Home
Integrating
HCL DevOps Deploy (Deploy) supports integrations with other IBM® and HCL products, products from others, and certain cloud systems.
Deploying components to the z/OS® platform
Use the toolkit to deploy to the IBM® z/OS® platform.
Security requirements on IBM® z/OS® computers
Specific security definitions are used to secure HCL DevOps Deploy (Deploy) functions for the IBM® z/OS® environment. To deploy applications to an IBM z/OS environment, the user accounts on the agent computer must have adequate access permissions. You must also identify specific directories and data sets to the authorized program facility.
IBM® z/OS® authorized program facility
To deploy applications to an IBM® z/OS® environment, you must identify specific directories and data sets to the authorized program facility (APF).

Integrating
HCL DevOps Deploy (Deploy) supports integrations with other IBM® and HCL products, products from others, and certain cloud systems.
- Integrating with DevOps Test Performance
  When you use HCL DevOps Test Performance (Test Performance), you can create tests and run those tests in HCL DevOps Deploy (Deploy) by using the Test Performance Deploy plug-in.
- z/OS considerations for DevOps Deploy
  HCL DevOps Deploy (Deploy) includes support for the z/OS platform. Although the articles in this Knowledge Center for using Deploy to deploy applications, certain platform-specific configuration factors must be considered when using a z/OS model.
- Deploying components to the z/OS® platform
  Use the toolkit to deploy to the IBM® z/OS® platform.
  - Ship list files
    The ship list file describes the files from the build to include in the new component version to deploy. Ship list files can also use generic artifacts to describe changes that are not physical files, such as configuration changes.
  - Generating Ship list for Endevor and Changeman packages
    You can generate shiplist.xml using Endevor SCL and Changeman configurations. Generated shiplist.xml can later be used to create component version using buztool.sh.
  - Searching the z/OS environment inventory
    The z/OS search feature is available for any application that contains a z/OS type component. Search is performed for a specific file in the artifacts belonging to the z/OS components deployed to that environment.
  - Creating z/OS® component versions
    You can create z/OS component version by running the buztool.sh command from job control language (JCL) or from the z/OS® UNIX™ System Services command line. You can also create z/OS component version by using the z/OS File Source Config plug-in.
  - Security requirements on IBM® z/OS® computers
    Specific security definitions are used to secure HCL DevOps Deploy (Deploy) functions for the IBM® z/OS® environment. To deploy applications to an IBM z/OS environment, the user accounts on the agent computer must have adequate access permissions. You must also identify specific directories and data sets to the authorized program facility.
    - IBM® z/OS® agent user accounts
      If you run the agent from a UNIX™ command line, the agent user account is the account that you use to log in to the UNIX shell. If you run the agent as a started task, the agent user account is assigned by the Resource Access Control Facility (RACF®) using the started procedures table (ICHRIN03) or the STARTED class. To learn more about RACF, see the z/OS® Security Server RACF System Programmer's Guide, SA23-2287-00.
    - IBM® z/OS® authorized program facility
      To deploy applications to an IBM® z/OS® environment, you must identify specific directories and data sets to the authorized program facility (APF).
    - IBM® z/OS® directories and data sets
      To deploy applications to an IBM® z/OS® environment, the user accounts on the agent computer must have adequate access permissions. You must also identify specific directories and data sets to the authorized program facility.
    - IBM® z/OS® tokens
      Tokens are used to authenticate with the HCL DevOps Deploy (Deploy) server when z/OS® component versions are imported.
    - IBM® z/OS® component versions
      Component versions for IBM® z/OS® are imported from the build LPAR by using the buztool.sh command.
    - Security configuration related to z/OS
      Information for the HCL DevOps Deploy (Deploy) server’s security model and the security configurations related to server agent communication for IBM® z/OS® are referenced in this topic.
  - Troubleshooting problems on z/OS®
    To troubleshoot problems on agent computers that are running IBM® z/OS®, examine the agent log files.

IBM® z/OS® authorized program facility

To deploy applications to an IBM® z/OS® environment, you must identify specific directories and data sets to the authorized program facility (APF).

Note:

Access to the UNIX™ directories and files is required prior to authorization. Refer to IBM z/OS directories and data sets.
The filesystem mount on which the agent is installed must have the Ignore SETUID value set to 0 for the APF authorization to take effect.

Table 1. APF-authorized directories and data sets
Directories and data sets	Required access permissions
The HLQ.SBUZAUTH data set	The load module BUZJMON must be APF-authorized.
`agent`/auth/checkaccess	The extended attributes must be set so that the checkaccess utility is APF-authorized. To set the extended attributes, type `extattr +a` at a command prompt. You must have read access to the BPX.FILEATTR.APF resource in the FACILITY class profile to run this command.