Re: ALLOWUSERKEYCSA

2018-08-29 Thread Roland Fernandez
Ron,

Take a look at APAR OA53355.  IBM recently updated it to reference a previously 
un-documented parameter called ALLOWUSERKEYCADS.

CAUTION!!! TRY THIS ON A SANDBOX LPAR FIRST!!! >>> If you code 
ALLOWUSERKEYCADS(NO) in your DIAGxx member any offenders will generate an 
S01D-15 abend.  In our experience, a couple of products kind-of recover and 
keep running while another one just fails.  Everyone's mileage may vary.

The takeaway from this is that some third party products are not yet fully 
remediated.  We have not seen this issue with any IBM products but that may 
just be a case of our particular product mix.

Thanks,
Roland Fernandez
Pacific Life

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Funny characters in CPAC.PARMLIB(HZSPRM00)

2018-08-20 Thread Roland Fernandez
Skip,

My emulator was set to 1047-Latin and it displayed the same squirrely 
characters.  Updating to 037-US now displays them as proper brackets.

Thanks,
Roland Fernandez
Pacific Life

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Vulnerability mitigation with OSPROTECT

2018-08-10 Thread Roland Fernandez
Good Friday Everyone!

Has anyone implemented OSPROTECT=SYSTEM or OSPROTECT=1 in IEASYSxx yet?  I'm 
primarily concerned about the overhead and how (or even if) it can be derived 
from the usual metrics.  

This is the z/OS portion of the Meltdown mitigation implemented via APAR 
OA55233.  It only works if you have the appropriate MCLs applied.

The Init and Tuning Reference was recently update to include this parameter.  
The guidance for OSPROTECT=1 cites a "...minor impact to system performance 
and/or workload execution."  I presume "minor" could be subjective depending on 
your workload characteristics. 

Thanks for your input!
Roland Fernandez
Pacific Life

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN