1 Overview
This section gives an overview of the product and explains the general principles of application security.
Product Overview
The StorageTek Virtual Storage Manager (VSM) System 6 and 7, Virtual Storage Manager console (VSM console) provides a common platform for all VSM applications to reside where there is no zOS controller system. The VSM console consists of Oracle hardware and software stack. The VSM console is delivered on a T5-2 server as an appliance, running on Solaris 11.3, with applications consisting of customized Virtual Tape Control Software (VTCS), Automated Cartridge System Library Software (ACSLS), and the VSM Graphical User Interface (GUI).The VSM console appliance provides pre-installed, preconfigured applications, so that limited site-level configuration is required to integrate the product into the customer's managed tape environment. The appliance is designed to preclude the need for customer administration of the system.
Note:
Only qualified Oracle personnel are permitted to maintain the system and administer any configuration changes.The VSM console is just one component of the VSM solution.
Major subsystems include:
- VTSS hardware and software
-
The VSM 6 and VSM 7 VTSS supports emulated tape connectivity over FICON interfaces to IBM MVS, VM and zLinux hosts and also FICON attachment to Real Tape Drives (RTDs) and TCP/IP attachment to other VTSSs and VLEs. FICON is an IBM-driven standard for channel protocol between CPU (zOS) and devices.
- Enterprise Library Software (ELS) and Virtual Tape Control Software (VTCS)
-
ELS is the consolidated suite of StorageTek mainframe software that enables and manages the VTSS. If an MVS system is used, the ELS base software consists of Host Software Component (HSC), Storage Management Component (SMC), HTTP Server, and Virtual Tape Control Software (VTCS).
VTCS is the ELS component that controls virtual tape creation, deletion, replication, migration and recall of virtual tape images on the VTSS subsystem, and also captures reporting information from the VTSS subsystem.
VTCS may now run on either a customer z/os system or embedded within VSM console.
- Virtual Library Extended (VLE) hardware and software
-
The Virtual Library Extension (VLE) subsystem functions as secondary storage to the VTSS for migrate and recall Virtual Tape Volumes (VTVs) copies. The VLE is IP-attached to the VTSS.
When there is no MVS System is present, the VSM console solution is used. The internal ACSLS application replaces the HSC component, and the VSM console port of the VTCS application is used.
General Security Principles
The following principles are fundamental to using any product securely.
Keep Software Up To Date
Application software and system updates will be installed by qualified Oracle personnel.
Restrict Network Access to Critical Services
Appliances should be installed in secure physical locations with access limited to authorized customer employees or agents and Oracle service personnel. The system should be networked behind a firewall.
Authentication
Ensure that only authorized personnel can access system. Passwords should be changed when deployed at the customer site.
Follow the Principle of Least Privilege
Non-VTSS user accounts are not permitted. Only pre-existing accounts are used for system maintenance and administration.