HP OpenVMS Version 8.3 for Alpha and Integrity Servers
HP OpenVMS Version 8.3 for Alpha and Integrity Servers SPD 82.35.11
(DES), which continues to function today, allowing
for the decryption of archived DES encrypted data.
The AES encryption functionality supports Electronic
Code Book (ECB) and Cipher Block Chaining (CBC)
block modes of encryption. The Cipher Feedback
(CFB) and Output Feedback (OFB) 8-bit character
stream modes are also supported from the command
line as well as by the programmatic APIs.
• Secure Sockets Layer (SSL) for OpenVMS Alpha
and Integrity server systems provides secure transfer
of sensitive information over the Internet
• Common Data Security Architecture (CDSA) is con-
figured and initialized automatically during installa-
tion and upgrades and is required for Secure Deliv-
ery purposes and other security features. If you in-
stall a newer version of CDSA without upgrading the
base operating system, you must initalize the CDSA
software, using the following command. Enter the
command from an account that has both SYSPRV
and CMKRNL privileges (for example, the SYSTEM
account). $ @SYS$STARTUP:CDSA$UPGRADE
• Kerberos for OpenVMS
• Per-Thread Security Profiles
• External Authentication
Note: Users who are externally authenticated by their
LAN Manager need only remember a single user
name/password combination to gain access to their
OpenVMS and LAN Manager accounts.
Government Security Ratings
OpenVMS is committed to consistently delivering a se-
cure base operating system, and has been evaluated
and certified to be compliant with the DoD 5200.28-STD
Department of Defense Trusted Computer System Eval-
uation Criteria. Each release of OpenVMS sucessfully
completes the same test suite used to prove C2 compli-
ance to the National Computer Security Center before
it is released.
Note: Because no system can provide complete se-
curity, HP cannot guarantee complete system security.
However, HP continues to enhance the security capabil-
ities of its products. Customers are strongly advised to
follow all industry-recognized security practices. Open-
VMS recommended procedures are included in the HP
OpenVMS Guide to System Security.
Utility Pricing on OpenVMS for Integrity servers
With OpenVMS Version 8.3, Utility Pricing is introduced
on OpenVMS for Integrity servers. It enables customers
to pay for CPU resources when they need them, re-
sponding to planned or unplanned permanent load in-
creases and temporary spikes.
• Instant Capacity or iCAP is relevant for systems that
are purchased through capital expenditure
• Pay Per Use or PPU is valid only for systems that
are leased - exclusively through HP Finance
Instant Capacity (iCAP)
Instant Capacity provides reserve capacity that the cus-
tomer can put into production quickly without disrupting
operations.
Key features:
• Runs on all OpenVMS Integrity cell-based systems
(rx7620, rx7640, rx8620, rx8640, and Superdome)
• Provides a highly available pre-configured "ready-to-
run" solution
• Ability to activate reserve capacity when needed
• Encompasses Cell Boards and individual CPUs
• Defer/avoid purchase until used
• Full corporate implementation ensures OpenVMS
can share iCAP CPUs across hard partitions with
HP-UX on a common Integrity system
• Integrated with Global Workload Manager (gWLM)
that can automatically re-allocate active CPUs within
hard partitions in response to workload demands
Operational features:
• iCAP CPUs are purchased at a fraction of the price of
active CPUs and are denoted as Components With-
out Usage Rights (CWUR)
• Systems are configured in the factory before delivery
with a minimum of one active CPU and the required
number of iCAP CPUs
• Once iCAP CPUs are required to be activated, the
balance of the price is paid and an activation Rights
To Use (RTU) ’codeword’ is obtained from the HP
iCAP Web Portal. The iCAP CPU/memory is then
made active
• When a CPU or Cell board is permanently activated,
support of the CPU/Cell board is automatically added
to the overall support costs of the system
Note: Regard iCAP activation as permanently adding
a new CPU with all the attendant HP and 3rd Party
software licensing and support that this requires.
TiCAP (Temporary iCAP)
• Enables the customer to temporarily activate a pro-
cessor(s) for a set period of time, with a minimum 30
minute granularity per CPU
• No permanent activation fee is required - utilize an
existing CPU for as long as needed
8