Re: WORM backup tapes block ransomeware attacks?

2025-04-08 Thread Timothy Sipples
>A hypothetical IT department wants all tape systems, including >z/OS, to turn on WORM (Write Once Read Many) so that the tapes >are immutable. The reason is for prevention of ransomware attaches >from altering backup data. >My question is: how does this help? If an attacker has the access and >aut

Re: Migrating Storage pools to EAV

2025-04-08 Thread Radoslaw Skorupka
Well, IBM documentation says: Almost all types of data sets are EAS-eligible, including the following: • SMS and non-SMS-managed VSAM data sets (all types), including: – BCS and VVDS catalog data sets. – VSAM data sets inherited from prior physical migrations or copies. – VSAM temporary data sets.

Re: If there an IPCS verb which displays dynamic exits?

2025-04-08 Thread Williams, George T (CTR)
>From Microsoft Bing: To list dynamic exits using the ipcs command in a Unix-like operating system, you can use the following command: ipcs -d This command will display information about dynamic exits, including their identifiers, owners, and other relevant details. If you need more specific i

Re: WORM backup tapes block ransomeware attacks?

2025-04-08 Thread Radoslaw Skorupka
W dniu 08.04.2025 o 21:11, Schmitt, Michael pisze: A hypothetical IT department wants all tape systems, including z/OS, to turn on WORM (Write Once Read Many) so that the tapes are immutable. The reason is for prevention of ransomware attaches from altering backup data. My question is: how doe

Assuming two members of a DB2 data sharing group are running on the same LPAR ....

2025-04-08 Thread Binyamin Dissen
... and a DSNRLI IDENTIFY is issued against the Group Attach Name, what is the rule which indicates which member it will be assigned to? -- Binyamin Dissen http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel -

Re: WORM backup tapes block ransomeware attacks?

2025-04-08 Thread Tomer Zelberzvig
I think you're right potentially there's nothing that would prevent an attacker from altering the tape catalog. That's why you should keep your meta-data close to the data itself in an immutable storage. For example, with BMC AMI Cloud Vault you can backup your data to an immutable object stora

Re: Backup options for z/OS

2025-04-08 Thread Tomer Zelberzvig
You also have an alternative to DFSMShsm to perform your data management tasks, BMC AMI Cloud Data (fka Model9) provide full data management suite for z/OS. It leverages cloud object storage technology to storage the outputs of the backup/archive activities. More information could be found here

Re: WORM backup tapes block ransomeware attacks?

2025-04-08 Thread Rupert Reynolds
I have no special knowledge, but, if I were asked to implement this, I'd want to combine write once with some kind of monitoring of usual change patterns, and some kind of test 'restore' that checks the sanity of data. That should improve the odds. I *do* know of cases where corrupted data was al

WORM backup tapes block ransomeware attacks?

2025-04-08 Thread Schmitt, Michael
A hypothetical IT department wants all tape systems, including z/OS, to turn on WORM (Write Once Read Many) so that the tapes are immutable. The reason is for prevention of ransomware attaches from altering backup data. My question is: how does this help? If an attacker has the access and autho

Re: If there an IPCS verb which displays dynamic exits?

2025-04-08 Thread Binyamin Dissen
Thanks. On Tue, 8 Apr 2025 18:53:55 + James Mulder wrote: :> In SYS1.SBLSCLI0 I see compiled Rexx execs named CSVDYNXI and CSVLNKLS. They are undocumented and unsupported. :> :>Jim Mulder :> :>-Original Message- :>From: IBM Mainframe Discussion List On Behalf Of Binyamin Disse

Re: If there an IPCS verb which displays dynamic exits?

2025-04-08 Thread James Mulder
In SYS1.SBLSCLI0 I see compiled Rexx execs named CSVDYNXI and CSVLNKLS. They are undocumented and unsupported. Jim Mulder -Original Message- From: IBM Mainframe Discussion List On Behalf Of Binyamin Dissen Sent: Tuesday, April 8, 2025 2:06 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject:

Re: If there an IPCS verb which displays dynamic exits?

2025-04-08 Thread Adam Johanson
With proper credit to Ed Jaffe's recent SHARE Bit Bucket presentation, doing an IEAVHELP shows a bunch of undocumented and unsupported REXX execs. IEAVHELP lists both of the ones that Jim mentioned. === Adam Johanson Broadcom Mainframe Software Division -

Re: If there an IPCS verb which displays dynamic exits?

2025-04-08 Thread rpinion865
That is what I thought. "Confidentially doc, I am the wabbit." Bugs Bunny Sent with Proton Mail secure email. On Tuesday, April 8th, 2025 at 2:51 PM, Binyamin Dissen <0662573e2c3a-dmarc-requ...@listserv.ua.edu> wrote: > Referring to zOS IPCS, a completely different animal. > > On Tue,

Re: If there an IPCS verb which displays dynamic exits?

2025-04-08 Thread Binyamin Dissen
Referring to zOS IPCS, a completely different animal. On Tue, 8 Apr 2025 18:10:47 + "Williams, George T (CTR)" <07d2a7d27269-dmarc-requ...@listserv.ua.edu> wrote: :>From Microsoft Bing: :>To list dynamic exits using the ipcs command in a Unix-like operating system, you can use the follo

If there an IPCS verb which displays dynamic exits?

2025-04-08 Thread Binyamin Dissen
I guess I might need to hunt down the control blocks. -- Binyamin Dissen http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel -- For IBM-MAIN subscribe / signoff / archive access instructions, send emai

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread Bfishing
There was a pre-session that started at 10am ET. It was not easy to find, and they had issues broadcasting it as well. Thankfully they would seem to have it figured out, and you can go back to see recordings of it now too. On Tue, Apr 8, 2025 at 9:35 AM Phil Smith III wrote: > Well, I just got

Re: Assuming two members of a DB2 data sharing group are running on the same LPAR ....

2025-04-08 Thread Binyamin Dissen
That is what I would have thought, but it does not always appear that way. I was wondering if this is documented somewhere. On Tue, 8 Apr 2025 18:57:28 +0200 salva wrote: :> I guess it's the first one on the IEFSSN/SSVT list. :>El mar, 8 abr 2025 a las 17:59, Binyamin Dissen (< :>0662573e2

Re: Migrating Storage pools to EAV

2025-04-08 Thread salva
David, have you changed your Dataclass to extended format? Non-extended PS & VS will be allocated on track-managed space (cyl < 65520) on EAV vols. Regards, salva. El vie, 4 abr 2025 a las 16:20, Jousma, David (< 01a0403c5dc1-dmarc-requ...@listserv.ua.edu>) escribió: > So, we are finally bi

Re: RMM automatically adds the volumes

2025-04-08 Thread PARKER MATHEWSON
Hi Radoslaw, RMM no longer recommends using REJECT commands for this purpose. In the Implementation and Customization Guide, in Chapter 8, you can find the replacement functionality through OPENRULE and PRTITION statements Here is an excerpt from the book: Note: While the REJECT command is stil

Re: deliverycb-mul.dhe.ibm.com IP resolution issue?

2025-04-08 Thread Lucas Rosalen
Just for completeness, we understand now what happened: 1. Jun/2022 - the delivery servers IP addresses changed to the ones described in https://www.ibm.com/support/pages/ibm-software-electronic-delivery-servers-change 2. Nov/2023 - the 129.35.xxx.xxx IP addresses changed as described in https://w

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread Phil Smith III
Well, I just got email saying it's in 30 minutes, so... Timezones are hard. /s -Original Message- From: IBM Mainframe Discussion List On Behalf Of Pommier, Rex Sent: Tuesday, April 8, 2025 9:32 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), M

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread Allan Staller
Classification: Confidential Most likely resource-link. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Binyamin Dissen Sent: Tuesday, April 8, 2025 3:53 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More [CAUTION:

Re: Migrating Storage pools to EAV

2025-04-08 Thread Jousma, David
Thanks for this! Worth looking into. I was hoping the pixie dust wouldn’t cost extra, but I shouldn’t be surprised. Dave Jousma Vice President | Director, Technology Engineering From: IBM Mainframe Discussion List on behalf of rpinion865 <042a019916dd-dmarc-requ...@listserv.ua.edu>

Re: Migrating Storage pools to EAV

2025-04-08 Thread Allan Staller
Classification: Confidential You pays me now or you pays me later... But you still pay. You pays you money and takes your choice. Perhaps an incremental approach. Create a set of "small" eavs" and have some pain. Later create a set of "medium eavs" and have a little more paint. Create a set of "

Re: RMM automatically adds the volumes

2025-04-08 Thread Radoslaw Skorupka
To clarify: ftp is not an option. Regarding security issues - I'm allowed to read the data on both systems and I am the RACF guy on both. Last, but not least, it is not production data. While data security is quite interesting topic, it is not an issue here. -- Radoslaw Skorupka Lodz, Poland

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread P H
In the past, PoPs was available at General Availability (GA). For the z17 GA is on 18th June 2025. From: IBM Mainframe Discussion List on behalf of Binyamin Dissen <0662573e2c3a-dmarc-requ...@listserv.ua.edu> Sent: 08 April 2025 09:52 To: IBM-MAIN@LISTSERV

IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread Timothy Sipples
Here are the many IBM Z-related announcement letters… https://www.ibm.com/docs/en/announcements/z17-makes-more-possible https://www.ibm.com/docs/en/announcements/preview-zos-32 https://www.ibm.com/docs/en/announcements/technology-transition-offerings-z17-offer-price-performance-advantages https

Re: RMM automatically adds the volumes

2025-04-08 Thread Jousma, David
However I noticed every tape volume I read was automatically added to RMM database, which I don't want. Q: How to prevent it? >>Don’t read the tapes directly, FTP the contents from one environment to the >>other. Separately, Doing what you did is likely a security exposure if you >>are not s

RMM automatically adds the volumes

2025-04-08 Thread Radoslaw Skorupka
The following scenario: VTS shared among several z/OS monoplex systems. Each system has it's own set of tape categories in DEVSUPxx. I had to read multiple tape volumes from other system. So I temporarily added the volumes to the VOLCAT, disabled "REJECT ANYUSE(*)" in EDGRMMxx and I read the ta

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread גדי בן אבי
I'm sure you know that this announcement is for the large version of the z17. If things go the way they've gone in the past, we'll have to wait for about a year for the small version. From: IBM Mainframe Discussion List on behalf of Jay Maynard <05997213d6c

Re: deliverycb-mul.dhe.ibm.com IP resolution issue?

2025-04-08 Thread Lucas Rosalen
Thanks Alex. The only problem is that we do not select the servers where we download maintenance from. We select an IBM server to place the order (either eccgw01.boulder.ibm.com or eccgw02.rochester.ibm.com), then you order is automatically placed in one of the download servers (the ones in IBM So

Re: Migrating Storage pools to EAV

2025-04-08 Thread Radoslaw Skorupka
W dniu 07.04.2025 o 21:54, Mike Schwab pisze: Total number of extents is limited to ?253? over multiple volumes. No, it isn't. It *was* for VSAM datasets (123 per volume, 255 total ...minus 4), but it is no longer true for VSAM with proper DC parameter. And it was never true for PS, basic, la

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread Timothy Sipples
Binyamin Dissen asks: > Where might I find the new POPs? Not posted yet AFAIK, but I don't think that's unusual. The IBM z17 documentation library should appear in due course here: https://www.ibm.com/docs/en/systems-hardware/zsystems I assume the new Principles of Operation book will be IBM Pu

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread Jay Maynard
Yay! We've been working to specify a shiny new z16-AGZ to replace our z14 ZR1, which, due to our purchasing process, would arrive about the beginning of September. Now we get to deep dive into this to see if we want to get a z17 instead, or if we even can. On Mon, Apr 7, 2025 at 11:01 PM Timothy S

Webcast: Validated Boot for z/OS, Secure Boot for Linux

2025-04-08 Thread Timothy Sipples
I’m hosting a 60 minute Webcast at 11:00 AM Singapore Time (03:00 UTC) on Friday, April 25, 2025, called “Protecting z/OS with Validated Boot and Linux with Secure Boot.” Dave Surman, an IBM Distinguished Engineer in z/OS operating system development, is the main speaker and presenter. If you’d

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread Binyamin Dissen
Where might I find the new POPs? On Tue, 8 Apr 2025 03:59:52 + Timothy Sipples wrote: :>Here are the many IBM Z-related announcement letters… :> :>https://www.ibm.com/docs/en/announcements/z17-makes-more-possible :> :>https://www.ibm.com/docs/en/announcements/preview-zos-32 :> :>https://www.

Re: IBM Announces the IBM z17, z/OS 3.2 (Preview), Much More

2025-04-08 Thread P H
For those who want technical details of the z17, these can be found in the Redbooks: https://www.redbooks.ibm.com/feature/z17 From: IBM Mainframe Discussion List on behalf of Timothy Sipples Sent: 08 April 2025 04:59 To: IBM-MAIN@LISTSERV.UA.EDU Subject: IB

deliverycb-mul.dhe.ibm.com IP resolution issue?

2025-04-08 Thread Lucas Rosalen
Hello fellas, We have a strange behavior when attempting to download maintenance use SMPE Receive Order. As indicated here ( https://www.ibm.com/support/pages/ibm-software-electronic-delivery-servers-change), our firewall has been opened for: deliverycb-mul.dhe.ibm.com - 129.35.224.118 deliverycb