SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - PACKAGING UPDATES


 
 APAR Identifier ...... PK97437      Last Changed ........ 11/11/04
 SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - PACKAGING UPDATES
 
 Symptom ...... NF NEWFUNCTION       Status ........... CLOSED  UR1
 Severity ................... 4      Date Closed ......... 10/08/06
 Component .......... 5735FAL00      Duplicate of ........
 Reported Release ......... 540      Fixed Release ............ 999
 Component Name TCP/IP V2 FOR V      Special Notice       ATTENTION
 Current Target Date ..              Flags
 SCP ...................                            NEW FUNCTION
 Platform ............
 
 Status Detail: SHIPMENT - Packaged solution is available for
                           shipment.
 
 PE PTF List:
 
 PTF List:
 Release 540   : UK59535 available 10/08/18 (1102 )
 Release 610   : UK59536 available 10/08/18 (1101 )
 
 Parent APAR:
 Child APAR list:
 
 ERROR DESCRIPTION:
 SSL performance and scalability enhancements packaging
 updates.
 
 LOCAL FIX:
 Not Applicable.
 
 PROBLEM SUMMARY:
 ****************************************************************
 * USERS AFFECTED: All users of the z/VM SSL server.            *
 ****************************************************************
 * PROBLEM DESCRIPTION:                                         *
 ****************************************************************
 * RECOMMENDATION: APPLY PTF                                    *
 ****************************************************************
 
 PROBLEM CONCLUSION:
 
 TEMPORARY FIX:
 
 COMMENTS:
 With this APAR and its associated requisites (listed below),
 TCP/IP for z/VM provides significant performance and
 scalability enhancements for the CMS-based SSL server,
 introduced with z/VM version 5 release 4.
 
 This APAR provides packaging and related infrastructure changes
 needed for running the SSL and TCPIP server modules, updated by
 APARs PK97438 and PK75662 respectively.
 
 Detailed information about these enhancements, their use, and
 system and configuration changes required to install these
 updates, can be found at this z/VM web site URL:
 
   http://www.vm.ibm.com/related/tcpip/vmsslinf.html
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 IMPORTANT NOTES:
 ----------------
 
 1) The following APARs must also be applied in conjunction with
    this APAR:
 
    TCP/IP APARs:
    APAR     Description
    -------  ---------------------------------------------------
    PK97438  SSL Server Performance and Scalability Enhancements
             - SSLSERV Module Updates
    PK75662  SSL Server Performance and Scalability Enhancements
             - TCPIP Module Updates
 
    CMS APARs:
    APAR     Description
    -------  ---------------------------------------------------
    VM64740: Fix ABENDs in CMS Queue Management in a DCSS and
             add STFL to CMS Initialization
 
 2) CP directory updates that define additional TCP/IP user IDs
    are *REQUIRED* before the service updates associated with
    this and the above-listed APARs are placed into production
    on a z/VM system (that is *before* the PUT2PROD or TCP2PROD
    commands are used).
 
 3) DTCPARMS and other TCP/IP configuration file changes are
    *REQUIRED* before the service updates associated with this
    and the above-listed APARs are placed into production on a
    z/VM system (that is *before* the PUT2PROD or TCP2PROD
    commands are used).
 
 4) If the SSL server is not configured for use by an
    installation, the changes cited in (2) and (3) above
    are not required.
 
 NOTE!:  If the SSL server *IS* configured for use and the
 
         necessary changes are not implemented, the SSL server
         will not properly initialize and will not function.
 
 Symptoms indicative of a lack of the required changes will be
 reflected in the SSL and TCP/IP server consoles, represented by
 these examples.  Note that messages different from those shown
 here might be produced, based on the system configuration that
 is in place:
 
 ---------------------------------------------------------------
 SSL Server:
 
  ...
  DTCRUN1005E Required tag :DCSS_Parms. was not found in
              file(s): <nodeID> DTCPARMS D1, IBM DTCPARMS D1
  DTCRUN1099E Server not started - correct problem and retry
  ...
 
  --OR--
 
  ...
  DTCRUN1041E A server of class SSL_DCSS_AGENT is not defined
              for SSLSERV in files: <nodeID> DTCPARMS D1, IBM
              DTCPARMS D1
  DTCRUN1099E Server not started - correct problem and retry
  ...
 
 ---------------------------------------------------------------
 TCP/IP Server:
 
  ...
  DTCRUN1038I Server is not configured to support secure
              connections
  ...
  DTCPAR219I SSLServerID: SSLSERV; Timeout: 30
  ...
  DTCIPI056I TCP/IP is configured to not allow an SSL server.
             The SSLSERVERID statement is ignored.
  ...
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 The z/VM 5.4.0 publications (cited below) are affected by
 these enhancements:
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Planning and Customization
 Order Number         SC24-6125
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP User's Guide
 Order Number         SC24-6127
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Messages and Codes
 
 Order Number         GC24-6124
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Diagnosis Guide
 Order Number         GC24-6123
 
 ---------------------------------------------------------------
 Publication Title:   z/VM: Performance
 Order Number         SC24-6109
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 Topical and specific content updates for these publications
 can be found at this z/VM web site URL:
 
   http://www.vm.ibm.com/related/tcpip/vmsslinf.html
 
 MODULES/MACROS:   CLEAR    DTCUME   DTCUMEB  IBM      NETSTAT
 PK97437  QUERY    REFRESH  RESTART  SET      SSLADMIN SSLIDCSS
 SSLPOOL  START    TCPBL491 TCPIP    TCPRUN   TRACE    VMSSL
 5VMTCP40 6VMTCP10
 
 SRLS:      SC24612505 SC24612704 GC24612404 GC24612303
 SC24610906
 
 RTN CODES:
 
 CIRCUMVENTION:
 
 MESSAGE TO SUBMITTER: