Preparing for installation

Before you begin

• Make sure that you have the credentials to access the BMC Electronic Product Distribution (EPD) website. Your access to product pages on the EPD website depends on the license entitlements purchased by your company.

• Make sure that you have system programmer credentials as described in Roles-and-permissions.
• For the latest information about SPEs and patches, see Notices.

To download product installation files

Save the installation package to your networked computer and upload it to your target z/OS system. The installation package is a binary offload of a z/OS TSO XMIT file.

1. Download the installation files from the EPD website.
   Download the following files and the matching SHA256 text file for each:

   • BMC AMI Resident Security Server Version n.n.00

   • BMC AMI Resident Security Server Version n.n.00 - SPEyymm
     The downloaded file name is BMC-AMI-Security-RSS.n.n.00.SPEyymm.Bbbbb.zip

     • n.n is the version number
     • yymm represents the year and month of the SPE
     • bbbb is the build number

     SPEs are cumulative, so you must download only the latest SPE.

   • Patches released after the latest SPE date (if any)

   Important

   The BMC AMI Resident Security Server (RSS) product suite contains the following products in one zip file:

   • BMC AMI Enterprise Connector for Illumio
   • BMC AMI Enterprise Connector for Venafi
   • BMC AMI Security Policy Manager
   • BMC AMI Security Privileged Access Manager
   • BMC AMI Security Self Service Password Reset

   RSS is an infrastructure component that is automatically installed with the products.

   For any of these products, the same file is downloaded: BMC-AMI-Security-RSS.n.n.00.SPEyymm.Bbbbb.zip

   If you are installing more than one product, download the product suite only once. Likewise, if you want to install another product in the suite later, do not download the suite again.

   If you are upgrading to SPM version 2.3, perform one of the following actions:

   • If you do not have any RSS-based product running version 2.3, perform a fresh installation of SPM version 2.3 by using the RSS2319 package.
   • If you have another RSS-based product running version 2.3 but do not have the latest RSS updates, make sure that you install SPE2404 and then apply the RSS2319 PTF.

   You control product activation with license keys.

2. For each downloaded file, check that the SHA text file matches the SHA code of the downloaded zip file.
   Checking the codes confirms that the files are correct and not corrupted.
   To view the SHA code of the zip file, from a Windows command prompt, run the following command from the directory in which the files are downloaded:
   certutil -hashfile "<fileName>" SHA256
3. For each downloaded package, unzip the zip file to see an XMIT file and the end-user license agreement.

Transmitting and receiving files to the mainframe

Transmitting and receiving files requires the following tasks:

• Task 1: To preallocate a data set for use with the TRANSMIT command
• Task 2: To transmit a file to the mainframe
  • Sample FTP session to upload the installation file
  • Sample IND$FILE command to upload the installation file
• Task 3: To unload (RECEIVE) the installation data set

Task 1: To preallocate a data set for use with the TRANSMIT command

You must preallocate a data set on the z/OS system to receive the XMIT file from your computer. You can create one data set for each XMIT file, or empty and reuse data sets.

On the mainframe, select ISPF option 3.2 (Data Set Utility) to preallocate a data set to receive the XMIT file from your computer.

For example, create a data set named BMC.fileName.INSTALL.XMIT with the following data control block (DCB) information:

• Clear the volume serial entry if you are using a storage management subsystem (SMS)
• Space units: BLKS
• Primary quantity: 10000
• Secondary quantity: 4000
• Record format: FB
• Record length: 80
• Block size: 24000
• Organization: PS

Task 2: To transmit a file to the mainframe

Use FTP or IND$FILE to transmit the binary XMIT file to the preallocated data set as shown in the following examples.

Sample FTP session to upload the installation file

In a Windows command prompt, from the directory in which your XMIT file is located, enter the ftp yourLPAR command.

yourLPAR is the LPAR to which you want to upload the XMIT file. If your LPAR has a domain name, the domain name is displayed.

The following sample is from an FTP session used to upload the installation file to your LPAR. This session includes the client commands issued at the computer and the server responses:

Note the following placeholders:

• <yourLPAR> is the LPAR to which you want to upload the XMIT file. Enter this LPAR name.
• domainName is the name linked to the IP address. This value is automatically added.
• <yourUser> is the user ID that you use to log in to your LPAR. Enter this user ID.
• yourUser is your user ID. This value is automatically added.
• <localFileName.xmit> is the unzipped XMIT file name on your computer. Enter this file name.
• <BMC.fileName.INSTALL.XMIT> is the name of the data set that you created. Enter this data set name.
• BMC.fileName.INSTALL.XMIT is the name of the data set to which you uploaded your file. This value is automatically added.

Sample IND$FILE command to upload the installation file

If you do not have access to or are prevented from using FTP, you can use the IND$FILE utility instead.

1. On the mainframe, select ISPF option 6 (ISPF Command Shell).
2. Select to transfer and upload to the host.
3. Enter the localFileName.xmit as the local source file.
   This is the unzipped XMIT file name on your computer.
4. Enter 'BMC.fileName.INSTALL.XMIT' as the remote destination file.
   This is the name of the data set that you created.
5. Select the binary data type and the TSO host.

After you upload the file, it exists in the target z/OS system as BMC.fileName.INSTALL.XMIT. You must run the TSO RECEIVE command for the file as described in the following procedure.

Task 3: To unload (RECEIVE) the installation data set

1. On the mainframe, select ISPF option 6 (ISPF Command Shell).

2. Use the RECEIVE command to unload the XMIT file into an installation data set.
   The RECEIVE command creates the data set by using the name that you specified in the RECEIVE reply parameter.

   Example

   In the following example, the RECEIVE command unloads the XMIT file:
   receive indsn('BMC.fileName.INSTALL.XMIT')

   The system responds as follows:

   INMR901I Dataset BMC.fileName.INSTALL.XMIT from userID on NODENAME
    INMR906A Enter restore parameters or 'DELETE' or 'END' + 

3. Enter the name of the preallocated installation data set.

   Example

   da('BMC.fileName.INSTALL')

The following code block displays some of the output messages issued during the RECEIVE process. After you enter this command, the system unloads the members into the named data set, issuing a confirmation message for each one.

Where to go from here

To run the installation procedure, see Running-the-INSTALL-procedure.