Migration
This appendix describes pre-migration tasks and the necessary migration steps to move from IBM z/OS Management Facility (z/OSMF) V1.13 to the new level of z/OSMF V2R3. Other post-migration steps are also described.
The appendix includes the following topics:
A.1 Pre-migration issues
This section provides an overview of the steps that you must consider before you can start the migration to z/OSMF V2R3. Because the Repository Authorization Mode in z/OSMF was discontinued, you must ensure that your security setup is in SAF Authorization Mode before migrating to z/OSMF versions 2.1 or 2.3.
In this section, we briefly review the command flow. If your z/OSMF configuration is converted to the SAF Authorization Mode, see A.1.2, “Software and miscellaneous prerequisites” on page 538.
Some software prerequisites are listed in this appendix.
A.1.1 Converting from Repository Authorization Mode to SAF Authorization Mode
If you are running in a z/OSMF before V2R1, convert your z/OSMF to the new SAF Authorization Mode by completing the full z/OSMF V1.13 configuration with the following exceptions:
1. Create an override file that contains the configuration variable, as shown in Example A-1.
Example A-1 Override configuration variable for SAF Authorization Mode
IZU_AUTHORIZATION_MODE=SAF
During the izusetup.sh -config -overridefile ... process, the following REXX execs are created:
– izuconfig.cfg.rexx
– izuconfig.cfg.convertREPtoSAF.rexx
The REXX exec izuconfig.cfg.convertREPtoSAF.rexx contains all the RACF definitions that are required for z/OSMF to run in SAF Authorization Mode. It is sufficient to run only this REXX exec. However, if you want to run all the RACF definitions again (including the new RACF definitions for the SAF Authorization Mode), you also can run the izuconfig.cfg.rexx REXX exec.
2. Run the izusetup.sh -verify racf | -prime | -finish script to complete the z/OSMF configuration.
For more information about configuring z/OSMF at the z/OS V1R13 level, see IBM z/OS Management Facility Configuration Guide, SA38-0652.
A.1.2 Software and miscellaneous prerequisites
Consider the following points before you perform the migration of z/OSMF V2R1:
•z/OSMF V2R1 requires Java Version 1.7 64-bit.
•z/OSMF V1R13 WebSphere OEM ports are no longer used:
– With z/OSMF V2R1, the HTTP/S default ports are changed to 80 and 443.
– If possible, change your TCP/IP PORT definitions to use the same ports for HTPP/S as before. If you use the same port numbers for z/OSMF V2R1, consider changing them back in case a fallback to z/OSMF V1.13 occurs.
|
Tip: Use your TCP/IP port definitions for 32207 and 32208 and change the following z/OSMF variables:
IZU_HTTP_SSL_PORT=39208
IZU_HTTP_PORT=39207
|
•With z/OS V2R1, a new HLQLONG parameter in CEAPRMxx supports a longer HLQ for CEA logging data sets. With HLQLONG CEA, the length of the HLQ is increased from four to eight characters.
•z/OSMF installation user ZOSMFAD is no longer required to run the configuration scripts. The user that is running the installation (the configuration script) must be defined to RACF group IZUADMIN, as UID(0), or to the BPX.SUPERUSER profile.
Also, review the UNIXPRIV class privileges for SUPERUSER.**. Later during the z/OSMF configuration, a RACF REXX exec is created for the installation user. Run this REXX exec to complete the RACF definitions for this z/OSMF V2R1 installation user. Typically, you can use your defined TSO here.
•Check your installation if you use PassTickets for secure communication with a remote server. The Capacity Provisioning and Resource Monitoring plug-ins are use PassTickets authentication against the CIM server.
As with the z/OSMF V1.13 WebSphere OEM servant user ID (the default user ID name is WSSRU1), the z/OSMF server user ID (the default user ID name is IZUSVR) must be authorized to create PassTickets:
– UPDATE access for IRRPTAUTH.CFZAPPL.* in RACF class PTKTDATA for the Capacity Provisioning plug-in.
– UPDATE access for IRRPTAUTH.GPMSERVE.* in RACF class PTKTDATA for the Resource Monitoring plug-in.
•z/OSMF V2R1 delivers two new started task procedures, one for the z/OSMF server and one for the WebSphere Liberty Profile. Ensure that you define these new tasks in your RACF STARTED class and assign the z/SOMF user (IZUSVR) to the STARTED profile. The following procedure names are used:
– IZUANG1: The WebSphere Liberty Profile.
– IZUSVR1: The z/OSMF server.
A.2 Migrating the configuration file to the new release level
Run the migration script from an OMVS or a telnet/login session. You can migrate the configuration file or the override file separately or you can migrate both files at the same time.
A.2.1 Running the izumigrate.sh script
To migrate the configuration and override files concurrently, run the command that is shown in Example A-2.
Example A-2 izumigrate.sh script example
./izumigrate.sh -file /etc/zosmf/izuconfig1.cfg -overridefile /etc/zosmf/izuconfig1.ovr
The migrate script saves the configuration and override files with new names by using the suffix *.V1R13, as shown in the /etc/zosmf directory that is shown in Example A-3.
Example A-3 Saved configuration and override file name
izuconfig1.cfg.V1R13
izuconfig1.ovr.V1R13
A.2.2 Log and reports
The script creates the following log file and report files in the IZU_LOGFILE_DIR directory:
•izumigrate.mm.dd.yy.hh.mm.ss.log
•izumigration.report
•izumigration.report.mm.dd.yy.hh.mm.ss
The report files are divided into sections: one for the configuration file and one for the override file. Also, each section includes the following parts:
•Removed properties
•Added properties
•Updated properties
The properties list includes the names of the configuration file and override file variables that are removed, added, and updated with z/OSMF V2R1. The complete sample output of a migration report file is shown in Example A-4.
Example A-4 Sample output of the izumigrate script report file
/* ------------------------------------------------------------------ */
/* Licensed Materials - Property of IBM */
/* 5610-A01 */
/* Copyright IBM Corp. 2010, 2013 */
/* */
/* Status = HSMA210 */
/* ------------------------------------------------------------------ */
/* */
/* ------------------------------------------------------------------ */
/* */
/* Exec Name : izumigration.report */
/* */
/* Description : z/OSMF migration report. */
/* */
/* ------------------------------------------------------------------ */
/* Change History : */
/* Date Description Prgmr Ch Flg */
/* ---------- ---------------------------------------- ---------- ------ */
/* 2011-10-07 New puiam */
/* */
/*************************************************************************/
/*-----------------------------------------------------------------------*/
Invocation command: ./izumigrate.sh -file /etc/zosmf/izuconfig1.cfg -overridefile /etc/zosmf/izuconfig1.ovr
User ID: OMVS
Date: 07.01.13
Time: 13.42.55
The following environment variables were in effect during the creation
of this report file:
IZU_CODE_ROOT=/usr/lpp/zosmf/V2R1
IZU_CONFIG_DIR=/etc/zosmf
IZU_LOGFILE_DIR=/var/zosmf/configuration/logs
/*-----------------------------------------------------------------------*/
/*-----------------------------------------------------------------------*/
Configuration File Processing
-----------------------------
Previous configuration file was saved as: "/etc/zosmf/izuconfig1.cfg.V1R13"
Updated configuration file was created as: "/etc/zosmf/izuconfig1.cfg"
The complete list of properties contained in the default configuration file for the current release of z/OSMF are:
IZU_CONFIG_FILE_VERSION=2.1.0
IZU_DATA_DIR=/var/zosmf/data
IZU_DATA_FS_NAME=IZU.SIZUDATA
IZU_DATA_FS_TYPE=ZFS
IZU_DATA_FS_VOLUME='*'
IZU_DATA_FS_SIZE=200
IZU_AUTOUID_OVERRIDE=NO.DEFAULT.VALUE
IZU_AUTOGID_OVERRIDE=NO.DEFAULT.VALUE
IZU_ADMIN_GROUP_NAME=IZUADMIN
IZU_ADMIN_GROUP_GID=9003
IZU_USERS_GROUP_NAME=IZUUSER
IZU_USERS_GROUP_GID=9004
IZU_HTTP_SSL_PORT=32208
IZU_APPSERVER_HOSTNAME=NO.DEFAULT.VALUE
IZU_CIM_ADMIN_GROUP_NAME=CFZADMGP
IZU_CIM_USER_GROUP_NAME=CFZUSRGP
IZU_ZOS_SECURITY_ADMIN_GROUP_NAME=IZUSECAD
IZU_ZOS_SECURITY_ADMIN_GROUP_GID=9006
IZU_UNAUTHENTICATED_GROUP_NAME=IZUUNGRP
IZU_UNAUTHENTICATED_GROUP_GID=9012
IZU_CA_CONFIGURE=NO.DEFAULT.VALUE
IZU_CP_CONFIGURE=NO.DEFAULT.VALUE
IZU_CP_QUERY_GROUP_NAME=CPOQUERY
IZU_CP_CONTROL_GROUP_NAME=CPOCTRL
IZU_DM_CONFIGURE=NO.DEFAULT.VALUE
IZU_IL_CONFIGURE=NO.DEFAULT.VALUE
IZU_IL_CEA_CONFIGURE=Y
IZU_CEA_HLQ='CEA'
IZU_COUNTRY_CODE=NO.DEFAULT.VALUE
IZU_BRANCH_CODE=NO.DEFAULT.VALUE
IZU_STORAGE_VALUE=NO.DEFAULT.VALUE
IZU_CEAPRM_SOURCE_PARMLIB=SYS1.PARMLIB
IZU_CEAPRM_TARGET_PARMLIB=SYS1.PARMLIB
IZU_IEADMC_SOURCE_PARMLIB=SYS1.SAMPLIB
IZU_IEADMC_TARGET_PARMLIB=SYS1.PARMLIB
IZU_CEA_PARM_NAME=01
IZU_IEA_PARM_NAME=ZM
IZU_WISPF_CONFIGURE=NO.DEFAULT.VALUE
IZU_RMF_CONFIGURE=NO.DEFAULT.VALUE
IZU_WLM_CONFIGURE=NO.DEFAULT.VALUE
IZU_WLM_GROUP_NAME=WLMGRP
Plug-in Configuration Property
--------------------------------------------
Configuration Assistant = IZU_CA_CONFIGURE
Incident Log = IZU_IL_CONFIGURE
Workload Management = IZU_WLM_CONFIGURE
Resource Monitoring = IZU_RMF_CONFIGURE
Capacity Provisioning = IZU_CP_CONFIGURE
ISPF = IZU_WISPF_CONFIGURE
Software Deployment = IZU_DM_CONFIGURE
/*-----------------------------------------------------------------------*/
/*-----------------------------------------------------------------------*/
Removed Properties
------------------
The following properties are removed from the updated configuration file.
These properties are no longer supported in the current release of z/OSMF.
In the list below, each property is shown with its value as specified in
the previous configuration file. This value is either an installation
supplied value, if one was specified, or the IBM default value.
IZU_SMS_CONFIGURE=Y
IZU_STORAGE_GROUP_NAME=ZOSMFSTG
IZU_STORAGE_GROUP_GID=502009005
IZU_AUTHORIZATION_MODE=SAF
IZU_WAS_CONFIG_FILE_KNOWN=Y
IZU_WAS_CONFIG_FILE_LOCATION=/etc/zWebSphereOEM/V7R0/conf/CONFIG1/CONFIG1.responseFile
IZU_APPSERVER_GROUP=BBNCFG1
IZU_APPSERVER_ROOT=/zWebSphereOEM/V7R0/config1
IZU_WAS_PROFILE_PREFIX=BBNBASE
IZU_CLUSTER_TRANSITION_NAME=BBNC001
IZU_CELL_SHORT_NAME=BBNBASE
IZU_CONTROL_USERID=BBNCRU1
IZU_SERVANT_USERID=BBNSRU1
IZU_ORB_PORT=39203
IZU_WBEM_ROOT=/usr/lpp/wbem
IZU_ADMIN_NAME=ZOSMFAD
IZU_ADMIN_UID=502009001
IZU_ADMIN_HOME=/u/zosmfad
IZU_ADMIN_PROGRAM=/bin/sh
IZU_ADMIN_PROC=TSOLOGON
IZU_ADMIN_ACCOUNT=1111
Added Properties
----------------
The following properties are added to the updated configuration file.
These properties are new for z/OSMF since the time of your last
configuration. In the list below, each property is shown with its
IBM default value, unless a value from your previous configuration applies
to an added property. In this case, your value is used in its place.
IZU_ZOS_SECURITY_ADMIN_GROUP_NAME=IZUSECAD
IZU_ZOS_SECURITY_ADMIN_GROUP_GID=9006
IZU_UNAUTHENTICATED_GROUP_NAME=IZUUNGRP
IZU_UNAUTHENTICATED_GROUP_GID=9012
IZU_STARTED_TASK_USERID_NAME=IZUSVR
IZU_STARTED_TASK_USERID_UID=9010
IZU_STARTED_TASK_HOME=/u/izusvr
IZU_STARTED_TASK_PROGRAM=/bin/sh
IZU_SAF_PROFILE_PREFIX=IZUDFLT
IZU_DEFAULT_CERTAUTH=Y
IZU_UNAUTHENTICATED_NAME=IZUGUEST
IZU_UNAUTHENTICATED_UID=9011
IZU_HTTP_PORT=80
Updated Properties
------------------
The following properties have been updated in the configuration file for the
current release.
IZU_CONFIG_FILE_VERSION=2.1.0
/*-----------------------------------------------------------------------*/
The migration of the configuration file has completed.
/*-----------------------------------------------------------------------*/
Override File Processing
------------------------
Previous override file was saved as: "/etc/zosmf/izuconfig1.ovr.V1R13"
Updated override file was created as: "/etc/zosmf/izuconfig1.ovr"
The complete list of properties contained in the default override file for the current release of z/OSMF are:
IZU_OVERRIDE_FILE_VERSION=2.1.0
IZU_DATA_DIR=/var/zosmf/data
IZU_DATA_FS_NAME=IZU.SIZUDATA
IZU_DATA_FS_TYPE=ZFS
IZU_DATA_FS_VOLUME='*'
IZU_DATA_FS_SIZE=200
IZU_AUTOUID_OVERRIDE=NO.DEFAULT.VALUE
IZU_AUTOGID_OVERRIDE=NO.DEFAULT.VALUE
IZU_ADMIN_GROUP_NAME=IZUADMIN
IZU_ADMIN_GROUP_GID=9003
IZU_USERS_GROUP_NAME=IZUUSER
IZU_USERS_GROUP_GID=9004
IZU_HTTP_SSL_PORT=32208
IZU_APPSERVER_HOSTNAME=NO.DEFAULT.VALUE
IZU_CIM_ADMIN_GROUP_NAME=CFZADMGP
IZU_CIM_USER_GROUP_NAME=CFZUSRGP
IZU_ZOS_SECURITY_ADMIN_GROUP_NAME=IZUSECAD
IZU_ZOS_SECURITY_ADMIN_GROUP_GID=9006
IZU_UNAUTHENTICATED_GROUP_NAME=IZUUNGRP
IZU_UNAUTHENTICATED_GROUP_GID=9012
IZU_CA_CONFIGURE=NO.DEFAULT.VALUE
IZU_CP_CONFIGURE=NO.DEFAULT.VALUE
IZU_CP_QUERY_GROUP_NAME=CPOQUERY
IZU_CP_CONTROL_GROUP_NAME=CPOCTRL
IZU_DM_CONFIGURE=NO.DEFAULT.VALUE
IZU_IL_CONFIGURE=NO.DEFAULT.VALUE
IZU_IL_CEA_CONFIGURE=Y
IZU_CEA_HLQ='CEA'
IZU_COUNTRY_CODE=NO.DEFAULT.VALUE
IZU_BRANCH_CODE=NO.DEFAULT.VALUE
IZU_STORAGE_VALUE=NO.DEFAULT.VALUE
IZU_CEAPRM_SOURCE_PARMLIB=SYS1.PARMLIB
IZU_CEAPRM_TARGET_PARMLIB=SYS1.PARMLIB
IZU_IEADMC_SOURCE_PARMLIB=SYS1.SAMPLIB
IZU_IEADMC_TARGET_PARMLIB=SYS1.PARMLIB
IZU_CEA_PARM_NAME=01
IZU_IEA_PARM_NAME=ZM
IZU_WISPF_CONFIGURE=NO.DEFAULT.VALUE
IZU_RMF_CONFIGURE=NO.DEFAULT.VALUE
IZU_WLM_CONFIGURE=NO.DEFAULT.VALUE
IZU_WLM_GROUP_NAME=WLMGRP
IZU_STARTED_TASK_USERID_NAME=IZUSVR
IZU_STARTED_TASK_USERID_UID=9010
IZU_STARTED_TASK_HOME=/u/izusvr
IZU_STARTED_TASK_PROGRAM=/bin/sh
IZU_SAF_PROFILE_PREFIX=IZUDFLT
IZU_DEFAULT_CERTAUTH=Y
IZU_UNAUTHENTICATED_NAME=IZUGUEST
IZU_UNAUTHENTICATED_UID=9011
IZU_HTTP_PORT=80
If a property was removed from the current release of z/OSMF and it was found
in your override file, the migration process will remove that property from your
override file.
If a property has been added to the current release of z/OSMF and it corresponds
to a property in your override file, that property will be added to your
override file with your existing value.
Plug-in Configuration Property
--------------------------------------------
Configuration Assistant = IZU_CA_CONFIGURE
Incident Log = IZU_IL_CONFIGURE
Workload Management = IZU_WLM_CONFIGURE
Resource Monitoring = IZU_RMF_CONFIGURE
Capacity Provisioning = IZU_CP_CONFIGURE
ISPF = IZU_WISPF_CONFIGURE
Software Deployment = IZU_DM_CONFIGURE
/*-----------------------------------------------------------------------*/
/*-----------------------------------------------------------------------*/
Removed Properties
------------------
The following properties have been removed from the override file for the
current release and are no longer supported. The properties are displayed
with their default values unless a corresponding value was found in your
override file. In this case, your value is used in its place.
IZU_SMS_CONFIGURE=Y
IZU_STORAGE_GROUP_NAME=ZOSMFSTG
IZU_STORAGE_GROUP_GID=502009005
IZU_ADMIN_NAME=ZOSMFAD
IZU_ADMIN_UID=502009001
IZU_ADMIN_HOME=/u/zosmfad
IZU_ADMIN_PROGRAM=/bin/sh
IZU_ADMIN_PROC=TSOLOGON
IZU_ADMIN_ACCOUNT=1111
Added Properties
----------------
The following properties have been added to the override file for the current
release. The properties are displayed with their default values unless a
corresponding value was found in your override file. In this case, your value
is used in its place.
IZU_ZOS_SECURITY_ADMIN_GROUP_NAME=IZUSECAD
IZU_ZOS_SECURITY_ADMIN_GROUP_GID=9006
IZU_UNAUTHENTICATED_GROUP_NAME=IZUUNGRP
IZU_UNAUTHENTICATED_GROUP_GID=9012
Updated Properties
------------------
The following properties have been updated in the override file for the current
release:
IZU_OVERRIDE_FILE_VERSION=2.1.0
/*-----------------------------------------------------------------------*/
The migration of the override file has completed.
/*-----------------------------------------------------------------------*/
You can migrate your system to the new release of z/OSMF. Follow the
steps described in the IBM z/OS Management Facility Configuration Guide Version 2 Release 1, SA38-0657 to configure the new release of z/OSMF.
/*-----------------------------------------------------------------------*/
A.3 Configuration
After you convert the configuration file, you must run a complete z/OSMF V2R1 configuration setup. To do so, use the configuration scripts that are described in Chapter 4, “IBM z/OS Management Facility installation and configuration” on page 83.
|
Tip: Configure your new z/OSMF V2R1 environment by using the same TCP/IP ports for HTTP and HTTPS as in z/OSMF V1.13 for WebSphere OEM Server instead of the new default ports 80 for HTTP and 443 for HTTPS. By using the same TCP/IP port numbers and the same z/OSMF URL, your z/OSMF users do not have to change their web browser links.
|
A.4 Post-migration tasks
Because you no longer must use the ZOSMFAD user ID (the former z/OSMF installation user) since z/OSMF V2R1, that user ID can be removed. Also, you can remove all WebSphere OEM SAF and system-related definitions.
For more information about removing these IDs and definitions, “Clean-up actions to perform when satisfied with the new release” section in Chapter 4 of IBM z/OS Management Facility Configuration Guide Version 2 Release 1, SA38-0657.
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.