5 Secure Deployments Checklist

This section provides a checklist of steps used to install and configure the Oracle Private Cloud Appliance product in a secure manner for operational deployment. This checklist section contains items relating to all three layers of the Oracle Private Cloud Appliance.

The three layers of the Oracle Private Cloud Appliance are:

• Infrastructure - This is the physical rack hardware installed on the customers premises. Some security-related tasks are performed at this basic level when the system is installed.

• Service Enclave - This is the part of the system where the appliance infrastructure is controlled. Access to this enclave is closely monitored and restricted to privileged administrators. The Service Enclave runs on a cluster of three management nodes. Many security-related tasks are performed at this level.

• Compute Enclave - The Compute Enclave is designed for compatibility with Oracle Cloud Infrastructure. The Compute Enclave is where resources such as compute instances, networks, and storage are controlled.