DRAFT EMC® Secure Remote Services Release 3.18 Technical Description REV 01 Copyright © 2016 EMC Corporation. All rights reserved. Published in the USA. Published December 2016 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. The information in this publication is provided as is. EMC Corporation makes no representations or warranties of any kind with respect to the information in this publication, and specifically disclaims implied warranties of merchantability or fitness for a particular purpose. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. EMC2, EMC, and the EMC logo are registered trademarks or trademarks of EMC Corporation in the United States and other countries. All other trademarks used herein are the property of their respective owners. For the most up-to-date regulatory document for your product line, go to Dell EMC Online Support (https://support.emc.com). 2 EMC Secure Remote Services Technical Description CONTENTS Preface Chapter 1 EMC Secure Remote Services Introduction................................................................................................ 10 Description ................................................................................................. 11 Remote services benefits ...................................................................... 11 Solution security ................................................................................... 11 Licensing Usage Data............................................................................ 12 ESRS VE Updates .................................................................................. 12 ESRS Control ......................................................................................... 12 Architecture ................................................................................................ 13 Customer site components.................................................................... 13 Specifications............................................................................................. 16 Communication to EMC............................................................................... 18 Heartbeat polling .................................................................................. 18 Remote notification (Connect Home) ..................................................... 19 Remote access...................................................................................... 20 Product use of ESRS .............................................................................. 21 Configuration .............................................................................................. 23 Server Client configuration .................................................................... 23 Virtual Environments (VMware ESX and Microsoft Hyper-V) ................... 23 ESRS installable on Linux Host .............................................................. 23 High Availability ESRS Cluster configuration .......................................... 24 Security features......................................................................................... 24 Policy Manager...................................................................................... 24 Logging................................................................................................. 26 Device control ....................................................................................... 26 Digital Certificate Management ............................................................. 27 Device access control............................................................................ 27 Device configuration access control ...................................................... 28 EMC Enterprise access control............................................................... 28 Supported products.................................................................................... 28 Port requirements ....................................................................................... 31 Summary .................................................................................................... 31 Site architecture.................................................................................... 31 Security features ................................................................................... 31 Glossary...................................................................................................... 32 Documentation ........................................................................................... 32 Index EMC Secure Remote Services Technical Description 3 Contents 4 EMC Secure Remote Services Technical Description TABLES Title Page 1 ESRS specifications..................................................................................................... 16 2 Policy Manager specifications ..................................................................................... 17 3 Product use of ESRS .................................................................................................... 21 4 Product and application releases supported by ESRS Virtual Edition ........................... 29 EMC Secure Remote Services Technical Description 5 Tableses 6 EMC Secure Remote Services Technical Description PREFACE As part of an effort to improve its product lines, EMC periodically releases revisions of its software and hardware. Therefore, some functions described in this document might not be supported by all versions of the software or hardware currently in use. The product release notes provide the most up-to-date information on product features. Contact your EMC technical support professional if a product does not function properly or does not function as described in this document. Note: This document was accurate at publication time. Go to Dell EMC Online Support (https://support.emc.com) to ensure that you are using the latest version of this document. Purpose This document provides a technical overview of EMC Secure Remote Services (ESRS). Audience This document is intended to provide information to network and storage administrators who are planning, installing, and administering EMC Secure Remote Services at the customer site. Related documentation The following EMC publications provide additional information: ◆ EMC Secure Remote Services Release Notes ◆ EMC Secure Remote Services Site Planning Guide ◆ EMC Secure Remote Services Pre-Site Checklist ◆ EMC Secure Remote Services Port Requirements ◆ EMC Secure Remote Services Installation and Operations Guide ◆ EMC Secure Remote Services Policy Manager Release Notes ◆ EMC Secure Remote Services Policy Manager Operations Guide Typographical conventions EMC uses the following type style conventions in this document: Bold Use for names of interface elements, such as names of windows, dialog boxes, buttons, fields, tab names, key names, and menu paths (what the user specifically selects or clicks) Italic Use for full titles of publications referenced in text and for variables in body text. Monospace Use for: • System output, such as an error message or script •System code • Pathnames, file names, prompts, and syntax • Commands and options EMC Secure Remote Services Technical Description 7 Preface Monospace italic Use for variables. Monospace bold Use for user input. [ ] Square brackets enclose optional values | Vertical bar indicates alternate selections — the bar means “or” { } Braces enclose content that the user must specify, such as x or y or z ... Ellipses indicate nonessential information omitted from the example Where to get help EMC support, product, and licensing information can be obtained as follows: Product information — For documentation, release notes, software updates, or information about EMC products, go to Dell EMC Online Support at: https://support.emc.com Technical support — Go to Dell EMC Online Support and click Service Center. You will see several options for contacting EMC Technical Support. Note that to open a service request, you must have a valid support agreement. Contact your EMC sales representative for details about obtaining a valid support agreement or with questions about your account. Your comments Your suggestions will help us continue to improve the accuracy, organization, and overall quality of the user publications. Send your opinions of this document to: [email protected] 8 EMC Secure Remote Services Technical Description CHAPTER 1 EMC Secure Remote Services This EMC Secure Remote Services technical description contains information about the following topics: ◆ Introduction............................................................................................................ 10 ◆ Description ............................................................................................................. 11 ◆ Architecture ............................................................................................................ 13 ◆ Specifications ......................................................................................................... 16 ◆ Communication to EMC ........................................................................................... 18 ◆ Configuration .......................................................................................................... 23 ◆ Security features....................................................................................................