Security at the Core: SUSE Support for the New IBM z15 and LinuxONE Single Frame Models

If you ask any CIO, they’ll tell you that their architecture must be resilient, secure and agile.  They need to discover ways to generate maximum value from technology investments.   This is why the new IBM z15 and LinuxONE Single Frame Models give CIOs all that and more.

These new ultra-modern systems – built on the most resilient architecture in computing today – provides unmatched security, availability, performance, and scale.  In addition, these systems are ideal for businesses that demand fast data access, transactions at scale, and the highest level of trust.

For more than 20 years and throughout the evolution of IBM Z systems, SUSE has been a key partner of IBM.  We have supported the IBM Z security and cryptography features every step of the way.  And now, SUSE is excited to include additional security features in our upcoming SUSE Linux Enterprise Server 15 SP2 release.

Who are the IBM z15 and LinuxONE III Single Frame Models?

The IBM z15 and LinuxONE III single frame models are designed to digitally transform your business with the most security conscious architecture literally at the core of the system.  And these models provide enough power for your developers to build new digital and artificial intelligence (AI) services that your business needs. In this new platform, IBM strives to maintain the highest level of security and resilience.

Learn all about the new z15 and LinuxONE III models.

How SUSE Linux Steps Up Secure Execution

What is secure execution anyway?  Secure execution enables you to scale up to thousands of workloads in full isolation protected from internal and external threats.  This eliminates the security issue present in other Linux servers running multiple containers in the same virtual machine.  It was designed for the most critical and sensitive data and workloads including:

• Sensitive databases
• Cryptography services
• Blockchain services

SUSE Linux Enterprise Server 15 SP2 incorporates support for secure execution in the operating system so that:

• Kernel Virtual Machine (KVM) guests are fully isolated and protected from hypervisor
  • The hypervisor admins can still manage and deploy workloads, but are unable to view data running on a guest
• Multiple tenants/applications running on a shared LPAR have fully isolated environments
• Intellectual property and proprietary secrets are protected

If you are in any industry that demands a secure environment, SUSE Linux Enterprise Server together with the new IBM z15 and LinuxONE III single frame models have you covered.  Secure execution will protect and isolate critical workloads from both internal and external threats.

What Else is SUSE Up To?

Secure execution is not the only thing we are working for as we look forward to our next release.  Some other interesting developments in the works include:

• Enhancements made in support of the IBM Dynamic Partition Manager. Configuring LinuxONE just became easier – all you just need is a web browser.
• Continued enhancements of cryptography on disk and on the network (wire) providing even greater security.
• The ability to optimize performance tuning with the CPU-measurement counter facility that supports the MT-diagnostic counter set introduced with IBM z14 and LinuxONE II.
• Continued enhancements of core Linux functions and packages to support new hardware instructions introduced in IBM z15 and LinuxONE III.

In addition to these enhancements, SUSE continues to partner with IBM on a new Redbook using KVM with SUSE Linux Enterprise Server for IBM Z and LinuxONE.  SUSE Linux Enterprise Server supports the IBM z15 and LinuxONE III single frame models — as well as previously released IBM Z and LinuxONE systems.

Chapter 8 in the IBM Redbook The Virtualization Cookbook for IBM Z Volume 5: KVM, focuses on using SUSE Linux Enterprise Server on IBM Z with KVM and Oracle database.  This chapter explains how to deploy Oracle on a SUSE Linux Enterprise Server VM running on KVM on System Z.  More importantly, it outlines the steps needed to take the KVM virtual machine and make it run natively on the LPAR in case a customer must open a support request with Oracle.

Continued Partnership

The SUSE and IBM partnership is alive, well, and growing;  we are excited about SUSE Linux Enterprise 15 SP2 running on these platforms.  We look forward to sharing even more information with you as we continue to enhance SUSE Linux Enterprise Server and additional solutions for you to take advantage of all the features IBM has introduced.