July 26, 2005 13:23 ET

New IBM Mainframe Designed as Hub for Collaborative Business

The IBM System z9 Is Designed as One of the Most Reliable and Secure Computing Systems and Provides Nearly Twice the Total System Capacity and Available Memory of Its Predecessor - the IBM eServer zSeries z990

NEW YORK, NY -- (MARKET WIRE) -- July 26, 2005 -- IBM today introduced one of the most sophisticated computing systems ever, the IBM System z9 mainframe with security and virtualization capabilities that the company said can enable it to act as the hub in a new era of collaborative computing.

Representing a three-year, $1.2-billion-development effort encompassing 5,000 IBM engineers, software developers, technology professionals and security experts from around the world -- the System z9 was designed to be one of the most open, reliable and secure computing systems ever built for business. It is designed to:

--  process one billion transactions per day, more than double the
    performance of its predecessor, the "T-Rex" zSeries z990 mainframe, at its
    launch. (1)
--  enable businesses to safely transport encrypted data to partners,
    suppliers, and remote or archive sites -- helping to protect data in the
    event of media loss or inadvertent compromise.  This function is planned to
    be available by the end of 2005. (2)
--  run five world-class operating systems including Linux and the
    mainframe's new flagship z/OS version 1.7,  which can enable transport of
    data in a security-rich environment between multiple computing platforms
    and virtualization of hundreds of applications, including Java-based
--  process up to 6,000 secure online handshakes per second --
    approximately three times as many as before -- which may help businesses
    better serve e-commerce customers and process more sales quicker. (3)
--  resist known security threats.

The Ultimate Collaborative Processing Machine

At a news conference today in New York, IBM executives unveiled the System z9 system and said this is the first of a new generation of mainframes whose role can be to facilitate management security and systems resources across the entire corporate IT network. In this way, the mainframe is designed to provide a central point of control.

"The System z9 delivers virtualization and collaborative capabilities on a level never before seen in the computer industry. A single System z9 is designed to optimize hardware, networking and software so that businesses can manage and secure workloads equivalent to hundreds of distributed servers in a fraction of the space," said Bill Zeitler, senior vice-president and group executive, IBM Systems and Technology. "This is the beginning of a new era -- in which businesses can gain control of information technology by managing it from the inside out."

New Technology Features:

Virtualization across the System

Virtualization can help businesses aggregate and pool system resources to achieve a consolidated view and greater economy-of-scale from the IT environment. The System z9 boasts advanced resource virtualization and workload management from more than three decades of virtualization innovation:

--  System z9 allows customers to create hundreds of virtual servers on a
    single system with up to 60 logical hardware partitions -- twice as many
    LPARs as the z990. Clients may cost-effectively run Java- and Linux-based
    applications on the same platform as heritage applications and core
    business databases, through the specialty engines System z9 Application
    Assist Processor (zAAP) and Integrated Facility for Linux (IFL),
--  Combined with the new version of IBM Virtualization Engine platform
    and IBM Director, the System z9 can enable the management of resources
    across other platforms.
--  IBM intends to introduce the interoperability of its premier storage
    virtualization offering, the IBM TotalStorage SAN Volume Controller, to
    connect with Linux on zSeries environments.  This capability will enable
    zSeries customers the opportunity to utilize storage traditionally attached
    to open environments through configurations managed by IBM TotalStorage SAN
    Volume Controller, including the ability to take advantage of the tiered
    storage environment that IBM TotalStorage SAN Volume Controller creates.

Security Capabilities Throughout the Network

The System z9 is built on the IBM mainframe's 41-year heritage as a secure-rich system. IBM mainframes are designed with advanced hardware security and each system also contains master encryption keys stored in a "tamper-resistant" package that is designed to zero-out data to prevent physical capture by an intruder. The System z9 has the capabilities to allow consistent security policies across server, data and now the network, all according to business goals through centralized key management in z/OS and other built-in security features. The System z9 provides advanced protection against internal and external risks with these new features:

--  Helping to Secure Data Transported to Alternate Locations -- The
    System z9, leveraging existing key management capabilities in z/OS and a
    planned new encryption solution, is intended to enable customers to encrypt
    data for more secure transport to partners, suppliers, and remote or
    archive sites across multiple server platforms.  With clients and
    regulations increasingly focused on securing customer and business data,
    this technology will be designed to help prevent the security breaches
    caused by lost data tapes that have plagued financial services and e-
    commerce companies in recent months.
--  Advanced Encryption -- The mainframe provides centralized management
    of encryption keys, helping provide customers with better long-term
    management for data security. The System z9 now includes a built-in
    cryptography feature and an improved hashing algorithm (SHA-256).  The z9
    also now supports the open Advanced Encryption Standard.  These
    cryptography advances are designed to improve performance, speed
    transactions and help lower processing costs.
--  Faster secure online transactions -- New on the IBM System z9 is the
    ability to configure Crypto Express2 PCI-X adapters as accelerators, which
    helps with secure data transmission on the Internet through Secure Sockets
    Layer (SSL), a commonly-used Internet protocol. When both PCI-X adapters
    are configured as accelerators, the Crypto Express2 feature can perform up
    to 6,000 SSL handshakes per second. This represents, approximately, a three-
    time performance improvement compared to the PCICA feature or the current
    Crypto Express2 feature on z990, on a per card basis. This can help
    businesses conduct security-rich  e-commerce transactions in less time. (4)
--  Easier-to-deploy Internet Security for Mainframe Workloads -- As
    financial services companies, government agencies and manufacturers move
    away from relying on more expensive private networks and increasingly tap
    the Internet to expand their ecosystem of partners, they are looking to
    secure their mission-critical z/OS applications like CICS on the Internet.
    z/OS 1.7 has a new function, Application Transparent Transport Layer
    Security, which allows businesses to apply Internet-standard TLS or SSL
    encryption no anticipated changes to their core applications.  This feature
    can make it easier to deploy the mainframe's leading encryption for z/OS
    managed data and transactions traveling on the Internet to prevent
    outsiders from snooping data on the network.
--  Network-based Security with Cisco -- Cisco and IBM provide a
    comprehensive and complementary network security solution designed to
    extend security across the network, and enable secure processing from end-
    to-end.  The Cisco Self Defending Network strategy complements the
    Intrusion Detection Services (IDS) of z/OS.  z/OS IDS is designed to detect
    and defend against known attacks and new or previously unidentified
    attacks, using a policy-based approach. z/OS can recognize and report
    system activities indicative of a denial-of-service attack, which are
    designed to enable businesses to take action before system degradation
"The new security and encryption offerings in the System z9 are designed to provide an enterprise-wide solution to help companies secure their customers' data, both within company walls as well as when it leaves their direct control," said Erich Clementi, general manager, IBM Systems and Technology Group. "Centralized key management helps simplify our customers' security solutions, and is designed to provide a long-term capability for protecting data. We are working closely with technology partners and a group of leading customers in the financial world to extend our security strategy to cover all aspects of our system environment, with a goal of providing the most comprehensive solutions in the industry."

"Always On" Reliability and Availability Across the Network

New capacity back-up for specialty engines can extended the System z9's uptime capability designed to avoid planned outages for maintenance and upgrades. This builds on the mainframe's legendary reliability. With up to twice the available memory in System z9 as in z990, the System z9 is designed to support even larger-scale, secure transaction environments:

--  The System z9 contains enhanced book availability to help reduce
    planned outages.  With proper planning, if a book fails, businesses may
    recover resources without an outage.  Also included is the ability to add
    and repair memory without an outage and the ability to apply some driver
    maintenance without an outage.
--  The largest System z9 (54-way) is designed to provide nearly twice the
    total system capacity than a z990 (32-way) means that the system has
    scaling designed to meet fluctuating demand.
--  z/OS is designed to optimize the performance of the IP networks across
    a cluster of servers with a new TCP/IP Sysplex Load Balancing Advisor that
    coordinates with switches such as those from Cisco. This can allow better
    load balancing decisions, designed to protect busy servers and provide
    resources where the business needs them.
--  The System z9 now offers up to 80 percent greater I/O bandwidth. The
    System z9 introduces important expanded I/O addressability capabilities
    with multiple sub-channel sets for parallel access volumes.
Open Business Integration through Linux, SOA and J2EE

Furthering IBM's commitment to a total system concept, System z9 combines the newest server technology with IBM's most recent releases of key middleware products:

--  Select IBM WebSphere software has been revamped to provide better
    business resilience and integration via Service Oriented Architectures.
    WebSphere Application Server for z/OS V6, WebSphere Portal for z/OS V5, and
    WebSphere MQ for z/OS V6 deliver enhanced support for web services, J2EE
    1.4 compatible technologies, as a Services Oriented Architecture (SOA)
    platform.  WAS V6 has been optimized to take full advantage of the System
    z9 Application Assist Processor (zAAP), which may provide price and
    performance benefits for clients seeking to integrate existing core
    applications and data with new Java-based technologies on the mainframe.
--  One of the world's most widely used middleware software products, CICS
    Transaction Servers has new improvements. CICS Transaction Server V3.1 and
    CICS Transaction Gateway V6.0 deliver enhanced application integration
    capabilities and improved performance, for clients seeking to build
    flexible SOA while reusing core assets.  There is also a growing suite of
    application development and operations management tools from IBM, including
    WebSphere Developer for z/OS V6, to help build and maintain these new
    composable assets on zSeries.
--  IBM Communication Controller for Linux on zSeries can ease customer
    migration by providing operational compatibility with existing 3745/6
--  The System z9 supports z/OS, Linux, z/VM, z/VSE, and z/TPF to allow
    clients to manage hundreds of applications on one system. Linux on the
    System z9's portfolio of applications includes more than 700 applications
    from 260 ISVs. (5)
Redesigned Multichip Module

The heart of the z9 is the IBM multichip module (MCM) -- a dense and advanced semiconductor and packaging technology. The newly designed 3.74" x 3.74" x 0.33" (95 x 95 x 8.5mm) module, which fits in the palm of your hand, contains 16 chips mounted on 102 layers of ceramic glass connected to over 5,184 I/Os pins by 540 meters of wire. The module uses IBM's leading-edge 90nm copper and Silicon-on-Insulator (SOI) technology and contains over 3.5 billion transistors. Manufactured by IBM's world-class chip developers in, East Fishkill N.Y., this leading-edge technology provides advantages in performance, power consumption and reliability.

Model Specifications and Availability

The System z9 109 (z9-109) has five available models offering between 1 and 54 configurable processor units. The first four models with 1 to 38 processor units, are planned to be available in September 2005, and the high-capacity model S54 is planned to be available November 2005. The performance of the System z9 109 uni-processor is expected to be 1.35 times the z900 uni-processor. The z9-109 is expected to scale from a one to 54-way (versus 32-way on the z990) with up to 512 gigabites of memory.

About IBM

IBM is the world's largest information technology company, with 80 years of leadership in helping businesses innovate. Drawing on resources from across IBM and key Business Partners, IBM offers a wide range of services, solutions, financing and technologies that enable customers, large and small, to take full advantage of the new era of e-business on demand.

For more information about

--  IBM Corporation, visit
--  System z9, visit
--  IBM's mainframe strategy, see our article on


(1) The z9109 is designed to provide up to 95% more total system capacity than the z990 Model D32, and has up to double the available memory. This is a comparison of the z9 109 54-wayt and the z990 D32 and is based on the LSPR mixed workload average. It is expected that 32 z9-109s in a cluster could achieve approximately 25 billion transactions per day. This is a theoretical calculation of 32 individual z9-109 servers (each configured with 32 engines) in a parallel sysplex. It is a projection based on measurements of a single z9-109 (configured with 32 engines) obtained in a controlled environment. The actual performance that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput or performance equivalent to the numbers stated here.

(2). IBM intends to deliver this feature in 2005, as stated in z/OS 1.7 RFA.

(3) The SSL rate was achieved with a System z9 with four processors and two Crypto Express2 Cards (one feature, both configured as accelerators). When a System z9 with four CPs and both PCI-X adapters on a Crypto Express2 feature are configured as accelerators, the Crypto Express2 feature is designed to perform up to 6,000 SSL handshakes per second. The SSL rate was achieved with a System z9 with four processors and two Crypto Express2 cards (one feature, both configured as accelerators), z/OS V1R7 with Cryptographic Support for z/OS V1R6/V1R7 Web deliverable, and ICSF FMID HCR7730. Since the performance enhancements are implemented in Licensed Internal Code, current Crypto Express2 features carried forward from z990 to System z9 can take advantage of increased SSL performance and the new configuration capability. These measurements are examples of the maximum transactions per second achieved in a laboratory environment with no other processing occurring and do not represent actual field measurements. Details are available upon request.

(4) The SSL rate was achieved with a System z9 with four processors and two Crypto Express2 Cards (one feature, both configured as accelerators). When a System z9 with four CPs and both PCI-X adapters on a Crypto Express2 feature are configured as accelerators, the Crypto Express2 feature is designed to perform up to 6,000 SSL handshakes per second.

(5) The z/VSE operating system can execute in 31-bit mode only. It does not implement z/Architecture, and specifically does not implement 64-bit mode capabilities. The z/VSE operating system is designed to exploit select features of IBM eServer zSeries hardware. z/TPF is planned to be made generally available on September 16, 2005

The following are either trademarks or registered trademarks of International Business Machines Corporation in the United States or other countries or both: IBM, the IBM e-business logo, zSeries, eServer, System z9, z/VM, z/VSE, and z/TPF WebSphere, z/OS, IBM TotalStorage and WebSphere. Linux is a registered trademark of Linus Torvalds. All others are trademarks or registered trademarks of their respective companies.

Contact Information