Z/OS


z/OS is a 64-bit operating system for IBM z/Architecture mainframes, introduced by IBM in October 2000. It derives from and is the successor to OS/390, which in turn was preceded by a string of MVS versions. Like OS/390, z/OS combines a number of formerly separate, related products, some of which are still optional. z/OS has the attributes of modern operating systems but also retains much of the older functionality that originated in the 1960s and is still in regular use—z/OS is designed for backward compatibility.

Major characteristics

z/OS supports stable mainframe facilities such as CICS, COBOL, IMS, PL/I, IBM Db2, RACF, SNA, IBM MQ, record-oriented data access methods, REXX, CLIST, SMP/E, JCL, TSO/E, and ISPF, among others.
z/OS also ships with a 64-bit Java runtime, C/C++ compiler based on the LLVM open-source Clang infrastructure, and UNIX APIs and applications through UNIX System ServicesThe Open Group certifies z/OS as a compliant UNIX operating system – with UNIX/Linux-style hierarchical HFS and zFS file systems. These compatibilities make z/OS capable of running a range of commercial and open-source software. z/OS can communicate directly via TCP/IP, including IPv6, and includes standard HTTP servers along with other common services such as SSH, FTP, NFS, and CIFS/SMB. z/OS is designed for high quality of service, even within a single operating system instance, and has built-in Parallel Sysplex clustering capability.
z/OS has a Workload Manager and dispatcher which automatically manages numerous concurrently hosted units of work running in separate key-protected address spaces according to dynamically adjustable goals. This capability inherently supports multi-tenancy within a single operating system image. However, modern IBM mainframes also offer two additional levels of virtualization: LPARs and z/VM.
From its inception z/OS has had tri-modal addressing. Up through Version 1.5, z/OS itself could start in either 31-bit ESA/390 or 64-bit z/Architecture mode, so it could function on older hardware, albeit without the ability to run 64-bit applications on those machines. IBM support for z/OS 1.5 ended on March 31, 2007, and since then, z/OS is supported only on z/Architecture mainframes and runs exclusively in 64-bit mode. Application programmers can still use any addressing mode: all applications, regardless of their addressing mode, can coexist without modification, and IBM maintains a commitment to tri-modal backward compatibility. However, increasing numbers of middleware products and applications, such as DB2 Version 8 and above, now require and exploit 64-bit addressing.
IBM markets z/OS as its flagship operating system, suited for continuous, high-volume operation with high security and stability.
z/OS is available under standard license pricing and via IBM Z New Application License Charges and "IBM Z Solution Edition", two lower-priced offerings aimed at supporting newer applications. U.S. standard commercial z/OS pricing starts at about US$125 per month, including support, for the smallest zNALC installation running the base z/OS product plus a typical set of optional z/OS features.
z/OS introduced Variable Workload License Charges and Entry Workload License Charges which are sub-capacity billing options. VWLC and EWLC customers only pay for peak monthly z/OS usage, not for full machine capacity as with the previous OS/390 operating system. VWLC and EWLC are also available for most IBM software products running on z/OS, and their peaks are separately calculated but can never exceed the z/OS peak. To be eligible for sub-capacity licensing, a z/OS customer must be running in 64-bit mode, must have eliminated OS/390 from the system, and must e-mail IBM monthly sub-capacity reports. Sub-capacity billing substantially reduces software charges for most IBM mainframe customers. Advanced Workload License Charges is the successor to VWLC on mainframe models starting with the zEnterprise 196, and EAWLC is an option on zEnterprise 114 models. AWLC and EAWLC offer further sub-capacity discounts.

Other features

64-bit memory support

z/OS supports 64-bit addresses for both virtual and real addresses.
Within each address space, z/OS initially permitted the placement of only data, not code, above the bar. z/OS enforced this distinction primarily for compatibility reasons. There are no architectural impediments to allowing more than of application code per address space; Linux on IBM Z supports it, for example. IBM has started to allow Java code running on z/OS to execute above the bar, for performance reasons.
Starting with z/OS Version 2 Release 3, code may be placed and executed above the bar. However, very few z/OS services may be invoked from above the bar.
Memory above the bar is obtained as "Large Memory Objects" in multiples of . There are three types of large memory objects:
  • Unshared – where only the creating address space can access the memory.
  • Shared – where the creating address space can give access to specific other address spaces.
  • Common – where all address spaces can access the memory.

z/OS Encryption Readiness Technology (zERT)

z/OS Encryption Readiness Technology monitors, records, and reports details of z/OS cryptographic network protection. It is a feature of z/OS V2R3 Communications Server component.

zERT discovery

With zERT, the TCP/IP stack acts as a focal point in collecting and reporting the cryptographic security attributes of IPv4 and IPv6 application traffic that is protected using the TLS/SSL, SSH and IPSec cryptographic network security protocols. The collected connection level data is written to SMF in new SMF 119 subtype 11 records for analysis.

zERT aggregation

In certain environments, the volume of SMF 119 subtype 11 records can be large. The zERT aggregation function provides an alternative SMF view of the collected security session data. This alternate view is written in the form of new SMF 119 subtype 12 records that summarize the use of security sessions by many application connections over time and which are written at the end of each SMF interval. This alternate view condenses the volume of SMF record data while still providing all the critical security information.

IBM zERT Network Analyzer

z/OS Management Facility is enhanced to provide a plug-in named IBM zERT Network Analyzer. IBM zERT Network Analyzer is a web-based graphical user interface that z/OS network security administrators can use to analyze and report on data reported in zERT Summary records. With the zERT Network Analyzer, a z/OS network security administrator can import SMF zERT summary records into a Db2 for z/OS database and then build and run custom queries against that data.

Operational data collection and analysis

Operational data is data that z/OS system produces when it runs. This data indicates the health of the system and can be used to identify sources of performance and availability issues in the system. IBM Z Operational Log and Data Analytics and IBM Z Anomaly Analytics with Watson collect IT operational data from z/OS systems, analyze and provide insights about the operational data.
IBM Z Operational Log and Data Analytics collects IT operational data from z/OS systems, transforms it to a consumable format, and streams it to third-party enterprise analytics platforms like the Elastic Stack and Splunk, or to the included operational data analysis platform. The included insights can help to visualize and search operational data to help identify the cause of operational issues.
IBM Z Anomaly Analytics with Watson collects IT operational data from z/OS systems, uses historical IBM Z metric and log data to build a model of normal operational behavior, then analyzes real-time operational data through comparison with the model of normal operations to detect anomalous behavior, and notifies IT operations of the anomalous behavior to identify incidents that might lead to business disruption.

Operational data types

IBM Z Operational Log and Data Analytics collects and analyzes both structured and unstructured data, including the following types of operational data:
IBM Z Anomaly Analytics with Watson collects data from multiple IBM Z systems and subsystems, including IBM Db2 for z/OS, IBM CICS Transaction Server for z/OS and IBM MQ for z/OS. The following types of operational data are collected: