System requirements

Before installing Zowe™ z/OS components, ensure that your z/OS environment meets the prerequisites. The prerequisites you need to install depend on what Zowe z/OS components you want to use and how you want to install and configure Zowe on z/OS. Therefore, assess your installation scenario and install the prerequisites that meet your needs.

All Zowe server components can be installed on a z/OS environment, while some can alternatively be installed on Linux or zLinux via Docker. The components provide a number of services that are accessed through a web browser such as an API catalog and a web desktop.

• z/OS system requirements
  • z/OS
  • Node.js
  • Java
  • z/OSMF (Optional)
• User ID requirements
  • ZWESVUSR
  • ZWESIUSR
  • ZWEADMIN
  • zowe_user
• Network requirements
• Zowe Docker requirements
• Zowe Desktop requirements (client PC)
• Feature requirements
  • Multi-Factor Authentication MFA
  • Single Sign-On SSO
• Memory requirements

z/OS system requirements

Be sure your z/OS system meets the following prerequisites.

z/OS

• z/OS version in active support, such as Version 2.3 and Version 2.4

  Note: z/OS V2.2 reached end of support on 30 September 2020. For more information, see the z/OS v2.2 lifecycle details https://www.ibm.com/support/lifecycle/details?q45=Z497063S01245B61.

• zFS volume with at least 833 mb of free space for Zowe server components, their keystore, instance configuration files and logs, and third-party plug-ins.

• (Optional, recommended) z/OS OpenSSH V2.2.0 or later

  Some features of Zowe require SSH, such as the Desktop's SSH terminal. Or, you want to install and manage Zowe via SSH, as an alternative to OMVS over TN3270.

• (Optional, recommended) Parallel Sysplex.

  To deploy Zowe for high availability, a Parallel Sysplex environment is recommended. Please check Configuring Sysplex for high availability for more information.

Node.js

• Node.js v14.x (except v14.17.2) or v16.x

  Node is not included with z/OS so must be installed separately. To install Node.js on z/OS, follow the instructions in Installing Node.js on z/OS.

  Note: If you are a software vendor building extensions for Zowe, when using Node.js v14.x or later, it is highly recommended that plug-ins used are tagged. For more information, see Tagging on z/OS.

Java

• IBM SDK for Java Technology Edition V8

z/OSMF (Optional)

• (Optional, recommended) IBM z/OS Management Facility (z/OSMF) Version 2.2, Version 2.3 or Version 2.4.

  z/OSMF is included with z/OS so does not need to be separately installed. If z/OSMF is present, Zowe will detect this when it is configured and use z/OSMF for the following purposes:

  • Authenticating TSO users and generating a single sign-on JSON Web Token (JWT). Ensure that the z/OSMF JWT Support is available via APAR and associated PTFs. If z/OSMF is not available, then Zowe is still able to provide SSO by generating its own JWT and making direct SAF calls.

  • REST API services for Files (Data Sets and USS), JES, and z/OSMF workflows. These are used by some Zowe applications such as the Zowe Explorers in the Zowe Desktop. If z/OSMF REST APIs are not present, other Zowe desktop application, such as the File Editor that provides access to USS directories and files as well as MVS data sets and members, will work through the Zowe Z Secure Services (ZSS) component to access z/OS resources.

  Tips:

  • For non-production use of Zowe (such as development, proof-of-concept, demo), you can customize the configuration of z/OSMF to create what is known as "z/OS MF Lite" that simplifies the setup of z/OSMF. As z/OS MF Lite only supports selected REST services (JES, DataSet/File, TSO and Workflow), you will observe considerable improvements in startup time as well as a reduction in the efforts involved in setting up z/OSMF. For information about how to set up z/OSMF Lite, see Configuring z/OSMF Lite (non-production environment).
  • For production use of Zowe, see Configuring z/OSMF.

User ID requirements

Specific user IDs with sufficient permissions are required to run or access Zowe.

ZWESVUSR

This is a started task ID used to run the PROCLIB ZWESVSTC.

The task starts a USS environment using BPXBATSL that executes the core Zowe Desktop (ZLUX) node.js server, the Java API Mediation Layer, and the Z Secure Services C component. To work with USS, the user ID ZWESVUSR must have a valid OMVS segment.

Class	ID	Access	Reason
CSFSERV	CSFRNGL	READ	To generate symmetric keys using ICSF that is used by Zowe Desktop cookies
FACILITY	ZWES.IS	READ	To allow Zowe ZWESVSTC processes to access the Zowe ZIS cross memory server
FACILITY	BPX.SERVER + BPX.DAEMON	UPDATE	To allow the Zowe Desktop ZLUX server to run code on behalf of the API requester's TSO user ID. For more information, see Security Environment Switching.
FACILITY	IRR.RUSERMAP	READ	To allow Zowe to map an X.509 client certificate to a z/OS identity
FACILITY	BPX.JOBNAME	READ	To allow z/OS address spaces for unix processes to be renamed for ease of identification
FACILITY	IRR.RADMIN.LISTUSER	READ	To allow Zowe to obtain information about OMVS segment of the user profile using LISTUSER TSO command
APPL	'OMVSAPPL'	READ	Optional To allow Zowe Desktop vendor extensions the ability to use single-sign on.

ZWESIUSR

This is a started task ID used to run the PROCLIB ZWESISTC that launches the cross memory server (also known as ZIS). It must have a valid OMVS segment.

ZWEADMIN

This is a group that ZWESVUSR and ZWESIUSR should belong to. It must have a valid OMVS segment.

zowe_user

If z/OSMF is used for authentication and serving REST APIs for Zowe CLI and Zowe Explorer users, the TSO user ID for end users must belong to one or both of the groups IZUUSER or IZUADMIN.

Network requirements

The following ports are required for Zowe. These are default values. You can change the values by updating variable values in the instance.env file. For more information, see Configuring the Zowe instance directory.

Port number	Variable name	Purpose
7552	CATALOG_PORT	Used to view API swagger / openAPI specifications for registered API services in the API Catalog.
7553	DISCOVERY_PORT	Discovery server port which dynamic API services can issue APIs to register or unregister themselves.
7554	GATEWAY_PORT	The northbound edge of the API Gateway used to accept client requests before routing them to registered API services. This port must be exposed outside the z/OS network so clients (web browsers, VS Code, processes running the Zowe CLI) can reach the gateway.
7555	ZWE_CACHING_SERVICE_PORT	Port of the caching service that is used to share state between different Zowe instances in a high availability topology.
8545	JOBS_API_PORT	Port of the service that provides REST APIs to z/OS jobs used by the JES Explorer.
8546	JES_EXPLORER_UI_PORT	Port of the JES Explorer GUI for viewing and working with jobs in the Zowe Desktop.
8547	FILES_API_PORT	Port of the service that provides REST APIs to MVS and USS file systems.
8548	MVS_EXPLORER_UI_PORT	Port of the MVS Explorer GUI for working with data sets in the Zowe Desktop.
8550	USS_EXPLORER_UI_PORT	Port of the USS Explorer GUI for working with USS in the Zowe Desktop.
8544	ZOWE_ZLUX_SERVER_HTTPS_PORT	The Zowe Desktop (also known as ZLUX) port used to log in through web browsers.
8542	ZOWE_ZSS_SERVER_PORT	Z Secure Services (ZSS) provides REST API services to ZLUX, used by the File Editor application and other ZLUX applications in the Zowe Desktop.

Zowe Docker requirements

Technical Preview The Zowe Docker build is a technical preview.

Docker is a technology for delivering a set of software and all its prerequisites and run them in an isolated manner to reduce installation steps and to eliminate troubleshooting environmental differences. Docker can run on many operating systems, but currently the Zowe Docker image is for x86 Linux (Intel, AMD) and zLinux ("s390x"). Support for platforms such as zCX, Windows, and more will be added over time.

To get Docker for Linux, you should check your Linux software repository. Whether using Ubuntu, Red Hat, SuSE, and many other types of Linux, you can install Docker the same way you install other software on Linux through the package manager.

Once you have Docker, the Zowe Docker image has the following requirements

• 4 GB free RAM, 8 GB recommended
• 4 GB free disk space
• Network access to the z/OS host. The Linux host must be able to communicate with the z/OS host.

When using Docker the USS components of Zowe will run off z/OS in the Linux container, however a z/OS installation of Zowe is still required for the ZSS and cross memory server.

Note: The subsections of z/OS requirements such as for API Mediation Layer, Web Explorers, and Application Framework are not required because they are included in the Docker install.

Zowe Desktop requirements (client PC)

The Zowe Desktop is powered by the Application Framework which has server prereqs depending on where it is installed

• Zowe Application Framework on z/OS requirements
• Application Framework on Docker prerequisites

The Zowe Desktop runs inside of a browser. No browser extensions or plugins are required. The Zowe Desktop supports Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Edge releases that are at most 1 year old, except when the newest release is older. For Firefox, both the regular and Extended Support Release (ESR) versions are supported under this rule.

If you do not see your browser listed here, please contact the Zowe community so that it can be validated and included.

Feature requirements

Zowe has several optional features that have additional prerequisites as follows.

Multi-Factor Authentication (MFA)

Multi-factor authentication is supported for several components, such as the Desktop and API Mediation Layer. Multi-factor authentication is provided by third-party products which Zowe is compatible with. The following are known to work:

• IBM Z Multi-Factor Authentication.

Note: To support the multi-factor authentication, it is necessary to apply z/OSMF APAR PH39582.

For information on using MFA in Zowe, see Multi-Factor Authentication.

Note: MFA must work with Single sign-on (SSO). Make sure that SSO is configured before you use MFA in Zowe.

Single Sign-On (SSO)

Zowe has an SSO scheme with the goal that each time you use multiple Zowe components you should only be prompted to login once.

Requirements:

• IBM z/OS Management Facility (z/OSMF)

Memory requirements

Zowe API ML components have following memory requiremets:

Component name	Memory usage
Gateway service	256MB
Discovery service	256MB
API Catalog	512MB
Metrics service	512MB
Caching service	512MB