HPE NonStop Safeguard Start-up Service
HPE Lifecycle Services
Service overview
HPE NonStop Safeguard enhances the security features of an HPE NonStop system to offer a more comprehensive security solution than traditionally provided by the Guardian environment. It works with the Guardian environment allowing more granular and extensive security controls at the file level and using enhanced security. HPE NonStop Safeguard maintains the subject (authentication records for users/aliases) and object (authorization records for system resources) databases.
Safeguard provides three major security capabilities:
- Authentication — Verifying users trying to access a system
- Authorization — Checking access control lists (ACLs) to confirm whether a user has permission to access system resources
- Auditing — Recording attempts by users to access system resources
The service includes building a custom implementation plan aligning the Customers’ HPE NonStop Safeguard environment with recommendations from HPE NonStop Security Hardening Guide and the Customers’ corporate security policies.
An HPE NonStop service specialist meets with the Customer to discuss and plan the Safeguard’s global configuration to then start up and configure the Safeguard software solution on the HPE NonStop system.
The HPE NonStop Safeguard Start-up Service can be acquired for 20 HPE Service Credits or by a custom statement of work (SOW).
For needs beyond the scope of standard start-up services, Hewlett Packard Enterprise can tailor these offerings to your specific business needs by building a custom SOW. A service specialist plans a scoping call to identify all the necessary activities and the required HPE Service Credits to obtain the desired business outcome. All access control matrix (ACM) engagements require a custom SOW.
-
- Provide an HPE NonStop Safeguard Start-up plan designed to meet Customers’ specific security requirements
- Enhances security to HPE NonStop system focusing on authentication, authorization, and auditing
- Builds a configuration plan for Safeguard’s global and audit parameters
- Delivers knowledge transfer for the configuration of the safeguard ACLs
| Feature | Delivery specifications |
|---|---|
| Planning | Discuss and plan the HPE NonStop Safeguard global configuration with the Customer’s system administrator and information security team, working with the Customer’s corporate security policy where applicable |
| Configure the HPE NonStop Safeguard global parameters | Configure the global parameters to align the recommendations in the HPE NonStop Security Hardening Guide with the Customer’s corporate security policy |
| Audit configuration | Update the HPE NonStop Safeguard audit configuration to help ensure that sufficient audit is maintained on the system to comply with the Customer’s corporate security policy where applicable |
| Feature | Delivery specifications |
|---|---|
| ACM | Recommend using an ACM to help the Customer define user and object security requirements; assist the Customer in developing scripts to implement ACLs as defined in the ACM. All ACM engagements will require a custom SOW |
-
The Customer must meet certain prerequisites prior to the beginning of service, including the following:
- This service must be purchased for each HPE NonStop system that requires this service.
- The Customer must allow the HPE service specialist to use the appropriate HPE configuration collection tools and adhere to licensing terms and conditions.
-
The Customer will:
- Provide all required information promptly that supports delivery and ensure all information provided to HPE is complete, accurate, and up to date as per the agreed-upon schedule
- Give information about any specific known issues that exist in the Customer’s IT environment
- Coordinate with the HPE service specialist within 90 days of the date of purchase to schedule the service delivery
- Ensure that all service prerequisites, as identified in the “Service eligibility” and “Service limitations” sections, have been met
- Provide HPE with timely access to use its data collection tools during the scheduled delivery days
- Offer remote meeting tools or accept the ones provided by HPE
- Assign a designated person from the Customer’s staff who, on behalf of the Customer, will grant all approvals, provide information, and otherwise be available to assist HPE in facilitating the delivery of this service during the scheduled delivery date
- Be responsible for all data backup and restore operations
-
- Updating or configuring XYGATE Modules (Merged Audit, User Authentication, Access Control, Compliance Pro, or CMON) or any other third-party software products is beyond the scope of work for this service.
- Customer acknowledges and agrees that HPE may use resources outside the country of purchase to deliver these services unless otherwise specified as part of a service feature description.
- Services will be delivered remotely, at HPE’s discretion, between the hours of 8:00 a.m. and 5:00 p.m. local time, Monday through Friday, excluding HPE holidays.
- HPE’s ability to deliver this service depends on the Customer’s full and timely cooperation with HPE, as well as the accuracy and completeness of any information and data the Customer provides to HPE.
- The service is delivered as a single, contiguous event. Environments that require multiple engagements over a longer period are not included with this service and are available at additional cost.
- The HPE provided tools and technologies are solely for the use of HPE or authorized delivery partners in the delivery of the service. The Customer assumes no rights to, and may not independently operate, the HPE tools and technologies.
- Unless specified in this document or a separate SOW, activities such as, but not limited to, the following are excluded from this service:
- Follow-up activities, including but not limited to, implementation of any recommendations; services to implement recommendations are available in a separate HPE Services engagement for an additional fee
- Installation or configuration of any hardware or software products
- Loading, managing, migrating, or manipulating the Customer’s production data
- Operational testing of applications or troubleshooting of interconnectivity or compatibility, network compatibility, or other problems
-
- HPE reserves the right to request a Customer SOW for any additional work over and above the service package pricing that may result from work required to address service prerequisites or other requirements the Customer does not meet.
- HPE reserves the right to reprice this service if the Customer does not schedule and provide for subsequent delivery within 90 days of purchase.
- Any services provided outside of HPE standard business hours may be subject to additional charges. Travel charges are not included and may apply; consult your local HPE sales representative.
- Check with a local HPE authorized representative to determine whether a specific location is eligible for this service.
- Activities such as, but not limited to, the following are excluded from this service:
- Any services not clearly specified in this document
- Services that, in the opinion of HPE, are required due to unauthorized attempts by third-party personnel to install, repair, maintain, or modify hardware, firmware, or software
- To the extent HPE process personal data on the Customer’s behalf in the course of providing services, the HPE Data Privacy and Security Agreement Schedule — HPE Support and Professional Services found at hpe.com/us/en/legal/customer-privacy.html shall apply.
© Copyright 2023 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
This data sheet is governed by the Hewlett Packard Enterprise current standard sales terms, which include the supplemental data sheet, or, if applicable, the Customer’s purchase agreement with Hewlett Packard Enterprise.
a50005133enw, Rev. 1