As well as mainframes, Linux, of course, runs on desktops and servers. The Mac OS is based on Unix, but Android – found on millions of smartphones and tablets – is based on Linux.

So what divisions am I talking about? The division between big iron and little? Well not really. In fact, interestingly, the people at William Data Systems have come out with a way of monitoring Linux whether it’s on a mainframe or server somewhere else in the world. As long as it has an IP address, they have a way of monitoring it (using z/OS as the hub).

No, the first division I want to look at is the division between the USA (or North America, I should say) and Europe. The recent Arcati Mainframe Yearbook user survey (still freely available at www.arcati.com/newyearbook12) came up with some interesting results. The survey found that  70% of European sites surveyed didn’t have Linux, whereas only 28% of North American sites in the surveyed didn’t. That’s a huge difference. And if you were IBM, you might well be wondering why Linux isn’t selling into Europe so well as North America.

Let’s speculate. Is it that North America is well ahead of the curve in terms of take up of mainframe Linux? Is it that mainframe Linux is priced differently either side of the pond so it encourages the take up in the USA but not Europe? Or could it be that IFLs are marked up or down depending on whether the customer is EMEA-based or not? Are IFLs being bundled in with upgrades or not depending on where in the world you’re based? I have recently had some nudges and winks over prices, and it could well be that European mainframe users are being charged double what their US-based counterpart might expect to pay. I’d be interested to hear what figure people, who’ve recently negotiated with IBM, have haggled them down to. You might also wonder whether now is a good time to buy shares in SuSE, who have about an 80% share of the mainframe Linux market. Will we see it suddenly explode in Europe? Or not?

The other division that’s recently cropped up with Linux is how users navigate. I guess we’re all pretty much familiar with using drop-down menus to access what we want – and we can probably use them to find our way around familiar applications without even thinking about it. Even very young childen take to that way of navigating like it was second nature. But just recently we’ve seen the introduction of Heads Up Displays (HUDs) for Ubuntu’s Linux.

What you get is a sort of semi-transparent area at the top of the screen, which acts in some ways like the ribbon with Office. HUD provides a search style interface that uses a Vocabulary User Interface (VUI). Users start to type or say a command, and the HUD starts a smart look-ahead search through the application and system (indicator) menus. By combining fuzzy matching with a learning function, the HUD begins to ‘recognize’ the actions of each individual user.

If you want to give it a go, HUD will be available in Ubuntu 12.04 towards the end of April.

Now I’m guessing that, like Microsoft’s ribbon, and Marmite, users will either love it or hate it. The idea that it will use voice indicates to me that we’re back to the original Star Trek computer idea – a computer that you can talk to. This was an idea that went away for a while because, to be honest, voice reconition software just wasn’t up to the job. But now we’ve had Siri on iPhones for a while, and people are coming back to the idea that talking to a computer isn’t such a silly idea after all.

I’ve only spoken to one person who’s used the HUD and he was singing its praises. But he is very familiar with Linux and the Ubuntu distro, so maybe he had a clearer idea of what to ask the HUD to do for him – in terms of getting any work done – than, for example, I might have.

Perhaps one day we’ll see a HUD on mainframe Linux. And perhaps we’ll see more mainframe Linux sites in Europe, Middle East, and Africa. Or will the divisions continue?

At least that’s what IBM is saying, as second-year student Nathan Voth placed second in IBM’s Master the Mainframe contest.

Read more…

[Simcoe.Com]

This surprising result came from the 100 respondents who completed the survey on the Arcati Web site   between 1 November and 2 December 2011. 40% were from Europe and 50% from North America, with 10% from the rest of the world.

46% of the respondents worked in companies with upwards of 10,000 employees worldwide, while 10% of respondents had 0-200 staff, 6% had 201-1000, 28% had 1001 to 5000, and 10% had 5001-10,000 staff. In terms of MIPS, 34% of respondents had fewer than 1000 MIPS installed, 40% fell into the mid-sized category between 1000 and 10,000 MIPS, and 26% were at the high end.

Looking at MIPS growth produced some interesting results. Larger, more mature businesses (above 10,000 MIPS) were almost all experiencing some growth, but predominantly in 0 to 10% per year category. Sites in the 1000-10,000 MIPS range were showing a range of results with some sites suggesting a decline while others predicted growth of up to 50%. Sites below 1000 MIPS were experiencing a more complex future, with most expecting a small growth, but almost as many expecting no growth or negative growth (a business-speak euphemism for decline). The mainframe market does appear to be quite fragmented with competitive pressures at the lower end of the mainframe market, and some respondents commented about lack of understanding amongst management about the value of mainframe computing.

It was interesting to see that 6% of respondents had the zEnterprise z114s, with 19% having the z196s models installed. I expect that future surveys we’ll ask how sites are making use of the extra features on these models. Previous surveys have shown that there is a willingness amongst mainframes (especially larger ones) to purchase new models as they become available. In order to benefit from the new features

The big talking point during 2011 was cloud computing and whether mainframers really have been doing it since the 1960s and the impact of offering software (and anything else) as a service. The survey asked whether respondents currently used their mainframe for cloud computing. Just 12% (up from last year’s 2%) of respondents said they did. 34% said they didn’t, and the rest weren’t sure. It’s still early days for a cloud computing initiative to move off the PowerPoint slides and into the business environment, so the survey asked whether respondents were planning to adopt cloud computing as a strategy. 40% said they weren’t at present. Just 18% thought some mainframe applications would be cloud-enabled in the future. It will be interesting to follow these figures in future surveys.

The survey asked respondents which specialty processors (IFL, zIIP, and zAAP) they had. 16% of sites had all three (up from last year’s value of 6%) and a further 20% of sites had two of the three specialty processors (down from last year’s 28%). More sites had zIIP processors (48%) than any other. 36% had IFL processors, and 30% had zAAP specialty processors. 28% of sites don’t have a specialty processor installed.

The survey inquired about what proportion of enterprise data resides on the mainframe and what on other platforms. This produced, for the first year ever, the surprising result that more than half of the respondents use other platforms to manage the lion’s share of their corporate data. 44 percent of sites surveyed have more data on their mainframes, whereas 56 percent of the sites surveyed have more data stored on other platforms. Unfortunately, the survey was unable to drill down to find out why, but we can speculate that it may simply be the growth of data associated with the non-mainframe side of the business. It could be a result of the quantity of e-mails that organizations store for their staff. It could be that non-mainframe data is less well managed and ‘spreads’ into larger data sizes. Perhaps non-mainframe databases are less space efficient. Or maybe, people just create and save Excel spreadsheets and Word documents on Windows servers, where they wouldn’t keep equivalent files on mainframes. Or perhaps sites move their mainframe archive data off the mainframe, but still have it available online on, for example, a Linux distributed system. I’d be interested to hear yiour views on this.

The comments in the survey identified management ignorance of the power and benefits of using a mainframe. This is now a perennial reason given for the decline in mainframe computing within organizations. But cost was also highlighted as a factor mitigating against the successful growth of mainframe computing. One respondent suggested, “software costs are sinking the mainframe”.

Anyway, full details of the responses to many other questions can be found in the user survey section of the Yearbook. It’s well worth a read.

The Yearbook can only be free to mainframers because of the support given by sponsors. This year’s sponsors were: CA Technologies, Serena Software, Software AG, Software Diversified Services (SDS), Type80 Security Software, and William Data Systems.

What makes this annual publication so important? The answer is that it provides a one-stop shop for everything a mainframer needs to know. For example, the technical specification section includes model numbers, MIPS, and MSUs for zEnterprise processors (z196s and z114s). There’s also a hardware timeline, and a display of mainframe operating system evolution.

In addition, there’s the glossary of terminology section explaining simply what all those acronyms stand for, but in a way that means you can understand them.

One section provides a media guide for IBM mainframers. This includes information on newsletters, magazines, user groups, blogs, and social networking information resources for the z/OS environment. Amongst the things it highlights are zJournal, INSIGHT-SPECTRA, IBM Listservs, SHARE’s Five Minute Briefing on the Data Center, Facebook fan pages, and LinkedIn discussions. As well as user groups such as SHARE and IDUG.

The vendor directory section contains an up-to-date list of vendors, consultants, and service providers working in the z/OS environment. There’s a summary of the products they supply and contact information. There are a number of new organizations in the list this year, and, sadly, a few familiar names have ceased trading.

The mainframe strategy section contains articles by industry gurus and vendors on topics such as: Why incremental process-driven IT modernization is relevant for your business; Network management for the modern data centre; Next-generation mainframe management; Best practices for application release management; Peeling the onion of SFTP: options for securing file transfer to and from z/OS.

For many people the highlight each year is the mainframe user survey. This illustrates just what’s been happening at users’ sites. It’s a good way for mainframers to compare what they are planning to do with what other sites have done. I will be looking at some of the survey highlights in my next blog.

The other great thing about the Yearbook – as far as many of the 15,000 people who download it are concerned – is that it is completely FREE.

It can only be free because some organizations have been prepared to sponsor it or advertise in it. This year’s sponsors were: CA Technologies, Serena Software, Software AG, Software Diversified Services (SDS), Type80 Security Software, and William Data Systems.

To see this year’s Arcati Mainframe Yearbook, click on www.arcati.com/newyearbook12. If you don’t want to download a large PDF, again this year, each section is available as a separate PDF file.

Don’t miss out on this excellent publication.

January started the year, as most Januaries do, with the publication of the Arcati Mainframe Yearbook. The 2011 edition is still available for download from www.arcati.com/newyearbook11. The 2012 edition will be available in a couple of weeks. As always the Arcati Mainframe Yearbook  includes its annual user survey, an up-to-date directory of vendors and consultants, a media guide, a strategy section with papers on mainframe trends and directions, a glossary of terminology, and a technical specification section. And each year, it gets downloaded by around 15,000 mainframe professionals.

February saw the launch of the new series of Virtual IMS user group meetings. The user group is now sponsored by Fundi Software and hosted at www.fundi.com/virtualims. The first speaker was Jim Martin from Fundi Software, whose presentation was called, “Solving the problem when IMS isn’t the cause”.

In March, everyone seemed to be talking about cloud computing.

April’s meeting of the Virtual IMS user group included a presentation from Ron Haupert, a Senior Technologist with Rocket Software. His talk was called, “Simplify and improve database administration by leveraging your storage system”.

In May, Mark Lillycrop, Director of Arcati Ltd and I took part in a ‘Scheduled Chat’ in the ‘House of Mainframe’ section of CA’s May Mainframe Madness month. May also witnessed the launch of the new Virtual CICS user group – again sponsored by Fundi – with its Web site at www.fundi.com/virtualcics. Our opening presentation was from Fundi’s Jim Martin talking about, “Solving the problem when CICS isn’t the cause”.

In June, I was asked by ITToolbox to lead a discussion in the Data Center Infrastructure section of their Web site. At the Virtual IMS user group meeting, Gary Weinhold a Systems Engineer and Verna Bartlett Head of Marketing with Data Kinetics talked about, “MSU reduction due to in-memory table management with (any) IMS applications”.

In July, I was selected for the Destination z (www.destinationz.org/) member spotlight. The Virtual CICS user group saw a presentation from Jeff Geminder, Principal Consultant with CA, called, “Cross-enterprise application performance monitoring and CICS-specific drill-down: approaches to finding the performance problem needle in the heterogeneous haystack”. I was also a guest blogger on the Destination z Web site.

In August, my article CICS Top Performance and Tuning Issues was published in z/Journal. I had a guest blog published on Destination z. The Virtual IMS user group had a presentation from Scott Quillicy, CEO and Founder of SQData. His talk was called, “IMS replication for high-availability”.

For the September meeting, Charles Jones, from the Product Management group at Rocket Software, gave a talk to the Virtual CICS user group called, “CICS TS 4.2: Leveraging event processing and high-performance Java”. I wrote a guest blog for the Destination z Web site.

October saw a presentation from Rosemary Galvan, Principal Software Consultant – IMS, with BMC. Her talk to the Virtual IMS user group was called, “Database Performance – Could Have, Should Have, Would Have”. I had a guest blog on the Destination z Web site.

In November, my Mainframe Update blog at mainframeupdate.blogspot.com was a finalist in the Computer Weekly Social Media Awards 2011. Also in November the Arcati Mainframe Yearbook user survey was launched. And Eugene S Hudders, president of C\TREK Corp, gave a presentation to the Virtual CICS user group called, “CICS TS Performance – Tuning LSR Pools”. I also had a guest blog on the Destination z Web site.

And finally, in December, I had an article entitled, Ways to Save Money and Improve IT Services published in z/Journal. The final speaker for the year at the Virtual IMS user group was Suzie Wendler, a Consulting IT Specialist in the IBM IMS Advanced Technical Skills organization, who talked about, “IMS V12”. I chaired a webinar for SQData entitled, “How Important is Continous Availability of Critical Applications to Your Company?”And there was a guest blog on the Destination z Web site.

What else, well apart from a full year of writing and consultancy work,  I was made an IBM Champion for the third year running.

Looking forward to 2012, we have the launch of the Arcati Mainframe Yearbook in January, and a presentation from Andrew Smithson of IBM Hursley on CICS Transaction Gateway V8.1 for the Virtual CICS user group.

If you do celebrate it, Merry Christmas and a happy New Year. I’ll be back blogging in January.
Trevor Eddolls

Read more…

Read more…

I’ve been helping companies on both sides of the pond solve their data security problems for many years now. If I’ve learned one thing, it’s this: when I go into an organization that runs Windows, there’s little question of the need for data security. The organization knows it and so do I. When I visit a company whose IT infrastructure revolves around a mainframe, however, the mindset is often quite the opposite. In fact, the biggest data security misconception I encounter is the belief that the mainframe environment is inherently secure. Most IT staff view the mainframe as just another network node. Why? Because it’s universally perceived as a closed environment and, therefore, invulnerable to hackers.

In some cases, it’s the mainframe IT pros who hold this conviction. In other instances, it’s the executive management team. Lack of management attention allows “bad practices” to continue. I can tell you this without reserve: data stored in mainframes needs protection just as much as sensitive information stored on a Windows server or anywhere else. And, as systems continue to support more data, users, applications, and services, effective security management in the mainframe environment becomes significantly more difficult.

News flash: mainframes can be hacked!

For that simple reason, mainframe security should not be taken for granted.

Even though the mainframe is a mature platform, there is a real shortage of mainframe-specific security skills in the market. And, the few mainframe security practitioners who are out there spend a lot of time implementing configuration and controls within their environments as well as putting into place security systems like RACF, which provide access control and auditing functionality. As for other security measures, in my experience, the mainframe people know about encryption, but they’re not terribly aware of newer data security techniques like tokenization as it relates to protecting data within the mainframe environment and beyond.

Tokenization is a data security model that substitutes surrogate values for sensitive information in business systems. A rapidly rising method for reducing corporate risk and supporting compliance with data security standards and data privacy laws, it can be used to protect cardholder information as well as Personally Identifiable Information (PII) and Protected Health Information (PHI).

In fact, for companies that need to comply with the Payment Card Industry’s Data Security Standard (PCI DSS), tokenization has been lauded for its ability to reduce the cost of compliance by taking entire systems out of scope for PCI assessments. And, even in companies that do not deal with PCI DSS or other mandates, tokenization has proven effective for managing the duplication of data across LPARs and for facilitating the usage of potentially sensitive data for development purposes.

Too often, compliance audits skim over mainframe control weaknesses and there are also fewer mainframe-specific security guidelines. But this does not mean that significant risk is not there. You can apply a risk-based, defence-in-depth approach within the mainframe environment by using stronger mainframe host security controls and by using tokenization to protect the data itself.

To beef up data security on a mainframe, here’s my advice:

1. Bring in mainframe security experts to identify and remediate risks, and to develop and enforce security policies and procedures.
2. Develop in-house capabilities and skilled professionals across the mainframe platform to support security initiatives.
3. Evaluate available security configuration and administration tools – there are some really good ones out there.
4. Apply an in-depth security strategy that includes secure access and authentication controls, and use them appropriately.
5. Adopt encryption and tokenization to protect sensitive information. Through their proper implementation, it’s really not that hard to achieve a true high level of protection within the mainframe environment.

Protecting sensitive and/or business-critical data is essential to a company’s reputation, profitability, and business objectives. In today’s global market, where business and personal information know no boundaries, traditional point solutions that protect certain devices or applications against specific risks are insufficient to provide cross-enterprise data security. Combining encryption and tokenization, along with centralized key management, as part of a corporate data protection programme works well – including in mainframe-centric environments – for protecting information while reducing corporate risk and the cost of compliance with data security mandates and data privacy laws.

Don’t be fooled: your mainframe isn’t inherently secure. Doing nothing is no longer an option!

Thanks Peter for your guest blog.
And remember, there’s still time to complete the mainframe user survey or place a vendor entry in the Arcati Mainframe Yearbook 2012.

Eddolls, blog, mainframe, security, Peter, Goldberg, Liaison, Technologies, Windows, hacked, RACF, encryption, tokenization, PII, PHI, PCI DSS, audits

When IBM introduced the zEnterprise in July 2010, the company also announced plans to deliver additional general-purpose blades for the IBM zEnterprise BladeCenter Extension including IBM System x-based blades running Linux in 2011. IBM also suggested it would support Windows, and in April 2011 it confirmed its plans to deliver Windows support on z/Enterprise.

Read more…

Its epitaph was written long ago. Universities rusticated mainframe from their curriculum decades back, thinking that skinny personal computers will drive out the bulky box that needs almost a whole room and all the paraphernalia, not to speak of a dedicated team of eternally confounded operators, to run it. But now, the storied PCs are on their way out, but the ‘big iron’ is firmly stay put, though a lot slimmer and trimmer.

Read more…