zPDT New Release Information

README file for the zPDT distribution CD/zip from ITC.

This CD (.iso) or zip file contains the files provided by IBM to allow the installation and use of the z1090 / zPDT system on your Linux based system. ITC has included some additional IBM and ITC documentation for your convenience. This distribution package has been updated to include updated authentication procedures. This package is for zPDT release 1.10, driver 55.16.

The CD (.ISO) and zip file are organized into the following sections or directories:

1. Important information for all systems

2. Installable Linux code

3. Documentation / publications

For a complete tree view of the directories and their contents, see the next page.

There are important documents/notices in the root directory with this README file. You should also review the External Release Letter carefully. It contains information about the installation and use of zPDT in general and this release specifically. The license agreement for the zPDT software is included in the "International License Agreement for Non-Warranted Programs" and you should review this prior to installing the zPDT code. You will be required to accept the license agreement when you install the code.

As with the all recent zPDT releases, this the zPDT 1.10 55.16 driver has only a single installable file and it is named z1090-1-10.55.16.x86_64. The install file will determine whether the target system is Red Hat Enterprise Linux, SUSE or Ubuntu (openSUSE or SLES) and then install the appropriate version of the code and libraries.

The supported levels of Linux must be at least the 64-bit version of Red Hat Enterprise Linux (RHEL) 7.0 or greater, the 64-bit version of openSUSE Leap 42.3 or greater, the 64-bit version of SLES 12 SP3 or greater, and Ubuntu 16.04 or greater. Earlier versions are not supported.

NOTE: All users who plan to install the z/OS 2.2 (2017 May Edition) or later ADCD must update their z1090 token with a new license feature initially available with driver 47.xx. Adding this new feature will not affect the expiration date of the token.

This release (1.10) continues the use of the Z1090_token_update program which replaces the SecureUpdateUtility along with a new update process. You should review the new process in the new Redbook volume or refer to the “ITC 1090 GA10_Authentication_Procedure NEW - GA10 Only as of 2021 AUG” document.

For the new replacement tokens the use update process is different. You should review the new process in the new Redbook volume or refer to the “ITC 1090 GA11 .6_GA10.6_Authentication_Procedure NEW - GA11 Only as of 2023 OCT” document. All documents are in the “Pubs” directory.

If you are installing the 1090 application for the first time, refer to the Redbook titled zPDT Guide and Reference, SG24-8205-0 5, chapter five, zPDT Installation. Please be sure that you have installed the appropriate version of Linux and the prerequisites before proceeding to install the 1090 code. If you have already installed the appropriate version of Linux and the required prerequisites, and you are upgrading from a previous zPDT level, please proceed to the next step.

ITC uPDT customers with a current support agreement can request specific installation instructions and assistance from ITC.

You are urged to review the included External Release Letter carefully for updated and changed features of zPDT.

1. # Directory layout and contents

/ (root directory)

- README_55.16.html (this file)

- README_55.16.pdf (this file)

- IBM_International_License_Agreement_for_Non-Warranted_Program.pdf

- 55.16 GA10 release letter.pdf (Official IBM notice)

- 55.16 GA10 release letter.html

- 55.16 GA10 release letter.txt

- enhancements_55.16pdf (Cumulative enhancements in GA10)

- FTP_performance.pdf (information regarding FTP on zPDT)

- Install_Info_55.16.pdf (How-To Install information )

- Install_Info_55.16.html

- ITC 1090 GA10_Authentication_Procedure NEW - GA10 Only as of 2021 AUG.pdf Updated: please review and use.

- ITC 1090 GA11.6_GA10.6_Authentication_Procedure NEW TOKEN - GA11 Only as of 2023 OCT For updating the new dongle replacement.

/linux (Installable Files for use on OpenSUSE and RHEL systems)

- z1090-1-10.55.16.x86_64 Base install file

/pubs (Publications of use related to zPDT)

- SG24820505.pdf zPDT Guide and Reference

- ITC 1090 GA10_Authentication_Procedure NEW - GA10 Only as of 2021 AUG.pdf

Detailed new token authentication procedure

See Additional Important notes on the next page.

Additional important notes:

7.1. Restrictions

2. SNA is not supported.

3. Multicast IP is not supported via OSE managed devices. Multicast IP is only supported with OSA defined in OSD mode.

4. Deflate function is not provided in this driver but will be provided in a future GA10 driver.

7.2 Exceptions

- None

7.3 Other Notes

- With zArchitecture level on by default, if you IPL an older ADCD, you may get a Disable Wait 0019. You will have to update your ADCD image. Using the latest ADCD (zOS 2.2) from May 2017, it did IPL fine. With ZARCH_ONLY turned OFF explicitly via devmap using cpuopt parameter you can IPL in ESA/390 mode in devmap.txt like this:

cpuopt ZARCH_ONLY ON

or

cpuopt ZARCH_ONLY OFF (non-standard option)

- zOS 2.3 hits SLIP TRAP right in setup right after IPL. This is a zOS problem and will be handled via zOS APAR OA54373.

- Linux on Z under VM may rarely experience a loss of connectivity when using an OSA dedicated configuration. Development is investigating.

- zVM PRG005 abend sometimes observed when running zOS under zVM 7.1 GA 1801 RSU 1902. Development is investigating.

- awsrdr device statement without a full path specified will cause a core dump. Work around is to explicitly provide the full path statement. This is expected to allow the default to work in a future fixpack release.

Addendum

NEW TOKENS:

The IBM 1090 license tokens have been an important part of zPDT since it was

released. The technology involved with these tokens has aged and zPDT must

switch to new tokens. The general plan is to require the use of the new tokens

when renewing a zPDT license, starting in the fourth quarter 2023. Since licenses are generally good for a year, this should result in all users having new tokens by the end of 2024. zPDT will support both the old tokens and the new tokens for at least a year.

The handling of IBM 1091 license tokens used by some ZD&T customers will

be addressed in the future. The software-only ZD&T licenses will not be replaced and will continue to be used.

As a general plan, the Information Technology Company (ITC) will handle the actual distribution of the new tokens. ITC will provide suitable documentation and forum notes. Depending on the customer situation, there might be a minor fee to cover the actual cost of the new tokens. The new tokens are USB devices, slightly smaller than the previous tokens, and have IBM model numbers such as 1090-LT1, 1090-LT2, and so forth.

There are only a few technical changes involved in using the new tokens. For

example, request_license and update_license commands replace the

previous Z1090_token_update command. The query_license command has been expanded to include details about the new tokens. Some IBM and ITC documentation uses the terms Gen1 (for the older SHK tokens) and Gen2 (for the new LDK tokens); this terminology was created a few years ago and these are simply convenient names with no special meanings.

For the newer (Gen2) 1090 tokens, do the following:

- You do not need to stop zPDT and you can have multiple Gen2 tokens installed.

- Switch to Linux root mode. There is currently no option to bypass this step.

- Using a Linux window, issue the command request_license. This should produce a small binary file, with a system-assigned file name, such as <linux host name>_<hash>.zip which is placed in /root.

  0. If multiple Gen2 tokens are present, it will ask you to select the one you want to work with

- Send the binary file to your zPDT support organization (this is probably ITC). (Depending on your interface for obtaining renewed licenses, you might need to include the ì11Sî and ì02î numbers from the tag attached to your license token.)

- They should respond with a binary file having a matching name such as <linux host name>_<hash>_update.zip . Place this file in a convenient location in your Linux system.

- Switch to Linux root mode. You can have zPDT still active and multiple tokens connected.

- Issue: update_license <path of>/<linux host name>_<hash>_update.zip

- You can verify that the new Gen2 hardware token licenses have been installed / updated, by issuing the query_license command and observe the license expiration date.

- As in the past, you can also verify by starting zPDT (with the normal awsstart command) and then issuing a token command from a Linux window.

Addendum

NEW TOKENS:

The IBM 1090 license tokens have been an important part of zPDT since it was

released. The technology involved with these tokens has aged and zPDT must

switch to new tokens. The general plan is to require the use of the new tokens

when renewing a zPDT license, starting in the fourth quarter 2023. Since licenses are generally good for a year, this should result in all users having new tokens by the end of 2024. zPDT will support both the old tokens and the new tokens for at least a year.

The handling of IBM 1091 license tokens used by some ZD&T customers will

be addressed in the future. The software-only ZD&T licenses will not be replaced and will continue to be used.

As a general plan, the Information Technology Company (ITC) will handle the actual distribution of the new tokens. ITC will provide suitable documentation and forum notes. Depending on the customer situation, there might be a minor fee to cover the actual cost of the new tokens. The new tokens are USB devices, slightly smaller than the previous tokens, and have IBM model numbers such as 1090-LT1, 1090-LT2, and so forth.

There are only a few technical changes involved in using the new tokens. For

example, request_license and update_license commands replace the previous

Z1090_token_update command. The query_license command has been expanded to include details about the new tokens. Some IBM and ITC documentation uses the terms Gen1 (for the older SHK tokens) and Gen2 (for the new LDK tokens); this terminology was created a few years ago and these are simply convenient names with no special meanings.

For the newer (Gen2) 1090 tokens, do the following:

- You do not need to stop zPDT and you can have multiple Gen2 tokens installed.

- Switch to Linux root mode. There is currently no option to bypass this step.

- Using a Linux window, issue the command request_license. This should produce a small binary file, with a system-assigned file name, such as <linux host name>_<hash>.zip which is placed in /root.

  0. If multiple Gen2 tokens are present, it will ask you to select the one you want to work with

- Send the binary file to your zPDT support organization (this is probably ITC). (Depending on your interface for obtaining renewed licenses, you might need to include the ì11Sî and ì02î numbers from the tag attached to your license token.)

- They should respond with a binary file having a matching name such as <linux host name>_<hash>_update.zip . Place this file in a convenient location in your Linux system.

- Switch to Linux root mode. You can have zPDT still active and multiple tokens connected.

- Issue: update_license <path of>/<linux host name>_<hash>_update.zip

- You can verify that the new Gen2 hardware token licenses have been installed / updated, by issuing the query_license command and observe the license expiration date. As in the past, you can also verify by starting zPDT (with the normal awsstart command) and then issuing a token command from a Linux window.

Information Technology Company LLC