Installing and configuring BMC AMI SQL Assurance


This page outlines the installation, setup, configuration, and tasks required to implement and operate BMC AMI SQL Assurance for Db2 and its supporting components.

The following task list outlines tasks, roles, and frequency required for setup and use of SQL Assurance and related components:

1. Install BMC AMI SQL Assurance back-end products

Install the back-end mainframe products: BMC AMI SQL Explorer for Db2 and BMC AMI Command Center for Db2.

Tasks:

Role: Db2 System Programmer (Db2 SYSPROG)

Frequency: One-time

2. Configure BMC AMI SQL Explorer

Configure BMC AMI SQL Explorer for Db2 after installation.

Tasks:

Role: Db2 SYSPROG

Frequency: One-time

3. Configure user authorities and Explain setup

Configure user authorities, IBM stored procedures, and plan tables required to run an Explain.

Tasks:

Role: Db2 SYSPROG and Db2 DBA

Frequency: One-time

4. Confirm setup completion with Explain test

Use Change Manager to run an Explain to verify setup completion.

Task:

Role: Db2 SYSPROG and Db2 DBA

Frequency: One-time

5. Configure BMC AMI Command Center

Configure BMC AMI Command Center for Db2 for use with SQL Assurance to review violations and define VTI rules.

Tasks: 

  1. Define common infrastructure component (UIM or CIS) for connection with Command Center.

    Role: z/OS SYSPROG

    Frequency: One-time

  2. Grant user access for common infrastructure component (UIM or CIS) and Command Center superuser authorization. For more information, seeManaging User Access 

    Role: z/OS Security administrator  

    Frequency: One-time 

  3. Customize Command Center. For more information, seeCommand Center Customizing after installation

    Role: Db2 SYSPROG 

    Frequency: One-time 

6. Confirm z/OSMF operation and port details

Install and verify that it's running. Note the port number. 

Task:

Role: z/OS SYSPROG

Frequency: One-time

7. Create z/OSMF security authorizations

Create z/OSMF security authorizations.

Task:

Role: z/OS SYSPROG

Task frequency: One-time

8. Download installation files from BMC EPD

Download the applicable zip file (Jenkins or Universal Connector (UC)) from the BMC Electronic Product Distribution (EPD) site and unzip.

Task:

Role: Linux administrator
Frequency: Quarterly or as needed

9. Select tasks based on your CI/CD platform

Pick one task depending on your CI/CD platform:

Install BMC AMI SQL Assurance hpis (Common and SQL Assurance)

Role: Linux administrator
Frequency: Quarterly or as needed

10. SSL configuration

Configure the SSL certificate.

Task:

Role: z/OS Security administrator and Linux administrator
Frequency: One-time or as needed

11. SQL Assurance rules setup

Define SQL Assurance rules, if not using the default rules (COBDFLT).

Tasks:

Role: Db2 DBA
Frequency: One-time or as needed

12. Select tasks based on your CI/CD platform

Pick tasks depending on your CI/CD platform: 

  1. Configure the plug-in properties file with information from Db2 SYSPROG and z/OS SYSPROG

    Role: CI/CD Pipeline Engineer

    Frequency: One-time

  2. Configure a project or pipeline with analyze static SQL step.

    Role: CI/CD Pipeline Engineer

    Frequency: One-time

  3. Run a project or pipeline for analyze static SQL.   

    Role: Application developer

    Frequency: Ongoing

  1. Configure the plug-in properties file with information from Db2 SYSPROG and z/OS SYSPROG

    Role: CI/CD Pipeline Engineer

    Frequency: One-time

  2. Define a configuration YAML file with analyze static SQL step.

    Role: CI/CD Pipeline Engineer

    Frequency: One-time

  3. Configure a pipeline or workflow YAML file with analyze static SQL step.

    Role: CI/CD Pipeline Engineer

    Frequency: One-time

  4. Run a pipeline or workflow for static SQL analysis.

    Role: Application developer

    Frequency: Ongoing

13. After running SQL Assurance

After running SQL Assurance, review any violations reported.

Tasks:

Role: Db2 DBA and Application developer

Frequency: Ongoing

 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI SQL Assurance for Db2 13.1