Re: NTP server with System z for PCI-DSS compliance

2013-10-20 Thread Rob Schramm
California Edison Company > Electric Dragon Team Paddler > SHARE MVS Program Co-Manager > 626-302-7535 Office > 323-715-0595 Mobile > jo.skip.robin...@sce.com > > > > From: "Shmuel Metz (Seymour J.)" > To: IBM-MAIN@LISTSERV.UA.EDU, > Date: 09/12/201

Re: NTP server with System z for PCI-DSS compliance

2013-09-16 Thread Skip Robinson
Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com From: "Shmuel Metz (Seymour J.)" To: IBM-MAIN@LISTSERV.UA.EDU, Date: 09/12/2013 10:02 AM Subject: Re: NTP server with System z for PCI-DSS

Re: NTP server with System z for PCI-DSS compliance

2013-09-12 Thread Shmuel Metz (Seymour J.)
In , on 09/12/2013 at 07:44 AM, Skip Robinson said: >While the most obvious value of STP may be synchronization of >multiple z CECs in a glass house, it is invaluable for synchronizing >all z CECs with the rest of the enterprise. Were IBM to provide an NTP client for single CEC shops, why wo

Re: NTP server with System z for PCI-DSS compliance

2013-09-12 Thread Shmuel Metz (Seymour J.)
In <5231cab7.8000...@acm.org>, on 09/12/2013 at 09:07 AM, "Joel C. Ewing" said: >Forward-only nudging wouldn't be very useful unless the TOD clock was >also deliberately designed to always run a hair slow Then maybe steering by slowing down every N ticks, but I'd be very nervous about anythin

Re: NTP server with System z for PCI-DSS compliance

2013-09-12 Thread Skip Robinson
-Manager 626-302-7535 Office 323-715-0595 Mobile jo.skip.robin...@sce.com From: "Joel C. Ewing" To: IBM-MAIN@LISTSERV.UA.EDU, Date: 09/12/2013 07:08 AM Subject: Re: NTP server with System z for PCI-DSS compliance Sent by:IBM Mainframe Discussion List On 09/12/201

Re: NTP server with System z for PCI-DSS compliance

2013-09-12 Thread Joel C. Ewing
On 09/12/2013 06:55 AM, Shmuel Metz (Seymour J.) wrote: > In > , > on 09/12/2013 >at 06:14 PM, Timothy Sipples said: > >> OK, so that's where you'd like to draw the "no additional >> charge"/"separately chargeable" line. > > I can see several possibilities. In order of preference: > > 1. U

Re: NTP server with System z for PCI-DSS compliance

2013-09-12 Thread Shmuel Metz (Seymour J.)
In , on 09/12/2013 at 06:14 PM, Timothy Sipples said: >OK, so that's where you'd like to draw the "no additional >charge"/"separately chargeable" line. I can see several possibilities. In order of preference: 1. Using NTP to set the TOD forward by a small amount. 2. Using NTP to set a vir

Re: NTP server with System z for PCI-DSS compliance

2013-09-12 Thread Timothy Sipples
Shmuel Metz writes: >The criticism is *not* that STP has a separate charge, but rather that >the automated setting of the time *ON A SINGLE BOX* requires STP, >which is chargeable. I don't recall anybody complaining that >sub-millisecond synchronization between boxes should be free. OK, so that's

Re: NTP server with System z for PCI-DSS compliance

2013-09-11 Thread Paul Gilmartin
On Wed, 11 Sep 2013 12:12:14 -0500, John McKown wrote: >The "problem" is that z/OS _cannot_ allow the TOD clock (hardware clock) to >go "backwards". The way that STP addresses this is that the STP software >can "speed up" or "slow down" the TOD increment pulse (or whatever it's >called). This is t

Re: NTP server with System z for PCI-DSS compliance

2013-09-11 Thread R.S.
W dniu 2013-09-11 11:17, Timothy Sipples pisze: Radoslaw Skorupka writes: Although PCI-DSS does not mention explicitly NTP, but this is the only solution for mainframe, which in turn requires STP enablement, which means $$$, which is quite unique among other platforms, because others can act as

Re: NTP server with System z for PCI-DSS compliance

2013-09-11 Thread John McKown
The "problem" is that z/OS _cannot_ allow the TOD clock (hardware clock) to go "backwards". The way that STP addresses this is that the STP software can "speed up" or "slow down" the TOD increment pulse (or whatever it's called). This is the hardware portion of STP. And I think that hardware additi

Re: NTP server with System z for PCI-DSS compliance

2013-09-11 Thread Shmuel Metz (Seymour J.)
In , on 09/11/2013 at 05:17 PM, Timothy Sipples said: >By the way, I'm rather tired of the implicit and explicit >criticisms that Server Time Protocol (STP) has a separate charge. The criticism is *not* that STP has a separate charge, but rather that the automated setting of the time *ON A S

Re: NTP server with System z for PCI-DSS compliance

2013-09-11 Thread Timothy Sipples
Radoslaw Skorupka writes: >Although PCI-DSS does not mention explicitly NTP, but this is the only >solution for mainframe, which in turn requires STP enablement, which >means $$$, which is quite unique among other platforms, because others >can act as NTP client for free. No, you cannot assume tha

Re: NTP server with System z for PCI-DSS compliance

2013-09-10 Thread R.S.
W dniu 2013-09-10 08:17, Timothy Sipples pisze: Jose Munoz asks: Is a must to use a NTP server for PCI-DSS compliance? I'm not sure I entirely understand the question, but I'll try to answer. PCI-DSS incorporates a concept called "trusted time." It also seeks to make sure that all critical syst

Re: NTP server with System z for PCI-DSS compliance

2013-09-09 Thread Timothy Sipples
Jose Munoz asks: >Is a must to use a NTP server for PCI-DSS compliance? I'm not sure I entirely understand the question, but I'll try to answer. PCI-DSS incorporates a concept called "trusted time." It also seeks to make sure that all critical systems have the correct and consistent time. My unde

NTP server with System z for PCI-DSS compliance

2013-09-07 Thread Jose Munoz
Hi, Someone is using a NTP Server and System z for PCI-DSS compliance regarding to time synchronization. I s a must to use a NTP server for PCI-DSS compliance? Regards Jose Munoz Senior zEnterprise consultant M:(+965)-99925167 E: jmunoz6...@gmail.com ---