Versions Compared

Version Old Version 46 New Version 47
Changes made by

Kazuto Okayasu

Kazuto Okayasu

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page will provide OIT's VMWare service client community with information about our upgrade project, and will be updated to reflect progress with the project. The parent to this page is available to all OIT people and has more detailed technical information.

...

  • Streamlined access management through use of self-service KSAMS authorization and UCInetID for logins (replacing 'AD' and 'SERVERAD' Active Directory)
  • Enhanced security through use of mandatory DUO Two Factor authentication and trusted "signed" digital certificates as well as infrastructure security enhancements
  • Preparation for enhanced integration with services such as ServiceNow for change management, notifications, alerting, etc.

...

As the migration moves forward, this page will be updated with new action items. These will include logistics for the migration itself, operational changes in the new environment, and other information.

Fig. A: KSAMS Roles

KSAMS Role NameKSAMS Approver Role NameIdentified Contact
vCenter - Arts AdminsvCenter - Arts Admins ApproversJason Valdry / Adalid Aguilar
vCenter - Bio Sci AdminsvCenter - Bio Sci Admins ApproversEric Sanchez / Matthew Martinez
vCenter - CALIT2 AdminsvCenter - CALIT2 Admins Approvers(Nobody)
vCenter - Education AdminsvCenter - Education Admins ApproversHyuk Kang
vCenter - Engineering AdminsvCenter - Engineering Admins ApproversJohn Romine / Dan Melzer
vCenter - Humanities AdminsvCenter - Humanities Admins Approvers
Dwayne Pack
(Nobody)
vCenter - Informatics AdminsvCenter - Informatics Admins Approvers(Nobody)

vCenter - Integrated Nanosystem Research Facility Admins

vCenter - Integrated Nanosystem Research Facility Admins ApproversPaul Bautista / Marc Palazzo
vCenter - Law School AdminsvCenter - Law School Admins ApproversPatty Furukawa / Joe Macavinta
vCenter - Library AdminsvCenter - Library Admins Approvers
Ashley Burke
(Nobody)
vCenter - OIT Academic Affairs AdminsvCenter - OIT Academic Affairs Admins ApproversMax Garrick / Albert Chi
vCenter - OIT Athletics IT AdminsvCenter - OIT Athletics IT Admins Approvers
Michael Koetsier
Tri Tran
vCenter - OIT AWT AdminsvCenter - OIT AWT Admins Approvers
Kelsey Layos
(Nobody)
vCenter - OIT Business Intelligence AdminsvCenter - OIT Business Intelligence Admins ApproversLarry Coon / Valerie Jones
vCenter - OIT Database AdminsvCenter - OIT Database Admins ApproversDeanna McMurray / Marina Arseniev
vCenter - OIT eDocs AdminsvCenter - OIT eDocs Admins ApproversLinh Nguyen / Robert Gallegos
vCenter - OIT EUS AdminsvCenter - OIT EUS Admins ApproversKyle Kurr /David Severance
vCenter - OIT Financial Svc AdminsvCenter - OIT Financial Svc Admins ApproversJames Hsu
/Cecilia Do
vCenter - OIT Graduate Division Admins  vCenter - OIT Graduate Division Admins ApproversJames Tang

vCenter - OIT IAM Admins Approvers
Rachel Tam
Josh Drummond / Warren Leung / Dana Watanabe
vCenter - OIT ILCS AdminsvCenter - OIT ILCS Admins Approvers
Son Nguyen
Derrek Gabagat
vCenter - OIT MAI AdminsvCenter - OIT MAI Admins ApproversJason Lin /  Brian Craft
vCenter - OIT Network Engineer AdminsvCenter - OIT Network Engineer Admins ApproversAlbert Gonzalez / Bjorn Juslin
vCenter - OIT Office of Research Admins vCenter - OIT Office of Research Admins ApproversNoah Margolis / Eric Taggart
vCenter - OIT Parking and Distribution AdminsvCenter - OIT Parking and Distribution Admins ApproversClint Maruki / Matthew Lorenzo
vCenter - OIT Production and Operations Management AdminsvCenter - OIT Production and Operations Management Admins ApproversMichael Story
vCenter - QA AdminsvCenter - QA Admins Approvers
Brian Roode
Michael Story / Jason Lin / Thomas Bindewald
vCenter - OIT Security AdminsvCenter - OIT Security Admins ApproversJosh Drummond / Paul Kang
vCenter - OIT Specialized Desktop Support AdminsvCenter - OIT Specialized Desktop Support Admins ApproversSarkis Daglian / Jeremy Paje
vCenter - OIT Standard Desktop Support AdminsvCenter - OIT Standard Desktop Support Admins ApproversJeremy Paje
vCenter - OIT vSphere AdminsvCenter - OIT vSphere Admins ApproversKen Cooper / Henry Jenkins
vCenter - OIT WSG AdminsvCenter - OIT WSG Admins ApproversHeindrick Yu
vCenter - Social Ecology AdminsvCenter - Social Ecology Admins ApproversJennifer Lane
vCenter - Social Science AdminsvCenter - Social Science Admins ApproversJonathan Nilsson / Andrew Hill / Dominic Fiorello
vCenter - Strategic Comm AdminsvCenter - Strategic Comm Admins ApproversJim Kreuziger / Todd McGill

vCenter - VCSA Admins

vCenter - VCSA Admins Approvers

Wayne Fields / Steven Tajiri

vCenter - Applied Innovation AdminsvCenter - Applied Innovation Admins ApproversMarek Mandau
vCenter - OIT Facilities Mgmt AdminsvCenter - OIT Facilities Mgmt Admins ApproversJyoti Razdan
vCenter - WHCS AdminsvCenter - WHCS Admins ApproversJerome Reuter / Herbert Chan
vCenter - Read Only UsersvCenter - OIT vSphere AdminsDCI Team
vCenter - OIT OVPTL AdminsvCenter - OIT OVPTL Admins ApproversBrian Lance / Jeremy Thacker
vCenter - Physiology AdminsvCenter - Physiology Admins ApproversRie Nakajima / Aarti Jain/ Gildas Cadin
vCenter - OIT Research Cyberinfrastructure Center AdminsvCenter - OIT Research Cyberinfrastructure Center AproversPhil Papadopoulos

 

Fig. B: VM Permissions

Initially, all assigned users will have the set of permissions listed below:

    • Virtual Machine
      • Configuration
        • Modify Device Settings
        • Settings
        • Upgrade virtual machine compatibility
      • Interaction
        • Answer Questions
        • Configure CD Media
        • Console Interaction
        • Device Connection (NICs and removable media)
        • Power On
        • Power Off
        • Reset
        • VMware Tools Install
      • Snapshot Management
        • Create Snapshot
        • Remove Snapshot
        • Rename Snapshot
        • Revert Snapshot
    • Folder (This will only work on the sub-folders of where the role is assigned.)
      • Create
      • Delete
      • Rename
      • Move
    • Datastore (This is only to facilitate mounting ISO images from the shared ISO repository)
      • Browse datastore
      • Low level file operation

Fig. C: VM Tag data

PaaS Owner (Platform as a Service Owner)

UCInetID of user or group responsible for OS tasks. This UCInetID will be contacted for low-level changes such as disk space changes, VMWare Tools upgrades, etc.

  • UCInetID of Owner(s) or Group(s)

Data Owner

UCInetID of user or group responsible for app/data. This UCInetID will be contacted for (un)scheduled interruptions or other changes interrupting access to VM's data.

  • UCInetID of Owner(s) or Group(s)

Purpose

The VM’s primary purpose. These are tags in existence in ServiceNow and may be expanded.

  • application

  • database

  • domain_controller

  • file

  • mail

  • utility

  • web

Protection Level

The VM protection level classification is the assigned number representing the level of security protection needed for Institutional Information or an IT Resource. Level 1 being the lowest and 3 being the most critical data. Definitions can be found at http://security.uci.edu/security-plan/plan-classification.html

  • P3-high

  • P2-medium

  • P1-low

HA Restart Priority

The high availability (HA) restart priority determines the order in which virtual machines (VMs) are restarted when the ESXi host fails. Higher priority virtual machines are started first. This priority applies only on a per-host basis. If multiple hosts fail, all virtual machines are migrated from the first host in order of priority, then all virtual machines from the second host in order of priority, and so on. The restart priority will also be used to determine which VMs to power off during an incident that severely reduces our ESXi cluster capacity. The default is medium.

  • HA4-high

  • HA3-medium

  • HA2-low

  • HA1-disabled

vm_Backup_Job

The VM's Veeam backup job.