IBM Z9, Руководство по планированию

Страница: 245 / 274

The following elements can be reconfigured from the z/OS Operator’s console using
a CONFIG command. Such a reconfiguration is limited to the objects owned by the
logical partition:
v Logical Processors
v
Central Storage
v
Expanded Storage
v Channel Paths
See z/OS MVS System Commands for further detail on the CONFIG command.
MVS is aware of the logical partition objects it owns, and interacts with PR/SM to
reconfigure them using the service call instruction. This Execution of this instruction
results in a mandatory interception (by the System z9 processor hardware) which
causes every use thereof to be mediated by PR/SM. PR/SM mediates the
instruction to limit the scope of such requests to the objects that the security
administrator defined for the specific logical partition.
Audit Trail
All security-relevant events initiated from the HMC/SE by the System Administrator
will be written to the security log. When these logs become full, they are pruned .
This means that the oldest one-third of the entries are deleted and the log is
reduced to two-thirds full. The log has the capability to store many weeks worth of
security relevant events under normal system operation.
To insure the no security relevant information is lost, the security log should be
offloaded periodically to removable media provided with the processor. When the
security log is successfully off loaded to removeable media, the active log is pruned
so that it does not exceed 20% of it’s capacity. If the active security log is below
20%, then no entries are removed. If it is above 20%, then enough active security
log entries are removed (from oldest to newest) to reduce the size of the active
security log to 20%. The oldest entries are still in the offloaded log.
Refer to the Support Element Operations Guide for additional information on how to
look at the contents of the security log.
Recovery Planning
You should read “Recovery Strategy” on page 5-10, and then adapt it to your
configuration’s requirements for security and processing priorities.
Installation-specific recovery procedures must be developed and documented in
advance, always giving consideration to where the sensitive data will be after each
recovery scenario has completed.
Service and Maintenance
Many secure accounts are hesitant about enabling remote service. Consideration
should be given to enabling outbound RSF calls that contain the data necessary to
automatically dispatch an IBM service representative. Since there is considerable
customizing capability provided, RSF can probably be tailored to match your
installation’s security policy and practices.
This product has support for the concurrent service and maintenance of hardware.
The following can be serviced concurrently while normal customer operations
continue:
v
Power supplies
v
Channel cards
Appendix B. Developing, Building, and Delivering a Certified System
B-11