1. Office of Administration Enterprise Server Farm September 2008 Briefing

2. AgendaAgenda Managed Services Lite Overview VMware Implementation Managed Services Server Refresh Database Updates General ESF Updates Crystal Enterprise Upgrade Windows 2003 SP2

3. ESF Hosting Models Managed Services Managed Services Lite Co-Location (Will begin to be phased out) ESF Hosting Models

4. Managed Services Lite Overview Kannan Arunachalam

5. Managed Services Lite Managed Services Lite is a hosting model that combines services from both Managed Services and Co-Location This hosting model was created based on agency requests/feedback Provides greater level of application access than Managed Services and ensures better infrastructure standardization and security than Co-Location

6. Services - Server Infrastructure Design Assistance Hardware Quotes Hardware Installation & Support OS Installation & Support Database Installation & Support Monitoring Backup and Recovery OS Patch Management Managed Services Lite

7. Services - SAN Infrastructure Design Assistance Storage Quotes Installation & Support Monitoring Disk Partitioning and Allocation Managed Services Lite

8. Services - Network Infrastructure Design Assistance Firewall Services Hardware Load Balancing Connectivity Support Monitoring Managed Services Lite

9. Services - Other Administrative Access provided to Agency for Application Support Remote Access provided via Remote Desktop Protocol (RDP) Physical Access if needed (may not be needed if servers are virtualized) Managed Services Lite

10. Agency Responsibility ESF Document Hardware/Software Procurement 3 rd Party Software Installation & Support Application Installation & Support Application Monitoring Funding for Support Services by ESF Staff Managed Services Lite

13. VMware Implementation Matthew Stahl

14. Background March 2008 – ELA with VMware for unlimited ESX and Virtual Center deployments April 2008 – ITB-PLT006 was updated allowing VMware ESX to be used for mission-critical application VMware Implementation

15. Design Consideration Support for Managed Services and Managed Services Lite (Both Internal and External Security Zones) Will support both production and staging environments Deployed with VMotion, High Availability (HA) and Distributed Resource Scheduling (DRS) All components completely redundant Use Enterprise network and SAN infrastructure VMware Implementation

16. Host Hardware Configuration IBM x3850 M2 4x Quad core 2.40 GHz CPU 32 GB RAM 2x Quad port Intel NICs 2x Qlogic HBAs VMware Version deployed ESX 3.5 Update 1 Virtual Center Update 1

17. Managed Services Two 3-Node Clusters External Zone Internal Zone Deployed Managed Services Lite Two 3-Node Clusters External Zone Internal Zone Deployment in progress VMware Implementation

18. Server Virtualization Schedule Phase 1 – Starting September 2008 Virtualization of 100 Managed Services servers within the new VMware environment (focusing on the oldest hardware first) Coordination and communication with agencies will begin in early September Phase 2 – Starting October 2008 ESF will begin offering server virtualization as a service for new application deployments in Managed Services and Managed Services Lite. Virtualization will be the preferred deployment standard unless physical infrastructure is justified VMware Implementation

19. Managed Services Server Refresh Shobha Sharma

20. Background Various hardware reaching end-of-life and end of manufacture warranty Windows 2000 support expired Servers utilizing old ESF Base Build Proposed Solution Deploy applications on new hardware Upgrade to Windows 2003/IIS 6.0 Take advantage of better performance and security enhancements Leverage latest configuration standards Server Refresh

21. Status Significant progress made Many DSF sites migrated to Windows 2003 Active Directory upgraded to Windows 2003 Some Custom Applications are migrated Database clusters upgraded to Windows 2003 Major hurdles encountered Major hurdles encountered Agency Testing resources not available Funding for new hardware not always available Server Refresh

22. Proposed Approach Use Virtualization VMware will be used to host applications where applicable Review application architecture during server refresh Agencies must advise if there are specific technical concerns with hosting applications in VMware Agencies must ensure that staff is available for testing Server Refresh

23. Schedule DSF Sites Q3 - Q4 of ‘08 Custom Applications Q3 ’08 - Q1 ‘09 Schedule to be coordinated with agencies in early Sept 2008 Server Refresh

24. MS SQL Server Upgrade Oracle Upgrade SQL Injection Database Updates Vincent Cheong

25. MS SQL 2005 MS SQL 2005 Implementation New Active/Active Cluster Fully operational Timeline for Migration (For existing Managed SQL 2000 databases) When agency application is ready Verify compatibility with vendor/developers Start testing in development Migration deadline – Dec 2009 Database Updates

26. Oracle 10g RAC Oracle 10g Implementation New Active/Active Cluster RAC for High Availability High Performance Scalable Version 10.2.0.3 Fully Operational Database Updates

27. SQL Injection Background Recent spike in attacks By bots and from different IPs Potential data corruption Workaround for recent attacks Restrict access to system tables Recommendation Test application for vulnerabilities (CISO office can assist) Fix application vulnerabilities Leverage development best practices Database Updates

28. SQL Injection Links regarding SQL Injection and Development Best Practices : http://msdn.microsoft.com/en- us/library/ms161953.aspx http://msdn.microsoft.com/en- us/library/ms161953.aspx http://msdn.microsoft.com/en- us/library/bb671351.aspx http://msdn.microsoft.com/en- us/library/bb671351.aspx http://www.portal.state.pa.us/portal/server.pt/gateway/ PTARGS_0_2_68281_0_0_18/ http://www.portal.state.pa.us/portal/server.pt/gateway/ PTARGS_0_2_68281_0_0_18/ Database Updates

29. General ESF Updates Crystal Enterprise Upgrade Windows 2003 SP2 Shobha Sharma

30. Background Current Implementation – CE10 Support expiring for CE 10 CE10 does not support SQL 2005 Proposed Upgrade to Business Objects XI R2 Crystal Enterprise Upgrade

31. Business Objects XI R2 – New Features Easier navigation with advanced search in the HTML preview tab throughout all pages of a report including any visible sub reports Increased productivity with features like improved drag-and-drop capabilities onto and within a report Crystal Enterprise Upgrade

32. Upgrade Path - “Import” Upgrade Parallel Systems – Old and New Running Simultaneously until migration is complete Use BO Tools to copy content from CE 10 to XI R2 Crystal Enterprise Upgrade

33. Agency Impact Impact is minimal as old system will run parallel to new system Reports will get migrated during import process After successful testing DNS will be changed to new installation Client version supportability If an agency is using the old Crystal client version, they will need to upgrade Crystal Enterprise Upgrade

34. Schedule Currently evaluating in ESF Lab Staging - September ‘08 Production – October ‘08 Crystal Enterprise Upgrade

35. SP2 will be deployed for Managed Services and Managed Services Lite Schedule September ’08 Windows 2003 SP2

36. ESF Web Site http://www.esfportal.state.pa.us MSL Rules of Engagement http://www.portal.state.pa.us/portal/server.pt/ gateway/PTARGS_0_2_68852_0_0_18/ http://www.portal.state.pa.us/portal/server.pt/ gateway/PTARGS_0_2_68852_0_0_18/ MSL Document Template http://www.portal.state.pa.us/portal/server.pt/ gateway/PTARGS_0_151276_222165_0_0_1 8/ESF_MSL_Documentation_Template.doc http://www.portal.state.pa.us/portal/server.pt/ gateway/PTARGS_0_151276_222165_0_0_1 8/ESF_MSL_Documentation_Template.doc Resource Links

37. Thank You! Questions? Thank You! Questions?