HP Adaptive Infrastructure Solution Security for BladeSystem Matrix

strategy involves using multiple security mechanisms throughout the entire solution stack. The

BladeSystem Matrix solution incorporates logical servers at the infrastructure level and this

infrastructure is the foundation for a secure solution.

BladeSystem Matrix components

Each BladeSystem Matrix infrastructure kit includes sufficient license keys for a full HP BladeSystem

c7000 Enclosure for:

• HP Insight Dynamics – VSE suite for ProLiant, which includes:

– HP Capacity Advisor software

– HP Virtualization Manager software

– HP Insight Server Migration software for ProLiant with X2X unlimited migrations

• HP Insight Orchestration

• HP Insight Recovery

• HP Insight Control Environment (ICE), which includes:

– HP iLO 2 Advanced for BladeSystem*

– HP Insight Rapid Deployment software (formerly Rapid Deployment Pack)*

– HP Systems Insight Manager (HP SIM)

– HP Insight Power Manager (IPM)

– HP Performance Management Pack (PMP)

– HP Vulnerability and Patch Manager software (VPM)

– HP Virtual Machine Management Pack (VMM)

• HP Virtual Connect Enterprise Manager (VCEM)

*Requires a separate license

For more information on BladeSystem Matrix components, compatibility, and installation, see the HP

BladeSystem Matrix Solution Overview Installation Summary, HP BladeSystem Matrix Compatibility

Chart for hardware, firmware, and software, and the HP BladeSystem Matrix Solution Overview

Installation Summary documentation on the

BladeSystem Matrix website.

Solution security

The security of a computing system environment involves people, processes, and technology. The

introduction of virtualization impacts all three of these aspects. You must address each aspect to

ensure appropriate security protection and obtain a sustainable solution.

IT staff must be trained to understand a virtualized environment, associated threats, and appropriate

mitigations. Existing administrative roles might be modified, and new roles might be added. The roles

and responsibilities of server administrators, network administrators, and administrators of virtual

resources must be clearly defined. Processes must be defined to reduce risks. For example, processes

similar to the Information Technology Infrastructure Library (ITIL), which is a set of concepts and

policies for managing (IT) infrastructure, development, and operations, might be utilized.

Multiple layers of security, often referred to as defense in depth, should be practiced. This approach

provides better risk reduction by using multiple forms of mitigation techniques. In concept, the

BladeSystem Matrix solution is similar a bank vault, providing multiple levels of security.

With the defense in depth strategy, the BladeSystem Matrix solution utilizes modular components that

are designed and integrated together to meet your business and security requirements. The main

component of the BladeSystem Matrix solution is the c-Class BladeSystem enclosure. The enclosure

supports the server, storage blades, and associated hardware. Numerous hardware and software