Stay organized with collections
Save and categorize content based on your preferences.
Mainframe Assessment Tool is packaged as a disk image that you can use to
create a virtual machine (VM) instance on Compute Engine. The VM runs a
web-based portal that you can connect to and interact with to perform an
analysis of your mainframe applications.
This page describes how to create a Mainframe Assessment Tool VM instance
and access it from your local Linux or Windows machine.
Use the following table to determine the values for MACHINE_TYPE
and DISK_SIZE based on the expected size of your assessment data
Assessment zip file size
MACHINE_TYPE
DISK_SIZE
Smaller than 5MB
e2-standard-4
100GB
Between 5MB and 50MB
e2-standard-8
100GB
Larger than 50MB, or multiple assessments in parallel
e2-highmem-16
300GB
If you've configured the firewall in your project to allow IAP
tunnels only for VMs with certain network tags, then you can also add the
network tags using the --tags flag. For example, --tags=assessment-iap.
If your project already has a working Cloud NAT (network address translation) setup, then you just need to add the --no-address flag to
the gcloud command that creates the VM.
Set up access to Mainframe Assessment Tool from your local computer
You can access Mainframe Assessment Tool from your Linux, macOS, or Windows-based
local computer by using Google Cloud CLI through an Identity-Aware Proxy tunnel.
To create an encrypted tunnel to a port of Mainframe Assessment Tool VM instance, run the
following command:
LOCAL_PORT: any port number on your local machine that you want
to use for the tunneled connection to the Mainframe Assessment Tool.
PROJECT_ID: the project ID of the VM project.
Google Cloud CLI performs a connectivity test with the VM instance, then opens a
tunnel and shows a port number as follows:
Listening on port 6060.
All traffic sent to localhost:LOCAL_PORT is forwarded
to the Mainframe Assessment Tool VM instance. The port is only accessible by applications
running on your local computer.
To access Mainframe Assessment Tool from your local computer, open a web browser and go
to localhost:LOCAL_PORT.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Set up and access Mainframe Assessment Tool\n\nMainframe Assessment Tool is packaged as a disk image that you can use to\ncreate a virtual machine (VM) instance on Compute Engine. The VM runs a\nweb-based portal that you can connect to and interact with to perform an\nanalysis of your mainframe applications.\n\nThis page describes how to create a Mainframe Assessment Tool VM instance\nand access it from your local Linux or Windows machine.\n\nBefore you begin\n----------------\n\nComplete the steps to [prepare for discovery and assessment](/mainframe-assessment-tool/docs/prepare-for-assessment).\n\nSet up Mainframe Assessment Tool VM instance\n--------------------------------------------\n\nTo set up a Mainframe Assessment Tool VM instance, follow these steps:\n\n1. In the Google Cloud console, click\n **Activate Cloud Shell**.\n\n [Go to the Google Cloud console](https://console.cloud.google.com/)\n\n \u003cbr /\u003e\n\n2. To create a Mainframe Assessment Tool VM instance, run the\n following command:\n\n gcloud compute instances create mainframe-assessment-tool-1-instance \\\n --machine-type=\u003cvar translate=\"no\"\u003e\u003cspan class=\"devsite-syntax-n\"\u003eMACHINE_TYPE\u003c/span\u003e\u003c/var\u003e --service-account=\u003cvar translate=\"no\"\u003e\u003cspan class=\"devsite-syntax-n\"\u003eSERVICE_ACCOUNT_NAME\u003c/span\u003e\u003c/var\u003e \\\n --scopes=cloud-platform --image-project=migrate-modernize-public \\\n --image-family=mainframe-assessment-tool --zone=\u003cvar translate=\"no\"\u003e\u003cspan class=\"devsite-syntax-n\"\u003eZONE\u003c/span\u003e\u003c/var\u003e \\\n --boot-disk-size=\u003cvar translate=\"no\"\u003e\u003cspan class=\"devsite-syntax-n\"\u003eDISK_SIZE\u003c/span\u003e\u003c/var\u003e\n\n Replace the following:\n - \u003cvar translate=\"no\"\u003eMACHINE_TYPE\u003c/var\u003e: the machine type of the VM.\n - \u003cvar translate=\"no\"\u003eSERVICE_ACCOUNT_NAME\u003c/var\u003e: the name of the dedicated service account that you created.\n - \u003cvar translate=\"no\"\u003eDISK_SIZE\u003c/var\u003e: the size of the boot disk.\n - \u003cvar translate=\"no\"\u003eZONE\u003c/var\u003e: the zone where you want to create the VM. All zones in the [Google model endpoint locations](/vertex-ai/generative-ai/docs/learn/locations#available-regions) are supported.\n\n Use the following table to determine the values for \u003cvar translate=\"no\"\u003eMACHINE_TYPE\u003c/var\u003e\n and \u003cvar translate=\"no\"\u003eDISK_SIZE\u003c/var\u003e based on the expected size of your assessment data \n\n If you've configured the firewall in your project to allow IAP\n tunnels only for VMs with certain network tags, then you can also add the\n network tags using the `--tags` flag. For example, `--tags=assessment-iap`.\n\n If your project already has a working Cloud NAT ([network address translation](https://www.wikipedia.org/wiki/Network_address_translation)) setup, then you just need to add the `--no-address` flag to\n the `gcloud` command that creates the VM.\n\nSet up access to Mainframe Assessment Tool from your local computer\n-------------------------------------------------------------------\n\nYou can access Mainframe Assessment Tool from your Linux, macOS, or Windows-based\nlocal computer by using Google Cloud CLI through an Identity-Aware Proxy tunnel.\n\nTo create an encrypted tunnel to a port of Mainframe Assessment Tool VM instance, run the\nfollowing command: \n\n gcloud compute start-iap-tunnel \u003cvar translate=\"no\"\u003eVM_NAME\u003c/var\u003e 4000 --zone=\u003cvar translate=\"no\"\u003eZONE\u003c/var\u003e \\\n --local-host-port=localhost:\u003cvar translate=\"no\"\u003eLOCAL_PORT\u003c/var\u003e --project=\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003eVM_NAME\u003c/var\u003e: the name of the VM.\n- \u003cvar translate=\"no\"\u003eZONE\u003c/var\u003e: the VM zone.\n- \u003cvar translate=\"no\"\u003eLOCAL_PORT\u003c/var\u003e: any port number on your local machine that you want to use for the tunneled connection to the Mainframe Assessment Tool.\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: the project ID of the VM project.\n\nGoogle Cloud CLI performs a connectivity test with the VM instance, then opens a\ntunnel and shows a port number as follows: \n\n Listening on port 6060.\n\nAll traffic sent to `localhost:`\u003cvar translate=\"no\"\u003eLOCAL_PORT\u003c/var\u003e is forwarded\nto the Mainframe Assessment Tool VM instance. The port is only accessible by applications\nrunning on your local computer.\n\nTo access Mainframe Assessment Tool from your local computer, open a web browser and go\nto `localhost:`\u003cvar translate=\"no\"\u003eLOCAL_PORT\u003c/var\u003e.\n\nWhat's next\n-----------\n\n- Learn how to [configure settings for Mainframe Assessment Tool](/mainframe-assessment-tool/docs/configure-settings)."]]