System requirements
System requirements
Before installing Zowe™ z/OS components, ensure that your z/OS environment meets the prerequisites. The prerequisites you need to install depend on what Zowe z/OS components you want to use and how you want to install and configure Zowe on z/OS. Therefore, assess your installation scenario and install the prerequisites that meet your needs.
All Zowe server components can be installed on a z/OS environment, while some can alternatively be installed on Linux or zLinux via Docker. The components provide a number of services that are accessed through a web browser such as an API catalog and a web desktop.
- z/OS system requirements
- User ID requirements
- Network requirements
- Zowe Docker requirements
- Zowe Desktop requirements (client PC)
- Feature requirements
#
z/OS system requirementsBe sure your z/OS system meets the following prerequisites.
#
z/OSz/OS version in active support, such as Version 2.3 and Version 2.4
Note: z/OS V2.2 reached end of support on 30 September 2020. For more information, see the z/OS v2.2 lifecycle details https://www.ibm.com/support/lifecycle/details?q45=Z497063S01245B61.
zFS volume with at least 833 mb of free space for Zowe server components, their keystore, instance configuration files and logs, and third-party plug-ins.
(Optional, recommended) z/OS OpenSSH V2.2.0 or later
Some features of Zowe require SSH, such as the Desktop's SSH terminal. Or, you want to install and manage Zowe via SSH, as an alternative to OMVS over TN3270.
(Optional, recommended) Parallel Sysplex.
To deploy Zowe for high availability, a Parallel Sysplex environment is recommended. Please check Configuring Sysplex for high availability for more information.
#
Node.jsNode.js v8.x (except v8.16.1), v12.x, or v14 (except v14.17.2)
Node is not included with z/OS so must be installed separately. To install Node.js on z/OS, follow the instructions in Installing Node.js on z/OS.
Note: If you are a software vendor building extensions for Zowe, when using Node.js v12.x or later, it is highly recommended that plug-ins used are tagged. For more information, see Tagging on z/OS.
#
Java- IBM SDK for Java Technology Edition V8 or later
#
z/OSMF (Optional)(Optional, recommended) IBM z/OS Management Facility (z/OSMF) Version 2.2, Version 2.3 or Version 2.4.
z/OSMF is included with z/OS so does not need to be separately installed. If z/OSMF is present, Zowe will detect this when it is configured and use z/OSMF for the following purposes:
Authenticating TSO users and generating a single sign-on JSON Web Token (JWT). Ensure that the z/OSMF JWT Support is available via APAR and associated PTFs. If z/OSMF is not available, then Zowe is still able to provide SSO by generating its own JWT and making direct SAF calls.
REST API services for Files (Data Sets and USS), JES, and z/OSMF workflows. These are used by some Zowe applications such as the Zowe Explorers in the Zowe Desktop. If z/OSMF REST APIs are not present, other Zowe desktop application, such as the File Editor that provides access to USS directories and files as well as MVS data sets and members, will work through the Zowe Z Secure Services (ZSS) component to access z/OS resources.
Tips:
- For non-production use of Zowe (such as development, proof-of-concept, demo), you can customize the configuration of z/OSMF to create what is known as "z/OS MF Lite" that simplifies the setup of z/OSMF. As z/OS MF Lite only supports selected REST services (JES, DataSet/File, TSO and Workflow), you will observe considerable improvements in startup time as well as a reduction in the efforts involved in setting up z/OSMF. For information about how to set up z/OSMF Lite, see Configuring z/OSMF Lite (non-production environment).
- For production use of Zowe, see Configuring z/OSMF.
#
User ID requirementsSpecific user IDs with sufficient permissions are required to run or access Zowe.
#
ZWESVUSRThis is a started task ID used to run the PROCLIB ZWESVSTC
.
The task starts a USS environment using BPXBATSL
that executes the core Zowe Desktop (ZLUX) node.js server, the Java API Mediation Layer, and the Z Secure Services C component. To work with USS, the user ID ZWESVUSR
must have a valid OMVS segment.
Class | ID | Access | Reason |
---|---|---|---|
CSFSERV | CSFRNGL | READ | To generate symmetric keys using ICSF that is used by Zowe Desktop cookies |
FACILITY | ZWES.IS | READ | To allow Zowe ZWESVSTC processes to access the Zowe ZIS cross memory server |
FACILITY | BPX.SERVER + BPX.DEAMON | UPDATE | To allow the Zowe Desktop ZLUX server to run code on behalf of the API requester's TSO user ID. For more information, see Security Environment Switching. |
FACILITY | IRR.RUSERMAP | READ | To allow Zowe to map an X.509 client certificate to a z/OS identity |
FACILITY | BPX.JOBNAME | READ | To allow z/OS address spaces for unix processes to be renamed for ease of identification |
FACILITY | IRR.RADMIN.LISTUSER | READ | To allow Zowe to obtain information about OMVS segment of the user profile using LISTUSER TSO command |
#
ZWESIUSRThis is a started task ID used to run the PROCLIB ZWESISTC
that launches the cross memory server (also known as ZIS). It must have a valid OMVS segment.
#
ZWEADMINThis is a group that ZWESVUSR
and ZWESIUSR
should belong to. It must have a valid OMVS segment.
#
zowe_userIf z/OSMF is used for authentication and serving REST APIs for Zowe CLI and Zowe Explorer users, the TSO user ID for end users must belong to one or both of the groups IZUUSER
or IZUADMIN
.
#
Network requirementsThe following ports are required for Zowe. These are default values. You can change the values by updating variable values in the instance.env
file. For more information, see Configuring the Zowe instance directory.
Port number | Variable name | Purpose |
---|---|---|
7552 | CATALOG_PORT | Used to view API swagger / openAPI specifications for registered API services in the API Catalog. |
7553 | DISCOVERY_PORT | Discovery server port which dynamic API services can issue APIs to register or unregister themselves. |
7554 | GATEWAY_PORT | The northbound edge of the API Gateway used to accept client requests before routing them to registered API services. This port must be exposed outside the z/OS network so clients (web browsers, VS Code, processes running the Zowe CLI) can reach the gateway. |
7555 | ZWE_CACHING_SERVICE_PORT | Port of the caching service that is used to share state between different Zowe instances in a high availability topology. |
8545 | JOBS_API_PORT | Port of the service that provides REST APIs to z/OS jobs used by the JES Explorer. |
8546 | JES_EXPLORER_UI_PORT | Port of the JES Explorer GUI for viewing and working with jobs in the Zowe Desktop. |
8547 | FILES_API_PORT | Port of the service that provides REST APIs to MVS and USS file systems. |
8548 | MVS_EXPLORER_UI_PORT | Port of the MVS Explorer GUI for working with data sets in the Zowe Desktop. |
8550 | USS_EXPLORER_UI_PORT | Port of the USS Explorer GUI for working with USS in the Zowe Desktop. |
8544 | ZOWE_ZLUX_SERVER_HTTPS_PORT | The Zowe Desktop (also known as ZLUX) port used to log in through web browsers. |
8542 | ZOWE_ZSS_SERVER_PORT | Z Secure Services (ZSS) provides REST API services to ZLUX, used by the File Editor application and other ZLUX applications in the Zowe Desktop. |
#
Zowe Docker requirementsTechnical Preview The Zowe Docker build is a technical preview.Docker is a technology for delivering a set of software and all its prerequisites and run them in an isolated manner to reduce installation steps and to eliminate troubleshooting environmental differences. Docker can run on many operating systems, but currently the Zowe Docker image is for x86 Linux (Intel, AMD) and zLinux ("s390x"). Support for platforms such as zCX, Windows, and more will be added over time.
To get Docker for Linux, you should check your Linux software repository. Whether using Ubuntu, Red Hat, SuSE, and many other types of Linux, you can install Docker the same way you install other software on Linux through the package manager.
Once you have Docker, the Zowe Docker image has the following requirements
- 4 GB free RAM, 8 GB recommended
- 4 GB free disk space
- Network access to the z/OS host. The Linux host must be able to communicate with the z/OS host.
When using Docker the USS components of Zowe will run off z/OS in the Linux container, however a z/OS installation of Zowe is still required for the ZSS and cross memory server.
Note: The subsections of z/OS requirements such as for API Mediation Layer, Web Explorers, and Application Framework are not required because they are included in the Docker install.
#
Zowe Desktop requirements (client PC)The Zowe Desktop is powered by the Application Framework which has server prereqs depending on where it is installed
The Zowe Desktop runs inside of a browser. No browser extensions or plugins are required. The Zowe Desktop supports Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Edge releases that are at most 1 year old, except when the newest release is older. For Firefox, both the regular and Extended Support Release (ESR) versions are supported under this rule.
Currently, the following browsers are supported:
- Google Chrome V79 or later
- Mozilla Firefox V68 or later
- Safari V13 or later
- Microsoft Edge 79
If you do not see your browser listed here, please contact the Zowe community so that it can be validated and included.
#
Feature requirementsZowe has several optional features that have additional prerequisites as follows.
#
Multi-Factor Authentication (MFA)Multi-factor authentication is supported for several components, such as the Desktop and API Mediation Layer. Multi-factor authentication is provided by third-party products which Zowe is compatible with. The following are known to work:
For information on using MFA in Zowe, see Multi-Factor Authentication.
#
Single Sign-On (SSO)Zowe has an SSO scheme with the goal that each time you use use multiple Zowe components you should only be prompted to login once.
Requirements:
- IBM z/OS Management Facility (z/OSMF)
- (Optional, recommended) PKCS#11 token setup is required when using ZSS, the Desktop, and Application Framework with SSO. See Creating a PKCS#11 Token for more information.