Transcript Interskill PowerPoint Presentation

Introducing z/OS Security
Mainframe Security Basics
1 hour
z/OS Security
Administration
1 hour
PowerPoint
Our z/OS
Security
z/OS Security Auditing and
Recording
1 hour
z/OS Authorized Program
Facility
1 hour
Our z/OS Security
PowerPoint
Company name
Webinar
Our z/OS Security
Administration and
Auditing
Understanding
z/OS Security and
Your Role
= Datatrain Course Modules
Our Mainframe Systems
Denver
1 Production z/OS
1 Development z/OS
1 Test z/OS
2
Copyright © Interskill Learning 2012
Houston
1 Production z/OS
1 Development z/OS
10 z/Linux
1 z/VM
Our Physical Security
Computer Room
HMC
Badge
Access
24/7
Security
Tape
Drives
UPS and
Generator
Disk
Systems
3
Copyright © Interskill Learning 2012
Safe from
Storms and
Earthquakes
Our Logon IDs
•
•
•
•
.
ITSYSDS
.
Department
4
Copyright © Interskill Learning 2012
Group
Unique ID
Same as Windows
Always 7 Characters
Every z/OS user has an
individual logon
Separate power logon for
administration staff
Our Passwords
•
•
•
•
•
•
•
.
5
Copyright © Interskill Learning 2012
Same as Windows
6-8 characters
Must include 2 digits or
special characters (#, @, $)
Cannot include logon ID
Must be changed every 30
days
Cannot use the same
password
Synchronized on every
computer system
Our External Security Manager
Logon:
• IMS
• CICS
• TSO
• ASG TMON
• Tivoli Netview
• Tubes
• Telnet
• FTP
• USS NFS
• CA-7
IBM RACF
z/OS
Databases:
• DB2
• IMS
Transactions:
• IMS
• CICS
• WebSphere
Application
Server
LDAP
Statements Application:
• Logon
• Access
6
Copyright © Interskill Learning 2012
Our ESM Setup
z/OS Production
z/OS Production
z/OS
Development
z/OS
Development
z/OS Test
RACF
Database
RACF
Database
z/VM
Coupling
Facility
Denver
7
Copyright © Interskill Learning 2012
z/Linux
z/Linux
z/Linux
Houston
Our Network Security: Mainframe to Mainframe
z/OS Production
z/OS Production
z/OS
Development
z/OS
Development
z/OS Test
Coupling
Facility
Coupling
Facility
z/VM
z/Linux
z/Linux
z/Linux
Denver
8
Copyright © Interskill Learning 2012
Houston
Our Network Security: External
z/OS
z/OS
z/VM
Network
Switch
z/Linux
z/Linux
z/Linux
VPN / SSL
Customer A
Bank A
Customer B
Denver/Houston
9
Copyright © Interskill Learning 2012
Printer A
Our Tape Security
Computer Room
Backup tapes in
offsite storage
Automated
Tape Library
and Tapes
Separate Tapes
to send to
external
organizations
Denver and Houston
10
Copyright © Interskill Learning 2012
Introducing z/OS Security
Mainframe Security Basics
Summary
1 hour
z/OS Security
Administration
• Our Mainframe Systems
1 hour
• Our Physical Security
• Our Logon IDs
PowerPoint
Our z/OS
Security
z/OS Security Auditing and
Recording
1 hour
• Our Passwords
z/OS Authorized Program
Facility
• Our External Security Manager
• Our Network Security
• Our Tape Security
1 hour
PowerPoint
Webinar
Our z/OS Security
Administration and
Auditing
Understanding
z/OS Security and
Your Role
= Datatrain Course Modules
11
Copyright © Interskill Learning 2012