JZOSEKM file Readme October 11, 2007 revised January 25, 2008 revised July 2, 2008 This README and the associated download file applies to only z/OS customers and specifically the z/OS customers who are planning to use the EKM console wrapper with the JZOS function in SDK1.4.2 SR6. The JZOSEKMFiles.pax.Z download file consists of jzosekm.jar, sample JCL , the STDENV file for the sample JCL and a EKMConsoleWrapper.README.txt which explains where each file should be located and installation specific tailoring that may be required. To extract the contents of the download file: issue "pax -rf JZOSEKMFiles.pax.Z" From an OMVS shell or rlogin prompt, you should create a separate sub-directory and unpax into that sub-directory. You will end up with one jar file and three text files. This is for use with z/OS V1.4 and above and the z/OS Java SDK1.4.2 SR6 level or higher. NOTES to users of the z/OS Console Wrapper Function: 1. The materials in the pax file supercede any other EKM console wrapper documentation found in other publications, including other readme, sample JCL, or sample STDENV file. 2. An earlier version of the wrapper had "EKMConsoleWrapper" as the name of the class file. This name has been updated to the fully qualified "com.ibm.jzosekm.EKMConsoleWrapper". The contents of the pax file are consistent with this update. 3. For usage information of the EKMConsoleWrapper, see the "EKM Introduction Planning and User's Guide" on this download site. For convenience, the contents of the three text files included in the pax file are listed below: 1) EKMConsoleWrapper.README.txt: *************************************************************************** ** README - describes contents of JZOSEKMFiles.pax.Z ** ** 9/12/2006 - Comments contact W. C. Johnston - wcjohns@us.ibm.com ** 10/11/2007 - This package for EKM2.1 ** 07/03/2008 - Updated EKM servcer class executed *************************************************************************** The following files are included in the archive: README This file jzosekm.jar Executable .jar file called by EKM PROC PROCLIB.EKM2 Sample JCL of the EKM Started Task procedure PROCLIB.EKM2ENV Input to EKM Task *************************************************************************** ** CHANGES FROM PREVIOUS DELIVERY ** ** EKMConsoleWrapper.jar is now jzosekm.jar ** the class name within this jar is now ** com.ibm.jzosekm.EKMConsoleWrapper ** not EKMConsoleWrapper ** PROCLIB.EKM is now PROCLIB.EKM2 ** calls com.ibm.jzosekm.EKMConsoleWrapper ** not EKMConsoleWrapper ** PROCLIB.EKMINPUT is now PROCLIB.EKM2ENV ** removes the explicit inclusion of the wrapper jar in CLASSPATH ** ** Verify message at the operator console as: ** EKM wrapper V2.0 for EKM2.1 ***************************************************************************** ***************************************************************************** ** IMPORTANT ** ** These files MUST be tailored to the environment in which they will run ** ** ** ***************************************************************************** jzosekm.jar place into the lib/ext directory of the java installation for example: /java/J1.4/lib/ext assure the appropriate permission bits are set to allow execution PROCLIB.EKM2 - Copy into SYS1.PROCLIB(EKM) LIBRARY='SYS1.SIEALNKE', This is where JVMLDM was installed VERSION='14', Java version LOGLVL='+T', Debug level desired REGSIZE='0M', Region size for STC Address Space LEPARM='' Optional Language Environment parameters //STDENV DD DSN=USER.PLX4.PROCLIB(EKM2ENV),DISP=SHR location of INPUT file PROCLIB.EKM2ENV - Copy into location on //STDENV in EKM STC JCL Follow the directions for each line within the file itself. This file sets up the Unix environment variables required to run the EKM --- EOF --- 2) Sample JCL: //EKM PROC JAVACLS='com.ibm.jzosekm.EKMConsoleWrapper', // ARGS=, < Args to Java class // LIBRARY='SYS1.SIEALNKE', < STEPLIB FOR JVMLDM module // VERSION='14', < JVMLDM version: 14, 50, 56 // LOGLVL='+T', < Debug LVL: +I(info) +T(trc) // REGSIZE='0M', < EXECUTION REGION SIZE // LEPARM='' //********************************************************************* //* //* Stored procedure for executing the JZOS Java Batch Launcher //* Specifically, to execute the Enterprise Key Manager under JZOS //* //********************************************************************* //EKM EXEC PGM=JVMLDM&VERSION,REGION=®SIZE, // PARM='&LEPARM/&LOGLVL &JAVACLS &ARGS' //STEPLIB DD DSN=&LIBRARY,DISP=SHR //SYSPRINT DD SYSOUT=* < System stdout //SYSOUT DD SYSOUT=* < System stderr //STDOUT DD SYSOUT=* < Java System.out //STDERR DD SYSOUT=* < Java System.err //CEEDUMP DD SYSOUT=* //ABNLIGNR DD DUMMY //********************************************************************* //* The following member contains the JVM environment script //********************************************************************* //STDENV DD DSN=USER.PLX4.PROCLIB(EKM2ENV),DISP=SHR //* 3) Sample STDENV file (referenced in JCL as EKM2ENV): # This is a shell script which configures # any environment variables for the Java JVM. # Variables must be exported to be seen by the launcher. #Set these variables to the installation unique values # EKM_HOME = directory where EKM runs from # JAVA_HOME = directory where Java is mounted export EKM_HOME="/usr/lpp/ekm" export JAVA_HOME="/java/J1.4" export PATH=/bin:"${JAVA_HOME}"/bin: LIBPATH=/lib:/usr/lib:"${JAVA_HOME}"/bin:"${JAVA_HOME}"/bin/j9vm LIBPATH="$LIBPATH":"${JAVA_HOME}"/bin/classic export LIBPATH="$LIBPATH": # Customize your CLASSPATH here CLASSPATH=${JAVA_HOME}/lib CLASSPATH=$CLASSPATH:"${EKM_HOME}" export CLASSPATH="$CLASSPATH": # Set JZOS specific options export ZZZZ="KeyManagerConfig.properties.jce4758racfks" export XXXX="com.ibm.keymanager.EKMServer" export JZOS_MAIN_ARGS="$XXXX $ZZZZ" # Configure JVM options (if any) IJO="-Djava.protocol.handler.pkgs=com.ibm.crypto.hdwrCCA.provider" export IBM_JAVA_OPTIONS="$IJO " #export JAVA_DUMP_HEAP=false #export JAVA_PROPAGATE=NO #export IBM_JAVA_ZOS_TDUMP=NO env