IBM System z Mainframe Security Architecture Extended To Medium-Sized Businesses

IBM (NYSE: IBM) today announced that it has made several advances in the powerful System z™ mainframe security architecture that are designed to extend the features of IBM’s security-rich server -- historically enjoyed by large enterprises -- to a growing base of medium-sized mainframe customers that operate under IT resource constraints. These new advances are in three central areas: lowering the costs of network and data protection, extending IBM mainframe security for Linux, and enabling customers to meet regulatory compliance requirements securely.

The IBM System z mainframe is designed to combine the power of industry-leading security features with the simplicity of centralized management to deliver a comprehensive and flexible phalanx of security safeguards and capabilities. These features help to protect against hackers, keep data secure and allow for easy management of complex security issues. Given the abundance of information technology security issues that impact businesses -- including identity theft, regulatory compliance concerns, and firewall intrusions -- the “fortress-like” security offered by the IBM System z mainframe have never been more critical.

“Leading retailers as well as governmental and financial institutions have historically selected the mainframe as a secure repository and transaction hub for their most critical data,” said Jim Stallings, general manager for IBM System z. “As more and more mid-sized businesses choose the mainframe, we want to be certain that they can make use of security features available to larger businesses.”

New System z security advancements include:

Lowering the costs of network and data protection:

-- Enhancement to System z9 end-to-end network encryption with new IPSec
use of zIIP specialty engines. Customers transacting business over the
Internet need a highly secure connection between their mainframe and remote
servers and devices. zIIP Assisted IPSec can provide a cost effective high
speed encryption engine for customers requiring end-to-end encryption over
the Internet.

-- Lower entry cost of secure-key encryption with new single port
CryptoExpress2 card for the System z9 Business Class mainframe.
CryptoExpress2 can provide secure-key cryptography and key management, and
protect encryption keys from disclosure, modification and misuse. It holds
the industry’s top hardware rating -- FIPS 140-2 Level 4. CryptoExpress can
also provide acceleration for SSL encryption, the most popular Internet
security protocol. With secure-key processing on System z9 with
CryptoExpress2, encryption keys are protected in a tamper-resistant
cryptographic hardware device, and never appear in the clear, not even in
system memory.

-- Planned System z operating system support for new mid-range 3400 Tape
Library featuring encrypting drives.

Extending IBM mainframe security for Linux:
-- New support for secure-key encryption with CryptoExpress2. With this
enhancement, customers’ Linux encryption applications can benefit from the
mainframe’s tamper-resistant encryption processing.

-- Multilevel Security support with new RedHat support for Security
Enhanced Linux for System z (SELinux).

Enabling customers to meet regulatory compliance requirements:
-- InSight and zSecure product suites from Consul risk management, Inc. -- an
IBM company.

-- New DB2 9 features to help improve security management, data
encryption and auditing.