SlideShare a Scribd company logo
Developing an IBM MobileFirst platform application for
z Systems
Andy Armstrong
andy.armstrong@uk.ibm.com
Twitter: @BrightSituation
1
Agenda
2
• How can you ensure that mobile applications are written once for supporting multiple device types?
– Native Webapp Hybrid
– Mobile middleware tier and studio tier
• Which tools from the IBM Rational portfolio are most useful in creating mobile applications to access z
Systems services?
– Starting point bottom up
– RDz – generate web services
– Explorer
• This session focuses on developing a mobile application to access the mainframe with an emphasis on
the server run-time and development environment of the IBM MobileFirst Platform.
– Recap studio and server components, need for each
– RTC SCM and task management
– Use studio to generate application
– Run live
– Recap value of IBM Software
• Security and Mobile
• Value of embracing tooling – great products become brilliant with great tooling
We look at the development from a CICS application use-case perspective and demonstrate the steps to
connect to the CICS application from mobile devices.
About me
3
Where we are in todays agenda
4
• Mobilizing the mainframe
• Modernizing mainframe applications for mobile and more
• Exposing mainframe applications and services to mobile
• Developing an IBM MobileFirst platform application for z Systems
• Optimizing applications and data for mobile workloads
• Client Use Cases and Getting Started with Mobile and z Systems
Native, Webapp, or Hybrid….
5
• Native – SDK for specific brand of device, specific tooling – Best end
user experience
• Webapp – Responsively designed websites let minimal investment
return basic mobile support as a staple entry point to the mobile
world
• Hybrid – A combination of Native and Webapp – Best of both worlds?
The need for a mobile middleware tier
6
• Regardless of your choice (native, webapp, hybrid) the IBM
MobileFirst Platform server is where consistent value is delivered
• This is where ‘magic’ happens to reach z System services
• The platform offers:
• An integration layer – keep client side code clean, light, simple
• A security layer – keep authenticity and app management for you
• Operational analytics – app crash logs, app->server comms
tracking
• Secure offline data store with synchronisation capabilities
• Consistent connectivity point for all calls to service providers, z
Systems, distributed systems, public systems
7
CICS Application Overview
• CICS Catalog Manager Application
– COBOL based CICS application (EGUI)
– VSAM File
– Separate Presentation Logic and Business
Logic
– Callable Interface - Container
7
8
8
z/OS
3270 Client
VSAM File (EXMPCAT)
CICS
EGUI Main
Inquiry itemBrowse
Existing CICS 3270 Application
Place Order
9
z/OS
VSAM File (EXMPCAT)
CICS
EGUI Main
Inquiry itemBrowse
Place Order
9
RDZ and Debug Tool
Web Service enables and test existing app
CICS Web
Service
10
10
Mobile Client
MobileFirst
Platform
Server
Shopping Cart
Enhanced Search and Shopping Cart
Features are added via Worklight.
Features do not currently exist in the CICS
application.
Enhanced
Search
MobileFirst enhances the Web Service Enabled App
z/OS
VSAM File (EXMPCAT)
CICS
EGUI Main
Inquiry itemBrowse
Place Order
CICS Web
Service
Adapters
Starting point – bottom up
11
• We need services for our app to connect to our Systems of record
• IBM MobileFirst platform can use standard web services (Soap,
JSON, SAP)
• How do we make these services?
– CICS -> DFHLS2WS, DFHLS2JS
– IMS -> IMS Gateway, IMS Mobile feature pack
– Spring? JAX-RS?
• What would these services look like?
Web service resource interrelationships
12
RDz – generate web services easily
13
• Live(ish) demo – catalog manager web services creation
• https://www.youtube.com/watch?v=YCG_LtllrLk 4m 22 -> 8m 15
• Speak with William(Bill) on RDz dev team
• Make some services, install them using explorer integrated into RDz
• How do we source control any source changes? How do we track
the task of making the web service?
• Integrate changes made via RDz with existing solution
• Use RTC for SCM and Task Management (example to follow)
CICS Explorer
14
• Confirm programs, pipelines, web services are installed correctly
• Confirm TCPIP port and URIMaps for service URL
• Live demo of doing this
Make mobile application
15
• We have made our web service for the IBM MobileFirst Platform to
access our core business logic running on z system
• Now use MobileFirst Studio to build a mobile application to call the
service we have exposed
• Live demo of creating this mobile application calling a CICS
Service
RTC – SCM system and time management
16
• How do we track this work?
– Task management
• How do we track the source code changes?
– Task Management tie in to source control
• How do I integrate the code changes deployed to z Systems?
– RTC Builds
z Systems mobile security topologies
DataPower Gateway Appliance
CICS
COBOL, PL/I, C/C++, and Java
Services
CICS
COBOL, PL/I, C/C++, and Java
Services
z/OS Connect
IBM Statement of Direction: IBM intends to deliver IBM WebSphere Liberty z/OS Connect (z/OS Connect) as a common program component of WebSphere Application Server for z/OS, IMS
Enterprise Suite for z/OS, CICS Transaction Server for z/OS, and CICS Transaction Gateway. z/OS Connect is intended to provide a simplified, secure, and scalable gateway functionality to
route web, cloud, and mobile application traffic that accesses applications provided by the aforementioned z/OS products, as well as z/OS Batch and z/OS UNIX™ System Services
applications.
MobileFirst Platform Server
So how to chose the right mobile security solution?
• Type of user
– B2E
– B2C
• Type of mobile app
– Web
– Native
– Hybrid
– Worklight?
• Type of access
– Intranet/extranet
– Internet
• Number of users
– Small (10s to 100s)
– Medium (1000s)
– Large (or unknown?)
Security requirements
• Authentication
• Authorization
• Confidentiality
• Integrity
Sensitivity of data and transactions
• Financial?
• Personal?
• Will sensitive data be stored on the device?
Security standards
• Company
• Government or external body
Existing security architecture
• User registry
• Security products
CICS mobile security topologies
DataPower Gateway Appliance
CICS
COBOL, PL/I, C/C++, and Java
Services
CICS
COBOL, PL/I, C/C++, and Java
Services
z/OS Connect
JSON/http(s)
JSON/http(s)
JSON or XML / http(s)
JSON/http(s)
JSON/ http(s)
WOLA JCICS
MobileFirst Platform Server
Security
20
• Gateway Tier
• Exploitation control
• App & User authentication
MobileFirst
Platform
MobileFirst
Platform
MobileFirst
MobileFirst
Platform
MobileFirst
Platform
e.g. REST (JSON/XML)
over HTTPS
MobileFirst
Platform, WAS ND
e.g. SOAP
over HTTP(S)
or messaging
CICS
IMS
DB2
Other servers, Web Apps, other
services
DataPower Gateway Appliance
DataPower Mobile Security Features
Available as a physical or virtual appliance
• Security, Control, Integration & Optimization of mobile workload
• Enforcement point for centralized security policies
• Authentication, Authorization, SAML, OAuth 2.0, Audit
• Threat protection for XML and JSON
• Message validation and filtering
• Centralized management and monitoring point
• Traffic control / Rate limiting
• Integration with MobileFirst Platform
DataPower JSON protection
Jumbo JSON Payload
• Label - Value Pairs
• Label String Length (characters)
• Value String Length (characters)
• Number Length (characters)
• Threat Protection
• Maximum nesting depth (levels)
• Maximum document size (bytes)
Label String
Nesting Depth of 3
Value String
Number
Document
Size
IBM MobileFirst Platform Server on z Systems
MobileFirstMobileFirst ServerServer
Authentication
JSON Translation
Server-side App Code -- WAS
Adapter Library
Application Center
Enterprise App Store
Worklight Console
Push Notifications
Analytics
Cast Iron
HTTP/REST
SOAP
WMB
SQL
SAP
z/OS
CICS
Linux on z
Device RuntimeDevice Runtime
• Security and Authentication
• Back-end Data Integration
• Caching and local data
Linux on z z/OS
MobileFirst
IBM MobileFirst
Security Features
Worklight ServerWorklight Server
Authentication
JSON Translation
Server-side
Application Code
Adapter Library
Client-side
App Resources
Direct Update
Mobile
Web Apps
Unified Push Notifications
StatsAggregation
Device RuntimeDevice Runtime
• Cross Platform Technology
• Security and Authentication
• Back-end Data Integration
• Post-deployment control and Diagnostics
Enforcing security updates
Remote
disable
Remote
disable
Direct updateDirect update
Providing robust
authentication and
authorization
Authentication
integration
framework
Authentication
integration
framework
Data
protection
realms
Data
protection
realms
Coupling
device id with
user id
Coupling
device id with
user id
Streamlining Corporate security
processes
Mobile
platform as a
trust factor
Mobile
platform as a
trust factor
Application Security
Code
obfuscation
Code
obfuscation
SSL with server
identity
verification
SSL with server
identity
verification
Proven
platform
security
Proven
platform
security
Jailbreak and
malware
detection
Jailbreak and
malware
detection
App
authenticity
testing
App
authenticity
testing
Protecting data on the device
Encrypted
offline cache
Encrypted
offline cache
Offline authenticationOffline authentication
Secure challenge-
response on startup
Secure challenge-
response on startup
• Ensure that only specific applications on specific
devices can connect to enterprise systems
• Extensible framework for authentication of mobile
application users
• Encrypt data on the device
• Enforce security updates
• Propagate identity to enterprise systems
Rational Team Concert (RTC)
Rational Developer for System z (RDz)
Rational Development and Test Environment for Systems z (RD&T)
CICS Explorer
z/OS Debug Tool
IBM MobileFirst platform
DataPower
API Management
Products and Technologies – a recap
Break down silos by moving to an Agile team environment
• Manage all types of code from JavaScript
to COBOL – mobile to mainframe
• Instant-on, self-serve development
capabilities with JazzHub on SoftLayer
• Accelerate agile adoption on the
mainframe
• Integrate existing SCM and deployment
tools, e.g. CICS Configuration Manager
and CICS Deployment Assistant
• Enhanced Lifecycle integration adapters
for third-party tools
Maximize team productivity
26
Rational Team Concert
Rational Requirements Composer
Rational Quality Manager
DevOps Services (JazzHub) for IBM Cloud Platform
New
New
Open Lifecycle and Service Management
Integration Platform
Collaborative Development
Rational
Requirements
Composer
Rational
Quality
Manager
IBM JazzHub
Rational Team Concert
Developer
Architect
Quality
Professional
Deployment
Engineer
Engineer
Analyst
Adoption of RRC and RTC for CICS
• RRC (Rational Requirements Composer) used for
– Roadmaps and Features
– CICS Portfolio View
– External view of requirements and business value
• RTC (Rational Team Concert) used for
– EPICs and Stories
– Tasks and Defects
– SCM and build
– And much more
– “If it’s not in RTC, it’s not happening”
• RTC Dashboards can show
– Candidates for this and future iterations
– Planned items for iteration
– Tasks for the team
– Defects for developer to fix, for tester to verify
– Burndown charts
– Creating marketing collateral and events
What was the net outcome?
28
 Stronger uptake of CICS TS V4 in comparison with CICS TS V3
 APAR and PMR receipts of V4 lower than V3 in the first 18 months
 Started Managed Beta V4 activities with customers 18 months prior to GA, in V3 and prior releases
the beta started 4 months to GA
 Open Beta released 6 months prior to GA
 Delivery of multiple Feature Packs during the development phases
 Ability to respond to market, changing planned content based on business value and market
Thank you
29
@IBM_CICS /IBM_CICS/IBMCICS
More from me…
http://asmarterplanet.com/mobile-
enterprise/blog/2014/12/six-things-
ibm-mobilefirst-platform-server.html
- The need for a mobile middleware
tier
For more Mobile…
http://www-01.ibm.com/support/docview.wss?uid=swg24031760 -
GENAPP
http://www.redbooks.ibm.com/abstracts/sg248215.html?Open -
System z in a mobile world
http://www.redbooks.ibm.com/abstracts/sg248161.html?Open -
CICS JSON Web Services Redbook
Tweet me comments and questions
@BrightSituation

More Related Content

PPT
#1922 rest-push2 ap-im-v6
ODP
SHARE 2014, Pittsburgh IBM Mobile Pricing
PPT
HIA 1015 Speed the Development of Robust Integrations with IBM Integration Bu...
PDF
3298 microservices and how they relate to esb api and messaging - inter con...
PDF
IBM Codename: Bluemix - Cloudfoundry, PaaS development and deployment trainin...
PDF
IBM InterConnect 2013 Cloud General Session: George Karidis
PPTX
Bluemix
PDF
Powering the digital economy with CICS and z/OS connect - at the "z Systems...
#1922 rest-push2 ap-im-v6
SHARE 2014, Pittsburgh IBM Mobile Pricing
HIA 1015 Speed the Development of Robust Integrations with IBM Integration Bu...
3298 microservices and how they relate to esb api and messaging - inter con...
IBM Codename: Bluemix - Cloudfoundry, PaaS development and deployment trainin...
IBM InterConnect 2013 Cloud General Session: George Karidis
Bluemix
Powering the digital economy with CICS and z/OS connect - at the "z Systems...

What's hot (19)

PDF
Hybrid Cloud with IBM Bluemix, Docker and Open Stack
PPT
Bluemix the digital innovation platform
PDF
IBM Bluemix
PPT
IBM SmartCloud and ISVs September 2013 (Softlayer)
PDF
Presentation build and connect apps, devices and data ibm worklight overview
PDF
Whats new in data power
PDF
Common DataPower use cases, incl Caching with XC-10 appliance.
PPT
Data power use cases
PDF
Become a Bluemix Architect in 45 Minutes
PDF
Thinking about SDN and whether it is the right approach for your organization?
PDF
Datapowercommonusecases 130509114200-phpapp02
PDF
IBM DataPower Gateway - Common Use Cases
PDF
WebSphere Integration User Group 13 July 2015 : DataPower session
PDF
Connecting IBM MessageSight to the Enterprise
PPTX
Bluemix Technical Overview
PDF
Using IBM DataPower for rapid security and application integration with an op...
PDF
Enterprise grade cloud services with data power virtual
PPT
IBM Interconnect 2016 - Hybrid Cloud Messaging
PDF
The Power of Two: Using IBM Standards Processing Engine for EDI Commerce or H...
Hybrid Cloud with IBM Bluemix, Docker and Open Stack
Bluemix the digital innovation platform
IBM Bluemix
IBM SmartCloud and ISVs September 2013 (Softlayer)
Presentation build and connect apps, devices and data ibm worklight overview
Whats new in data power
Common DataPower use cases, incl Caching with XC-10 appliance.
Data power use cases
Become a Bluemix Architect in 45 Minutes
Thinking about SDN and whether it is the right approach for your organization?
Datapowercommonusecases 130509114200-phpapp02
IBM DataPower Gateway - Common Use Cases
WebSphere Integration User Group 13 July 2015 : DataPower session
Connecting IBM MessageSight to the Enterprise
Bluemix Technical Overview
Using IBM DataPower for rapid security and application integration with an op...
Enterprise grade cloud services with data power virtual
IBM Interconnect 2016 - Hybrid Cloud Messaging
The Power of Two: Using IBM Standards Processing Engine for EDI Commerce or H...
Ad

Viewers also liked (20)

ODP
IBM Impact session CICS & java a tale of liberty
PPTX
"Войди в картину". К 170-летию В. Паленова
PDF
2014 1 pr커뮤니케이션세미나 강의록 3월4월
PPTX
Theories of power
PPT
SHARE 2014 Pittsburgh, Modernizing cics for cloud
ODP
Características Físicas
PDF
2014 multimuntanya powerpoint_mare de deu_sise_ (2)
PPT
IBM Impact Session 2351 hybrid apps
PPT
Share seattle liberty
PPTX
Belgium prb
PPT
Impact 2014 Best practices for_cics_soa_co
PPT
IBM Impact session 1654-how to move an existing cics application to a smartphone
ODP
SHARE 2014, Pittsburgh CICS Connectivity amd Networking
PPTX
Estrategia de Comunicacion Lectora-mirna-a
PDF
Oumh1303 20130712 155801
PPTX
پردرآمدترین مشاغل ایران کدامند؟
PPTX
Lühiportfolio projekti : Uushorisont . detailides*
PPTX
InterConnect session 2819 1_billion_smart Phones
PDF
Cics ts v4 and v5 recap, and the new cics ts v5.3 open beta (1)
PPT
Фантастические композиции С. Дали. К 110-летию испанского живописца Сальвад...
IBM Impact session CICS & java a tale of liberty
"Войди в картину". К 170-летию В. Паленова
2014 1 pr커뮤니케이션세미나 강의록 3월4월
Theories of power
SHARE 2014 Pittsburgh, Modernizing cics for cloud
Características Físicas
2014 multimuntanya powerpoint_mare de deu_sise_ (2)
IBM Impact Session 2351 hybrid apps
Share seattle liberty
Belgium prb
Impact 2014 Best practices for_cics_soa_co
IBM Impact session 1654-how to move an existing cics application to a smartphone
SHARE 2014, Pittsburgh CICS Connectivity amd Networking
Estrategia de Comunicacion Lectora-mirna-a
Oumh1303 20130712 155801
پردرآمدترین مشاغل ایران کدامند؟
Lühiportfolio projekti : Uushorisont . detailides*
InterConnect session 2819 1_billion_smart Phones
Cics ts v4 and v5 recap, and the new cics ts v5.3 open beta (1)
Фантастические композиции С. Дали. К 110-летию испанского живописца Сальвад...
Ad

Similar to z Technical Summit Track 3 Session 4 Developing mobilefirst app for z (20)

PPTX
fiu-cloud-hackathon-lec1-v6
ODP
SHARE 2014, Pittsburgh IBM Mobile Pricing
PDF
IBM BlueMix Presentation - Paris Meetup 17th Sept. 2014
PPTX
Bluemix overview - UK WebSphere Integration User Group
PDF
Presentation applications with the power of soft layer
PDF
Cloud Native Patterns with Bluemix Developer Console
PDF
Go Cloud Native with IBM Bluemix Developer Console - GIDS17
PDF
135 . Haga el deploy de su aplicación en minutos y en cualquier lenguaje con ...
PDF
IBM MobileFirst - Hybrid App Development
PPTX
Integration & Microservices
PPT
LIVO Presentation by ENO
PPT
IBM Softlayer Bluemix Marketplace
PDF
Faster and more efficient processes by combining BPM and Mobile – yes we can!
PPTX
Bluemix Overview & Demo
 
PDF
IBM MobileFirst Reference Architecture 1512 v3 2015
PPTX
Akhil518
PPTX
Convertigo Mobile Application Development platform for Enterprises
PPT
Livo presentation
PPTX
Bluemix digital innovation_platform
PDF
IBM MobileFirst - Hybrid Application Development with Worklight
fiu-cloud-hackathon-lec1-v6
SHARE 2014, Pittsburgh IBM Mobile Pricing
IBM BlueMix Presentation - Paris Meetup 17th Sept. 2014
Bluemix overview - UK WebSphere Integration User Group
Presentation applications with the power of soft layer
Cloud Native Patterns with Bluemix Developer Console
Go Cloud Native with IBM Bluemix Developer Console - GIDS17
135 . Haga el deploy de su aplicación en minutos y en cualquier lenguaje con ...
IBM MobileFirst - Hybrid App Development
Integration & Microservices
LIVO Presentation by ENO
IBM Softlayer Bluemix Marketplace
Faster and more efficient processes by combining BPM and Mobile – yes we can!
Bluemix Overview & Demo
 
IBM MobileFirst Reference Architecture 1512 v3 2015
Akhil518
Convertigo Mobile Application Development platform for Enterprises
Livo presentation
Bluemix digital innovation_platform
IBM MobileFirst - Hybrid Application Development with Worklight

More from nick_garrod (20)

PPTX
2844 inter connect cics policy (2844)
PDF
Enhanced cics cloud enablement and dev ops capabilities
PDF
Api management customer
PDF
Anz cics ts v5 technical update seminar intro (half day event)
ODP
S111 cics connectivity in devops
ODP
S110 gse - liberte egalite fraternite
PPTX
S109 cics-java
ODP
S108 - 1 Billion Smartphones a year and counting – How is your CICS connected?
PPTX
S107 5 compelling reasons for using cics in the cloud
PPTX
S106 using ibm urban code deploy to deliver your apps to cics
PPT
S105 performance
PPTX
S104 twist and cloud
PPTX
S103 cics cloud and dev ops agility
PPT
S102 cics the future is closer abridged
PPTX
S101 cics what's in it for you
PPT
Share seattle health_center
PPT
SHARE Seattle 2015 Taming the Beast – Best Practices for zFS with CICS
PPTX
Share seattle cics cloud
PPTX
SHARE 2015 SeattleShare cics ts 52 technical overview
PPTX
Share cics policy (2844)
2844 inter connect cics policy (2844)
Enhanced cics cloud enablement and dev ops capabilities
Api management customer
Anz cics ts v5 technical update seminar intro (half day event)
S111 cics connectivity in devops
S110 gse - liberte egalite fraternite
S109 cics-java
S108 - 1 Billion Smartphones a year and counting – How is your CICS connected?
S107 5 compelling reasons for using cics in the cloud
S106 using ibm urban code deploy to deliver your apps to cics
S105 performance
S104 twist and cloud
S103 cics cloud and dev ops agility
S102 cics the future is closer abridged
S101 cics what's in it for you
Share seattle health_center
SHARE Seattle 2015 Taming the Beast – Best Practices for zFS with CICS
Share seattle cics cloud
SHARE 2015 SeattleShare cics ts 52 technical overview
Share cics policy (2844)

Recently uploaded (20)

PDF
Internet Downloader Manager (IDM) Crack 6.42 Build 41
PPT
Introduction Database Management System for Course Database
PPTX
ISO 45001 Occupational Health and Safety Management System
PDF
Addressing The Cult of Project Management Tools-Why Disconnected Work is Hold...
PDF
medical staffing services at VALiNTRY
PDF
System and Network Administration Chapter 2
PDF
Wondershare Filmora 15 Crack With Activation Key [2025
PDF
Flood Susceptibility Mapping Using Image-Based 2D-CNN Deep Learnin. Overview ...
PDF
top salesforce developer skills in 2025.pdf
PPTX
VVF-Customer-Presentation2025-Ver1.9.pptx
PDF
Design an Analysis of Algorithms I-SECS-1021-03
PDF
T3DD25 TYPO3 Content Blocks - Deep Dive by André Kraus
PPTX
L1 - Introduction to python Backend.pptx
PDF
AI in Product Development-omnex systems
PDF
How Creative Agencies Leverage Project Management Software.pdf
PDF
Raksha Bandhan Grocery Pricing Trends in India 2025.pdf
PDF
Internet Downloader Manager (IDM) Crack 6.42 Build 42 Updates Latest 2025
PDF
Digital Strategies for Manufacturing Companies
PPTX
Lecture 3: Operating Systems Introduction to Computer Hardware Systems
PDF
Adobe Illustrator 28.6 Crack My Vision of Vector Design
Internet Downloader Manager (IDM) Crack 6.42 Build 41
Introduction Database Management System for Course Database
ISO 45001 Occupational Health and Safety Management System
Addressing The Cult of Project Management Tools-Why Disconnected Work is Hold...
medical staffing services at VALiNTRY
System and Network Administration Chapter 2
Wondershare Filmora 15 Crack With Activation Key [2025
Flood Susceptibility Mapping Using Image-Based 2D-CNN Deep Learnin. Overview ...
top salesforce developer skills in 2025.pdf
VVF-Customer-Presentation2025-Ver1.9.pptx
Design an Analysis of Algorithms I-SECS-1021-03
T3DD25 TYPO3 Content Blocks - Deep Dive by André Kraus
L1 - Introduction to python Backend.pptx
AI in Product Development-omnex systems
How Creative Agencies Leverage Project Management Software.pdf
Raksha Bandhan Grocery Pricing Trends in India 2025.pdf
Internet Downloader Manager (IDM) Crack 6.42 Build 42 Updates Latest 2025
Digital Strategies for Manufacturing Companies
Lecture 3: Operating Systems Introduction to Computer Hardware Systems
Adobe Illustrator 28.6 Crack My Vision of Vector Design

z Technical Summit Track 3 Session 4 Developing mobilefirst app for z

  • 1. Developing an IBM MobileFirst platform application for z Systems Andy Armstrong andy.armstrong@uk.ibm.com Twitter: @BrightSituation 1
  • 2. Agenda 2 • How can you ensure that mobile applications are written once for supporting multiple device types? – Native Webapp Hybrid – Mobile middleware tier and studio tier • Which tools from the IBM Rational portfolio are most useful in creating mobile applications to access z Systems services? – Starting point bottom up – RDz – generate web services – Explorer • This session focuses on developing a mobile application to access the mainframe with an emphasis on the server run-time and development environment of the IBM MobileFirst Platform. – Recap studio and server components, need for each – RTC SCM and task management – Use studio to generate application – Run live – Recap value of IBM Software • Security and Mobile • Value of embracing tooling – great products become brilliant with great tooling We look at the development from a CICS application use-case perspective and demonstrate the steps to connect to the CICS application from mobile devices.
  • 4. Where we are in todays agenda 4 • Mobilizing the mainframe • Modernizing mainframe applications for mobile and more • Exposing mainframe applications and services to mobile • Developing an IBM MobileFirst platform application for z Systems • Optimizing applications and data for mobile workloads • Client Use Cases and Getting Started with Mobile and z Systems
  • 5. Native, Webapp, or Hybrid…. 5 • Native – SDK for specific brand of device, specific tooling – Best end user experience • Webapp – Responsively designed websites let minimal investment return basic mobile support as a staple entry point to the mobile world • Hybrid – A combination of Native and Webapp – Best of both worlds?
  • 6. The need for a mobile middleware tier 6 • Regardless of your choice (native, webapp, hybrid) the IBM MobileFirst Platform server is where consistent value is delivered • This is where ‘magic’ happens to reach z System services • The platform offers: • An integration layer – keep client side code clean, light, simple • A security layer – keep authenticity and app management for you • Operational analytics – app crash logs, app->server comms tracking • Secure offline data store with synchronisation capabilities • Consistent connectivity point for all calls to service providers, z Systems, distributed systems, public systems
  • 7. 7 CICS Application Overview • CICS Catalog Manager Application – COBOL based CICS application (EGUI) – VSAM File – Separate Presentation Logic and Business Logic – Callable Interface - Container 7
  • 8. 8 8 z/OS 3270 Client VSAM File (EXMPCAT) CICS EGUI Main Inquiry itemBrowse Existing CICS 3270 Application Place Order
  • 9. 9 z/OS VSAM File (EXMPCAT) CICS EGUI Main Inquiry itemBrowse Place Order 9 RDZ and Debug Tool Web Service enables and test existing app CICS Web Service
  • 10. 10 10 Mobile Client MobileFirst Platform Server Shopping Cart Enhanced Search and Shopping Cart Features are added via Worklight. Features do not currently exist in the CICS application. Enhanced Search MobileFirst enhances the Web Service Enabled App z/OS VSAM File (EXMPCAT) CICS EGUI Main Inquiry itemBrowse Place Order CICS Web Service Adapters
  • 11. Starting point – bottom up 11 • We need services for our app to connect to our Systems of record • IBM MobileFirst platform can use standard web services (Soap, JSON, SAP) • How do we make these services? – CICS -> DFHLS2WS, DFHLS2JS – IMS -> IMS Gateway, IMS Mobile feature pack – Spring? JAX-RS? • What would these services look like?
  • 12. Web service resource interrelationships 12
  • 13. RDz – generate web services easily 13 • Live(ish) demo – catalog manager web services creation • https://www.youtube.com/watch?v=YCG_LtllrLk 4m 22 -> 8m 15 • Speak with William(Bill) on RDz dev team • Make some services, install them using explorer integrated into RDz • How do we source control any source changes? How do we track the task of making the web service? • Integrate changes made via RDz with existing solution • Use RTC for SCM and Task Management (example to follow)
  • 14. CICS Explorer 14 • Confirm programs, pipelines, web services are installed correctly • Confirm TCPIP port and URIMaps for service URL • Live demo of doing this
  • 15. Make mobile application 15 • We have made our web service for the IBM MobileFirst Platform to access our core business logic running on z system • Now use MobileFirst Studio to build a mobile application to call the service we have exposed • Live demo of creating this mobile application calling a CICS Service
  • 16. RTC – SCM system and time management 16 • How do we track this work? – Task management • How do we track the source code changes? – Task Management tie in to source control • How do I integrate the code changes deployed to z Systems? – RTC Builds
  • 17. z Systems mobile security topologies DataPower Gateway Appliance CICS COBOL, PL/I, C/C++, and Java Services CICS COBOL, PL/I, C/C++, and Java Services z/OS Connect IBM Statement of Direction: IBM intends to deliver IBM WebSphere Liberty z/OS Connect (z/OS Connect) as a common program component of WebSphere Application Server for z/OS, IMS Enterprise Suite for z/OS, CICS Transaction Server for z/OS, and CICS Transaction Gateway. z/OS Connect is intended to provide a simplified, secure, and scalable gateway functionality to route web, cloud, and mobile application traffic that accesses applications provided by the aforementioned z/OS products, as well as z/OS Batch and z/OS UNIX™ System Services applications. MobileFirst Platform Server
  • 18. So how to chose the right mobile security solution? • Type of user – B2E – B2C • Type of mobile app – Web – Native – Hybrid – Worklight? • Type of access – Intranet/extranet – Internet • Number of users – Small (10s to 100s) – Medium (1000s) – Large (or unknown?) Security requirements • Authentication • Authorization • Confidentiality • Integrity Sensitivity of data and transactions • Financial? • Personal? • Will sensitive data be stored on the device? Security standards • Company • Government or external body Existing security architecture • User registry • Security products
  • 19. CICS mobile security topologies DataPower Gateway Appliance CICS COBOL, PL/I, C/C++, and Java Services CICS COBOL, PL/I, C/C++, and Java Services z/OS Connect JSON/http(s) JSON/http(s) JSON or XML / http(s) JSON/http(s) JSON/ http(s) WOLA JCICS MobileFirst Platform Server
  • 20. Security 20 • Gateway Tier • Exploitation control • App & User authentication MobileFirst Platform MobileFirst Platform MobileFirst MobileFirst Platform MobileFirst Platform
  • 21. e.g. REST (JSON/XML) over HTTPS MobileFirst Platform, WAS ND e.g. SOAP over HTTP(S) or messaging CICS IMS DB2 Other servers, Web Apps, other services DataPower Gateway Appliance DataPower Mobile Security Features Available as a physical or virtual appliance • Security, Control, Integration & Optimization of mobile workload • Enforcement point for centralized security policies • Authentication, Authorization, SAML, OAuth 2.0, Audit • Threat protection for XML and JSON • Message validation and filtering • Centralized management and monitoring point • Traffic control / Rate limiting • Integration with MobileFirst Platform
  • 22. DataPower JSON protection Jumbo JSON Payload • Label - Value Pairs • Label String Length (characters) • Value String Length (characters) • Number Length (characters) • Threat Protection • Maximum nesting depth (levels) • Maximum document size (bytes) Label String Nesting Depth of 3 Value String Number Document Size
  • 23. IBM MobileFirst Platform Server on z Systems MobileFirstMobileFirst ServerServer Authentication JSON Translation Server-side App Code -- WAS Adapter Library Application Center Enterprise App Store Worklight Console Push Notifications Analytics Cast Iron HTTP/REST SOAP WMB SQL SAP z/OS CICS Linux on z Device RuntimeDevice Runtime • Security and Authentication • Back-end Data Integration • Caching and local data Linux on z z/OS MobileFirst
  • 24. IBM MobileFirst Security Features Worklight ServerWorklight Server Authentication JSON Translation Server-side Application Code Adapter Library Client-side App Resources Direct Update Mobile Web Apps Unified Push Notifications StatsAggregation Device RuntimeDevice Runtime • Cross Platform Technology • Security and Authentication • Back-end Data Integration • Post-deployment control and Diagnostics Enforcing security updates Remote disable Remote disable Direct updateDirect update Providing robust authentication and authorization Authentication integration framework Authentication integration framework Data protection realms Data protection realms Coupling device id with user id Coupling device id with user id Streamlining Corporate security processes Mobile platform as a trust factor Mobile platform as a trust factor Application Security Code obfuscation Code obfuscation SSL with server identity verification SSL with server identity verification Proven platform security Proven platform security Jailbreak and malware detection Jailbreak and malware detection App authenticity testing App authenticity testing Protecting data on the device Encrypted offline cache Encrypted offline cache Offline authenticationOffline authentication Secure challenge- response on startup Secure challenge- response on startup • Ensure that only specific applications on specific devices can connect to enterprise systems • Extensible framework for authentication of mobile application users • Encrypt data on the device • Enforce security updates • Propagate identity to enterprise systems
  • 25. Rational Team Concert (RTC) Rational Developer for System z (RDz) Rational Development and Test Environment for Systems z (RD&T) CICS Explorer z/OS Debug Tool IBM MobileFirst platform DataPower API Management Products and Technologies – a recap
  • 26. Break down silos by moving to an Agile team environment • Manage all types of code from JavaScript to COBOL – mobile to mainframe • Instant-on, self-serve development capabilities with JazzHub on SoftLayer • Accelerate agile adoption on the mainframe • Integrate existing SCM and deployment tools, e.g. CICS Configuration Manager and CICS Deployment Assistant • Enhanced Lifecycle integration adapters for third-party tools Maximize team productivity 26 Rational Team Concert Rational Requirements Composer Rational Quality Manager DevOps Services (JazzHub) for IBM Cloud Platform New New Open Lifecycle and Service Management Integration Platform Collaborative Development Rational Requirements Composer Rational Quality Manager IBM JazzHub Rational Team Concert Developer Architect Quality Professional Deployment Engineer Engineer Analyst
  • 27. Adoption of RRC and RTC for CICS • RRC (Rational Requirements Composer) used for – Roadmaps and Features – CICS Portfolio View – External view of requirements and business value • RTC (Rational Team Concert) used for – EPICs and Stories – Tasks and Defects – SCM and build – And much more – “If it’s not in RTC, it’s not happening” • RTC Dashboards can show – Candidates for this and future iterations – Planned items for iteration – Tasks for the team – Defects for developer to fix, for tester to verify – Burndown charts – Creating marketing collateral and events
  • 28. What was the net outcome? 28  Stronger uptake of CICS TS V4 in comparison with CICS TS V3  APAR and PMR receipts of V4 lower than V3 in the first 18 months  Started Managed Beta V4 activities with customers 18 months prior to GA, in V3 and prior releases the beta started 4 months to GA  Open Beta released 6 months prior to GA  Delivery of multiple Feature Packs during the development phases  Ability to respond to market, changing planned content based on business value and market
  • 29. Thank you 29 @IBM_CICS /IBM_CICS/IBMCICS More from me… http://asmarterplanet.com/mobile- enterprise/blog/2014/12/six-things- ibm-mobilefirst-platform-server.html - The need for a mobile middleware tier For more Mobile… http://www-01.ibm.com/support/docview.wss?uid=swg24031760 - GENAPP http://www.redbooks.ibm.com/abstracts/sg248215.html?Open - System z in a mobile world http://www.redbooks.ibm.com/abstracts/sg248161.html?Open - CICS JSON Web Services Redbook Tweet me comments and questions @BrightSituation

Editor's Notes

  • #8: This is what we will service enable
  • #12: SO – how do we make this service?
  • #18: There are multiple deployments of mobile in z, dependant on audience of the app – B2B, B2C, each requires different types of security
  • #20: Mention CICS TG (in place of z/OS Connect) Particularly useful for customers with CTG infrastructure today or want direct Restful interface to CICS applications running in older versions of CICS Link: Look at each topology in turn, capabilities, deployment scenarios and benefits
  • #21: Example for broad B2C DataPower in DMZ Payload protection DDOS protection Workload balancing
  • #22: This use case is about connecting your mobile apps to your enterprise data. In this scenario, a business needs a Mobile Gateway for their Security & Integration needs. Its about doing critical functions such as validation, security checks like authentication and authorization, data transformation, protocol mediation, caching, and intelligent routing & load distribution. ----------------- Key DataPowr capabilities: SSL Offload Threat Protection Rate Limiting Validation, Filtering now with Native JSON Support** Authentication z/OS identity propagation Authorization OAuth 2.0 Security Token Translation (e.g SAML) Transformation Content-Based Routing Intelligent Load Distribution Response Caching Locally or to XC10 ** ** Available in DataPower firmware version 6.0 Link: example of threat protect capabilities
  • #23: <A> Add notes Link: DP and CICS mobile security topology
  • #24: 1. Client Server again (but a way to fix issues) 1a. App Center 1b. Automaticate update 2. JSON translation built in 3. Adapters 4. Authentication (user,device, application) 5. Push notifications 6. Analytics 7. Console
  • #25: Review list Link: Worklight and CICS security topology Misc notes Protect the data on the device - Worklight provides two capabilities: encrypted on-device storage and offline authentication. Encrypted on-device storage provides security for the data stored on the device by encrypting the data using the advanced encryption standard (AES) algorithm with 256-bit keys generated using the public-key cryptography standards #5 (PKCS5) algorithm based on a user supplied password and Worklight internal mechanisms. Offline authentication is needed when the mobile application does not have network connectivity, but user verification is still needed to access the on-device data. In these scenarios, the encrypted storage itself can be used to authenticate the user, because the encrypted data can only be unlocked using the correct password supplied by the user. Therefore the encrypted storage can be utilized to achieve more secure offline authentication.
  • #26: Some were used – all could be used to produce higher value, better sharing, more secure, more scalable implementations
  • #27: IBM is recognized as a leader in Gartner, Inc.’s 2013 Magic Quadrant for Application Development Life cycle Management (ADLM) report (link) New Announcement at Pulse 2014: DevOps Services (JazzHub) for IBM Cloud Platform JazzHub (www.jazzhub.com) is IBM’s DevOps solution in the cloud. The JazzHub capabilities allow you to develop and collaborate on software projects in the cloud and to deploy them on BlueMix (see description below) Fully hosted Web IDE, task tracking, agile planning, integrated source control (Git or Jazz SCM) or connection to GitHub repository and auto deployment to BlueMix provide everything you need to develop and deploy your next app, feature or product quickly and with high quality. JazzHub is optimized for use with BlueMix (see description below) to provide a streamlined rapid development experience with built-in DevOps capabilities. JazzHub provides free public projects and fee-based Private projects (free during BlueMix Beta), and enables fully browser-based development through built-in Eclipse Orion technology, and directly supports the Eclipse and Visual Studio IDE's. What is BlueMix (Open Beta, BlueMix is the code name for now) BlueMix is a comprehensive, cloud-based application development and hosting platform. It provides developers of modern web and mobile applications with: Tools to author their web and mobile apps, and tools to make them available on the cloud A scalable, cloud-based infrastructure to deploy and administer their apps - based on a variety of different run-times (Java-based application servers, Ruby, JavaScript, etc.) A wide variety of ready-to-use services (such as persistence, messaging, caching, analytics, etc.)  exposed through APIs and transparently provisioned by the platform at run-time. Developers can dramatically reduce time-to-value - organizations can dramatically reduce operational costs.   Read more about BlueMix FAQ here: https://releaseblueprints.ibm.com/display/CLOUDOE/Internal+FAQ COLLABORATIVE DEVELOPMENT – FOCUS ON COLLABORATIVE LIFECYCLE MANAGEMENT (RTC, RRQ, RQM) In multitier and heterogeneous IT environments, there are different cultural, organizational and process challenges to overcome. There needs to be coordination across all of the stakeholders involved. From the customer to the lines of business on through to development, testing, deployment and operations, when everyone is on the same page we know that quality and speed will improve. This is an area where IBM has been strongly focused. IBM offers a collaborative software delivery platform for Power Systems* clients that allows IT staff in development and operations to work together effectively. Central to this is the capability to leverage skills, knowledge and processes across multiple development languages and operating systems, including Mainframe, Linux on Z, IBM i, AIX and Power Linux. We built the Rational Collaborative Lifecycle Management (CLM) solution, which is our platform to support agile development for our Power customers, to address these requirements. From the business planners who identify the need for competitive mobile access channels, to the operations staff who are delivering the service-level agreements—all of those constituencies can now be brought together in the same environment to review plans, share data and provide feedback. This is a solution that brings a single, integrated platform for any development need – whether it is mobile, cloud, agile, mainframe, midrange or traditional including z – these capabilities are built on the Jazz Platform and will unify across a diverse environment and frees up the team by automating time-consuming tasks. In fact we have clients like Itaú BBA, a Corporate Investment Bank of the Itaú Unibanco group and one of the world’s largest financial conglomerates, has reported “55% time saved on deployment” and TestPro, an IBM business partner focused on software quality and testing services, reported a “99% reduced time for testing” when they implemented CLM with Rational Functional Tester and Rational Performance Tester and leveraged the IBM SmartCloud Enterprise to make their testing solution available to their customers. What’s New? CLM – RRC, RTC, RQM, RSA with DM With CLM, we are excited to roll out a continuous delivery model for CLM capabilities – we are following our own DevOps approach and have built a continuous delivery pipeline that starts in June and will release quarterly. Having releases more often allows teams to streamline their adoption with new capabilities available more often. Another way to get to market faster is to incorporate testing earlier and more often in the lifecycle – and leveraging service virtualization is a way to achieve “continuous testing” – we have simplified this ability with a new integration for Rational Test Workbench in CLM You can extend CLM with Rational Software Architect and Design Manager Improved design collaboration and traceability involving extended lifecycle workflows for actively managed designs PRACTITIONERS time sheet data is made available for reporting and they can see Visual Studio in “my work view” – so less wasted less time What’s New? RRC – [NOTE: Rational Team Concert and Rational Quality Manager also have enhancements and we will cover those as well later in the presentation] Software delivery teams that can apply agile and iterative processes are going to win, especially in a fast-paced market. So getting the requirements right up front is critical and then managing them efficiently and effectively throughout the lifecycle can make the difference in time to market and quality compared to your competition. Enabling developers and business analysts with capabilities to make better decisions while improving their efficiency especially to collaborate with customers and stakeholders will vastly increase the teams ability to deliver faster and with a quality end result. Improve visibility and downstream impact across the lifecycle because you can now simplify the connection to tests and plans to the requirements even if the test team is using HP Quality Center because there is now a Lifecycle Integration Adapter for HPQC You can also connect models and elements to requirements with common OSLC standards for RRC and Rational Software Architect Design Management Broaden collaboration because there is a new “artifact locking” your multi-user environment can stay organized with a “single version of the truth” Make better decisions with deeper analysis because traceability now has even more detail and business analysts can now compare collections to a version of the same collections [Asked Vijay for a bit of clarity] Teams can get started even faster by using new online document structures, or modules, for requirement organization and structure. What’s New? Lifecycle Integration Adapters Allow teams to connect various diverse tools to Rational capabilities to they can fill in gaps in their continuous delivery capabilities and unify across the tools. Last Fall we announced the Standard Edition for connecting CLM and CQ to HP ALM, Atlassian JIRA, and open source Git: allows teams to draw ALM data across tools by improving dashboard capabilities using open social gadgets that expose 3rd party and Rational data. Reporting capabilities are also improved by providing impact analysis through suspect links. We have worked with Tasktop (OEM agreement) to add another Edition for connecting Rational Team Concert to HP ALM and Quality Center, Atlassian JIRA, Microsoft Team Foundation Server and open source Bugzilla Teams can preserve customizations of their current tools, including specialized reporting and workflows, as they integrate across various roles and their respective tools. Uses additional integration methods that supplement OSLC to support alternative use cases and workflow environments in a way that minimizes the impact integration may have for customers in these situations. This NEW release adds adapters for: synchronizing requirements data across Rational Requirements Composer and HP Quality Center – which we mentioned on the last slide. Connecting Rational Team Concert to CA Clarity that allows project and portfolio managers to better collaborate with developers Environment/platform support has been updated for Microsoft Team Foundation Server Target Market/Industries: Size: Any size business and any size team. Roles: Developers, Project and Product Managers, Test Teams, Agile Teams and Scrum Masters, IT Managers What is New News? JazzHub was Beta in the Spring and was not on SoftLayer. This Fall it has moved to SoftLayer platform – secure, reliable and scalable AND is not longer Beta but an IDE on the Cloud. Currently available at no charge as they add capabilities based on customer input and feedback. Starting in 2014, there most likely be a monthly charge for JazzHub. Special promotion for free private projects in 2014 if you register for JazzHub by Dec 31, 2013. Public projects are free. We may introduce practical limits, such as on storage, as part of future JazzHub price plans. Client Needs Addressed: Need to reduce the time and operational costs for deploying and maintaining collaborative development capabilities Allows traditional, mobile and cloud application development teams to collaborate and better manage projects so they get to market or deliver faster. Value Proposition: JazzHub.com provides an instant-on, self-serve, “one stop shop” for individuals and teams to collaboratively develop software in the cloud. Key Benefits: (for Launch Theme) Get projects started very quickly to support continuous delivery Easily enable stakeholders and 3rd party vendors to breakdown silos and support a DevOps approach Plan, track, version control, change management, link, test and deploy in the context of daily work so the entire team has visibility and can work together to deliver faster without losing quality Support to easily fork projects from where teams may already be working like GitHub to unify across teams and tools Free in 2013 – have teams evaluate collaborative development with a real project Competitors & Differentiation: Competitors: GitHub and other opensource application development tools Differentiators: A comprehensive one-stop shop, offering integrated Agile Planning, Change Management, Version Control plus IDE and GITHub Integration support Everything a development team needs to develop software collaboratively on the cloud. Sparklers: Register and start a project in less than a minute. Use Case: PointSource is a premier IBM business partner and a sponsor user for JazzHub. Currently have 12 projects – private and public Doing their own app dev using JazzHub as their collaboration tool – designers, developers, business analysts, execs, mgrs – all the stakeholders involved in a project. Using with clients as well – JazzHub allows us to: Get a project started very quickly. Enable the stakeholders at the client site to get involved directly with them Sometimes develop end-to-end the entire application. Sometimes work in a collaborative team where resources from PointSource work with resources from the client. Working with them in private projects on JazzHub
  • #29: We saw benefit – its not just hype – we adopted this suite of tooling to help build the world’s most capable powerful Transaction Processing Application Server – the worlds economy and business rests upon the shoulders of z, a lot of responsibility is built with Rational tooling.