This section gives an overview of StorageTek Virtual Storage Manager (VSM) GUI and explains the general principles of its security.
StorageTek VSM GUI is an Oracle software product that provides customers with virtual tape control and reporting, to efficiently and proactively monitor and manage their data center's virtual tape operations.
VSM GUI supports Enterprise MVS Virtual Storage Manager (VSM) tape customers. VSM GUI supports customers with all supported generations of VSM products.
It is required VSM GUI is installed on a virtual machine on a customer's Oracle VM or VMware server within an organization's data center. Physical access to the server would be dictated by the Customer company policy.
It is required VSM GUI be added or configured to a Customer internal firewall protected network. This network needs TCP/IP access to all instances of SMC HTTP server that report on virtual tape resources.
The VSM GUI Application access is controlled by username and password authentication. User name and password authentication are performed by configuring the application to the user's LDAP service.
The following principles are fundamental to using any product securely.
One of the principles of good security practice is to keep all software versions and patches up to date. Throughout this document, we assume software levels of:
VSM GUI Release 1.0; May 2015
Note:
VSM GUI supports ELS7.1 and ELS7.2, and requires latest maintenance updates to be applied.Keep the VSM GUI host server behind a data center firewall. The firewall provides assurance that access to these systems is restricted to a known network route, which can be monitored and restricted, if necessary. As an alternative, a firewall router substitutes for multiple, independent firewalls.