . . . . . . . . . . . . . . . . . . . . . . . . . . 237
9.7.3 Auditing updates to CICS application programs. . . . . . . . . . . . . . . . . . . . . . . . . 238
9.7.4 Non-repudiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238
Part 4. Appendix and related publications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239
Appendix A. Supported standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241
Networking standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242
Web service standards. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242
Security standards. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
Other standards and frameworks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
IBM Redbooks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Other publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Online resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246
Help from IBM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
vi Architect’s Guide to IBM CICS on System z
Notices
This information was developed for products and services offered in the U.S.A.
IBM may not offer the products, services, or features discussed in this document in other countries. Consult
your local IBM representative for information on the products and services currently available in your area. Any
reference to an IBM product, program, or service is not intended to state or imply that only that IBM product,
program, or service may be used. Any functionally equivalent product, program, or service that does not
infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to
evaluate and verify the operation of any non-IBM product, program, or service.
IBM may have patents or pending patent applications covering subject matter described in this document. The
furnishing of this document does not grant you any license to these patents. You can send license inquiries, in
writing, to:
IBM Director of Licensing, IBM Corporation, North Castle Drive, Armonk, NY 10504-1785 U.S.A.
The following paragraph does not apply to the United Kingdom or any other country where such
provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION
PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR
IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT,
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of
express or implied warranties in certain transactions, therefore, this statement may not apply to you.
This information could include technical inaccuracies or typographical errors. Changes are periodically made
to the information herein; these changes will be incorporated in new editions of the publication. IBM may make
improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time
without notice.
Any references in this information to non-IBM websites are provided for convenience only and do not in any
manner serve as an endorsement of those websites. The materials at those websites are not part of the
materials for this IBM product and use of those websites is at your own risk.
IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring
any obligation to you.
Any performance data contained herein was determined in a controlled environment. Therefore, the results
obtained in other operating environments may vary significantly. Some measurements may have been made
on development-level systems and there is no guarantee that these measurements will be the same on
generally available systems. Furthermore, some measurements may have been estimated through
extrapolation. Actual results may vary. Users of this document should verify the applicable data for their
specific environment.
Information concerning non-IBM products was obtained from the suppliers of those products, their published
announcements or other publicly available sources. IBM has not tested those products and cannot confirm the
accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the
capabilities of non-IBM products should be addressed to the suppliers of those products.
This information contains examples of data and reports used in daily business operations. To illustrate them
as completely as possible, the examples include the names of individuals, companies, brands, and products.
All of these names are fictitious and any similarity to the names and addresses used by an actual business
enterprise is entirely coincidental.
COPYRIGHT LICENSE:
This information contains sample application programs in source language, which illustrate programming
techniques on various operating platforms. You may copy, modify, and distribute these sample programs in
any form without payment to IBM, for the purposes of developing, using, marketing or distributing application
programs conforming to the application programming interface for the operating platform for which the sample
programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore,
cannot guarantee or imply reliability, serviceability, or function of these programs.
© Copyright IBM Corp. 2012. All rights reserved. vii
Trademarks
IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines
Corporation in the United States, other countries, or both. These and other IBM trademarked terms are
marked on their first occurrence in this information with the appropriate symbol (® or ™), indicating US
registered or common law trademarks owned by IBM at the time this information was published. Such
trademarks may also be registered or common law trademarks in other countries. A current list of IBM
trademarks is available on the Web at http://www.ibm.com/legal/copytrade.shtml
The following terms are trademarks of the International Business Machines Corporation in the United States,
other countries, or both:
AIX® IMS™ Rational Team Concert™
CICS Explorer® Informix® Rational®
CICSPlex® Language Environment® Redbooks®
CICS® Lotus Notes® Redbooks (logo) ®
DataPower® Lotus® Symphony®
DB2® MVS™ System Storage®
developerWorks® NetView® System z®
DS8000® Notes® Tivoli®
GDPS® OMEGAMON® VTAM®
Geographically Dispersed Parallel Parallel Sysplex® WebSphere®
Sysplex™ QMF™ z/OS®
IA® Query Management Facility™ zEnterprise®
IBM® RACF® zSeries®
The following terms are trademarks of other companies:
Intel, Intel logo, Intel Inside logo, and Intel Centrino logo are trademarks or registered trademarks of Intel
Corporation or its subsidiaries in the United States and other countries.
Microsoft, Windows, and the Windows logo are trademarks of Microsoft Corporation in the United States,
other countries, or both.
Java, and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its
affiliates.
UNIX is a registered trademark of The Open Group in the United States and other countries.
Other company, product, or service names may be trademarks or service marks of others.
viii Architect’s Guide to IBM CICS on System z