Signed Product packages at z/OSMF download, or SMPE Receive Order

Products

• Common Components and Services for z/OS
• ACF2
• ACF2 for Db2
• ACF2 - MISC
• ACF2 for z/VSE
• ACF2 for z/OS
• ACF2 for z/VM
• CMDB for z/OS
• Auditor for z/OS
• Bind Analyzer for DB2 for z/OS
• CICSORT Z/OS
• Compliance Manager for z/OS
• Data Compressor for DB2 for z/OS
• Database Analyzer for DB2 for z/OS
• Database Analyzer for IMS for z/OS
• Database Copier for IMS for z/OS
• Database Management for DB2 for z/OS - Administration Suite
• Database Management for DB2 for z/OS - Performance Suite
• Database Management for DB2 for z/OS - Recovery Suite
• Database Management for DB2 for z/OS - SQL Performance Suite
• Database Management for DB2 for z/OS - Utilities Suite
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• DATABASE MANAGEMENT SOLUTIONS FOR IMS FOR Z/OS
• Database Organizer for IMS for z/OS
• Detector for DB2 for z/OS
• Endevor Interface for Db2 for z/OS
• Endevor Interface for Remote Db2 for z/OS
• EXTEND z/OS
• Fast Check for DB2 for z/OS
• Fast Index for DB2 for z/OS
• Fast Load for DB2 for z/OS
• Fast Unload for DB2 for z/OS
• Fast Recover for DB2 for z/OS
• FAVER VSAM Data Protection for z/OS
• File Master Plus for DB2 for z/OS
• High Performance Recovery for IMS for z/OS
• Index Expert for DB2 for z/OS
• Insight Performance Monitor for DB2 UDB for z/OS
• LDAP SERVER FOR Z/OS
• Log Analyzer for DB2 for z/OS
• LogCompress for DB2 for z/OS
• Mainframe Configuration Manager for IMS for z/OS
• Mainframe Program Restart Manager for IMS for z/OS
• Merge/Modify for DB2 for z/OS
• MRI Db2 for z/OS Report
• NSM Database Option for z/OS
• Online Reorg for DB2 for z/OS
• Partition Expert for DB2 for z/OS
• Quick Copy for DB2 for z/OS
• Rapid Reorg for DB2 for z/OS
• RC Compare for DB2 for z/OS
• RC/Extract for DB2 for z/OS
• RC/Merger for DB2 for z/OS
• RC/Migrator for DB2 for z/OS
• RC/Query for DB2 for z/OS
• RC/Secure for DB2 for z/OS
• RC/Update for DB2 for z/OS
• Recovery Analyzer for DB2 for z/OS
• RI Editor for DB2 for z/OS
• RI Manager for DB2 for z/OS
• Secondary Index Builder for IMS for z/OS
• Secondary Index for IMS for z/OS
• SORT Z/OS
• SQL-Ease for DB2 for z/OS
• SRAM z/OS
• Subsystem Analyzer for DB2 for z/OS
• SYSVIEW Performance Management Option for DB2 for z/OS
• Tape Management z/OS
• Vman Session Management for z/OS
• Thread Terminator for DB2 for z/OS
• VMLIB for z/OS
• Workload Automation Restart Option for z/OS Schedulers (CA 11)
• XCOM Data Transport - z/OS
• 24X7 High-Availability Manager for DB2 for z/OS
• Plan Analyzer for DB2 for z/OS

Issue/Introduction

An attempt was made to use z/OSMF with portable software instances to retrieve common services, following the procedures documented by Broadcom. However, after executing the download job IZUD01DL, the process reported the following status: "Was the signature verified? No.

Despite installing the certificate as specified in the "Mainframe Common Maintenance Procedures" and utilizing the signaturekeyring= keyword to point to the signature, the logs provide no diagnostic information on the cause of the verification failure. Furthermore, an inspection of the download directory in UNIX System Services (USS) reveals that the GIMPAF2.XML file, which should contain the signature data, is missing. In several instances, the SMP/E job concluded with a Return Code (RC) of 0, despite the missing file and failed verification.

A similar issue occurred during the download of the Broadcom ACF2 for Db2 product via z/OSMF. While the job ended with RC 0 and other components appeared to download correctly, the GIMPAF2.XML file was again absent from the package.

Environment

z/OSMF
Broadcom mainframe product package

Resolution

Broadcom currently supports signing SMP/E Receive Order packages and is gradually rolling out signed Product Portable Software Instances (PSWIs). It is suggested to check the Products with Signed PSWIs or Broadcom support portal for the current signature status of specific software packages.

Additional Information

When starting the download of the package via z/OSMF and then the job IZUD01DL is started.
According to the manual, there should be a message:

GIM69270I SIGNATURE VALIDATION FOR FILE file-name WAS SUCCESSFUL. THE GIMZIP PACKAGE WAS SIGNED BY A CERTIFICATE WITH SUBJECT NAME subject-name, SERIAL NUMBER serial AND SHA256 FINGERPRINT fingerprint. THE SIGNING CERTIFICATE WAS ISSUED BY CN=Broadcom Mainframe Software Root CA.

See Products with Signed PSWIs