Requesting RECEIVE ORDER via a batch job

This topic contains the following procedures:

• To obtain the required certificates 
• To set up your z/OS security server
• To create a RECEIVE ORDER batch job

Before you begin

For details about obtaining, installing, and using a certificate with RECEIVE ORDER, see the security server information in the z/OS SMP/E User's Guide.

To obtain the required certificates

• Install the following certificates on the mainframe system on which you are performing maintenance:
  
  • X.509 user certificate
  • DigiCert Global Root G2 certificate
  • (Required for FTPS only) EV SSL certificate 

To obtain these certificates, perform the steps in File-server-and-certificate-information.

To set up your z/OS security server

1. Create a RACF key ring and connect the DigiCert Global Root G2 certificate to your key ring.
2. Make sure that you mark the user certificate as trusted.
3. Add the user certificate to the RACF database.
4. Connect the user certificate to your key ring.
5. If required, set up your Java and network configuration settings for the RECEIVE ORDER command.

To create a RECEIVE ORDER batch job

1. Make sure that all required certificates are installed and accessible on the mainframe system on which you are performing maintenance.

2. Generate the RECEIVE ORDER batch job by using the SMP/E ISPF interface or copy the following sample:

   Example

   //<JOBCARD>
   //*
   //S1       EXEC PGM=GIMSMP,
   //         PARM='PROCESS=WAIT',
   //         DYNAMNBR=120
   //*
   //*
   //*  SMP ZONE-RELATED FILES ARE DYNAMICALLY ALLOCATED,
   //*  THIS INCLUDES THE SMPPTS, SMPLOG, AND SMPTLIB DATA SETS,
   //*  IF APPLICABLE.
   //*
   //* SMP FILES
   //*
   //SMPCSI DD DISP=SHR,DSN=<your-bmc-global-csi>
   //*
   //*
   //SMPCNTL DD *
     SET BOUNDARY (GLOBAL)
                  .
     RECEIVE
          ORDER (
          ORDERSERVER(
              ORDSRVR
                    )
          CONTENT (
            ALL
                  )
          FORTGTZONES (
              <zone-name>
                  )
          CLIENT(SMPCLNT)
          WAIT(30)
                )
          DELETEPKG
                   .
   //******************************************
   //* ADDITIONAL JCL FOR THE RECEIVE COMMAND.
   //******************************************
   //ORDSRVR DD *
   <ORDERSERVER
     inventory="all"
     url="https://ws-prod.bmc.com/smpe"
     keyring="<your-keyring>"
     certificate="<label-x.509-certificate>">
   </ORDERSERVER>
   //SMPCLNT DD *
     <See SMP/E command guide for options(ftp,ftps,http,https)>
   //*
   //SMPNTS DD PATHDISP=KEEP,
   //          PATH='<USS-PATH>'

3. Modify the generated SMP/E RECEIVE ORDER batch job to meet your site requirements.
   You can use the following parameters in the ORDSRVR DD statement:

   Parameter	Value	Description
   inventory	all	Set the inventory keyword for environments other than IBM to all
   url	https://ws-prod.bmc.com/smpe	URL of the BMC Automated Service Request server
   keyring	keyringNameContainingX509Certificate	Name of the keyring that contains the X.509 user certificate
   certificate	labelOfBMCX509Certificate	Label assigned to the X.509 user certificate in the keyring

4. Run the modified SMP/E RECEIVE ORDER batch job.

This job instructs SMP/E to order and download all recommended PTFs.

Where to go from here

For information about using the RECEIVE ORDER command, see the IBM SMP/E Command Guide.