1 of 14

Data Center Automation Suite Keynote

2 of 14

Data Center Automation Suite Vision and Highlights

Nisarg Shah, Director of Product Management

Nimish Shelat, Director Product Marketing

February 6, 2018

3 of 14

Direction of DCA Suite in the Past Year

Learnings from a recent survey by Management Insight Technologies

3

Enterprise automation to support large-scale deployments is the top purchase criteria

Nearly two-thirds prefer to purchase a complete suite of tools from one vendor

Security and efficiency are the top drivers for DCA technology purchases

Top Drivers

Purchase �Criteria

Preferred �Setup

Pre-purchase

Purchase

4 of 14

Data Center Automation

Enterprise-class infrastructure lifecycle management solution

4

Heterogeneous | Scalable

Bare metal, virtual

Database & middleware

Container server farm

Provisioning & Configuration

Patching

Compliance

Orchestration | Analytics | Reporting

Container Deployment Foundation

Physical

Virtual

Cloud

Container

Heterogeneous provisioning and patching at scale
Integrated compliance and �closed-loop remediation

Across heterogeneous OS, DB, and MW
Market leading out-of-the-box compliance and remediation content

Industry’s leading open API orchestrator for seamless data center integration
New suite container deployment option

Let’s introduce the suite!

HPE Data Center Automation (DCA) suite is an infrastructure lifecycle management solution that provides 3 fundamental use-cases:

Provisioning and configuration
Patching
Compliance & remediation

It does so across heterogeneous servers (virtual and physical servers), databases, and middleware, with proven scale of more than 100,000s of servers.

DCA is truly multi-vendor, and supports automation for multiple OS and app vendors, in some of the most diverse IT environments.

And very soon, DCA will also offer lifecycle management for container farms, preparing the infrastructure that can host containers.

(Container farms provide the platform needed for container apps. Complete lifecycle management for container farms will also include provisioning, patching, and compliance use cases).

DCA offers the industry’s leading open API, built-in orchestration engine to connect infrastructure lifecycle management tasks and processes (related to provisioning, patching & compliance), across servers, databases and middleware. Typical use cases include automated change management, end-to-end provisioning (infrastructure to apps), and database & middleware provisioning. The orchestrator comes with prebuilt, OOTB, customizable workflows to create powerful and repeatable deployments As it is open API, it seamlessly integrates 3^rd party tools and existing content (such as open source automation scripts).

It uses analytics to optimize infrastructure. Analytics is one of the newer capabilities, and we’ve started with analytics for the virtual ecosystem, to optimize VM capacity and curb VM sprawl.

With container-based deployment, starting now with the compliance use-case, DCA scales on-demand for horizontal scale-out in minutes. The new suite container deployment offers options flexible deployment options, on physical servers, virtual machines, and the cloud.

Let’s also highlight some of the key differentiating or new capabilities of DCA:

[Read the bullet points on the right]

5 of 14

Data Center Automation Suite vision

5

This is a rolling (up to three years) Roadmap and is subject to change without notice

Automation platform for compliant infrastructure, leveraging predictive analytics optimization

Innovation

Container server farms, Analytics, ChatOps

Unified lifecycle management

Physical and virtual servers, DB, middleware, container hosts

Rapid time-to-value

Container Deployment Foundation

6 of 14

Innovation—Security risks and Compliance Dashboards

7 of 14

Built-in Risk dashboard for secure operations

Proactively identify, address top issues and potentially prevent future breaches

Vulnerability exposure of resources by severity

Configurable threats to watch out for and weekly trend

Impact of recent vulnerabilities on your datacenter

Old vulnerabilities not yet mitigated are easier exploits

Single view of vulnerabilities across OS, DB and MW

8 of 14

Compliance dashboard across OS, DB and MW

Compliance state Resources classified by risk

Top 5 failed requirements

Based on the highest number of resources where requirement has failed; drill down to display list of resources

Time to remediate

See how long it took to remediate, drill down to display resource and benchmark

Compliance by benchmark

View compliance by benchmark, pick from dropdown box—PCI, CIS, HIPAA, and more

Single-view of compliance across OS, databases, middleware

DCA provides a complete view of infrastructure compliance state and risk trend analysis across OS, databases, and middleware.

On this drill-down dashboard, review compliance state by resources or benchmark, how long it took to remediate out-of-compliance elements, and get a glimpse of the top 5 failed requirements based on the highest number of resources where this requirement has failed.

***

Resources are classified into one of these categories:

1. Compliance: if all the requirements/rules associated with resource are compliant

2. Security high risk: if one or more high severity rule is not compliant

3. Security medium risk: if one or more medium severity rule is not compliant

4. Security low risk: if one or more low severity rule is not compliant

5. Not run: if compliance check is not run of if it failed

6. No policy: if there are no benchmarks are associated with the resource

NOTE: If the out of the box policy does not have a severity defined, then DCA applies machine learning algorithms to automatically classify it.

Resource Compliance: Resources categorized into the above listed compliance categories. A drill down will take user to the resource list page using the appropriate filters.

Resource Compliance Trend Analysis: Shows a one week trend of resource compliance by category in the datacenter.

Time to Remediate: Groups resources based on the time it takes to remediate compliance and shows if there are any failures. The group(s) are discovered dynamically. Drill down shows the resource name, benchmark name and the time it took to remediate.

Top 5 Failed Requirements: List of top 5 failed requirements based on the highest number of resources where this requirement has failed. A drill down will display the list of resources that have failed grouped by the particular error message

9 of 14

Innovation—Compliance audits with remediation and patching

10 of 14

Access out-of-the-box compliance content. By the time resources are deployed, they’re already in desired compliance

10

Regulatory

Security

Benchmarks

Compliant templates

Remediation actions

Design note: The content in the left column seems redundant with the previous slide. Could slide 19 (which is rather wordy) be removed?

DCA provides market-leading OOTB compliance content.

Shown here are the regulatory and security benchmarks such as PCI, SOX, and CIS.

DCA comes with compliant templates that deliver desired compliance. By the time the resources are provisioned and configured, they’re in desired compliance state. For example, use a deployment template to provision an Oracle database that is already configured to be CIS compliant.

One of the key differentiators of the DCA is that it provides OOTB remediation actions. Customers don’t have to write scripts to remediate. All the remediation actions are already pre-built.

*****

Deploy CIS compliant Oracle database:

Installs Oracle on RHEL server
Attaches CIS benchmark
Scans for CIS
Remediation runs according to policy SLO
Deploy as compliant, and keep them compliant.

https://docs.software.hpe.com/wiki/display/DCA201705/Out-of-the-box+tags

11 of 14

Access out-of-the-box compliance content. By the time resources are deployed, they’re already in desired compliance

11

Did you know?

DCA enables compliance across the entire data center—servers, databases, and middleware, including open-source managed servers.

View compliance in a single dashboard

Measure with market-leading, out-of-the-box benchmarks

Remediate proactively and manage to service level objectives (SLOs)

DCA provides market-leading OOTB compliance content.

Shown here are the regulatory and security benchmarks such as PCI, SOX, and CIS.

DCA comes with compliant templates that deliver desired compliance. By the time the resources are provisioned and configured, they’re in desired compliance state. For example, use a deployment template to provision an Oracle database that is already configured to be CIS compliant.

One of the key differentiators of the DCA is that it provides OOTB remediation actions. Customers don’t have to write scripts to remediate. All the remediation actions are already pre-built.

*****

Deploy CIS compliant Oracle database:

Installs Oracle on RHEL server
Attaches CIS benchmark
Scans for CIS
Remediation runs according to policy SLO
Deploy as compliant, and keep them compliant.

https://docs.software.hpe.com/wiki/display/DCA201705/Out-of-the-box+tags

12 of 14

Let’s summarize—what differentiates DCA

12

Integrated compliance and closed-loop remediation

Heterogeneous provisioning and patching at scale

Broad technology coverage across OS & app vendors, proven scalability across >100,000 servers

Across heterogeneous OS, DB and MW, market-leading OOTB content

Container-deployment foundation

Easy installation, maintenance, and horizontal scale-out

Open API orchestration�engine

Seamless integration to connect processes across the data center

Let’s summarize.

What differentiates DCA? Let’s touch upon the differentiators.

DCA provides infrastructure lifecycle automation at scale, which includes provisioning and patching at scale, proven scalability across more than 100,000s servers.

DCA is truly heterogeneous and multivendor, and supports infrastructure management across multiple OS and database and middleware vendors, in some of the most diverse IT environments (including but not limited to Windows®, Linux®, Sybase, Oracle, SQL Server, WebSphere, and JBoss).

For example, on a single platform DCA automates patching across heterogeneous OS like Windows, Linux, and Unix and across multi-vendor databases and middleware. In fact, DCA provides the most comprehensive automation for databases, with use cases ranging from discovery to provisioning and configuration, patching to compliance, schema updates to migrations. DCA’s database automation “works like a DBA, only it’s automated”.

DCA delivers integrated, automated compliance remediation. The differentiators are:

Integrated compliance—not just for OS, but also databases and middleware
Not offered by other competitors, DCA offers closed-loop auto-remediation with OOTB remediation content, enforced through SLOs (service level objectives). Closed-loop remediation removes latencies (the lag) between when the audit is completed to when out-of-compliance elements are remediated
Market leading, high-value compliance content (such as PCI, CIS, etc.) for audit and remediation actions, including compliant images for deployment

HPE DCA comes with a single orchestration engine to connect infrastructure lifecycle management tasks and processes (related to provisioning, patching and compliance). The open API engine allows customers to customize processes specific to their needs, and seamlessly integrates 3^rd party tools and existing content. Customers tell us that “when it comes to operations orchestration, there really is no product that is out there that is as good, as robust, as flexible.” They’ve looked at numerous competitors, even open source, and no other product comes close.

And last but not least, the DCA is offers a new container deployment option, that accelerates time-to-value with easy installation (in a matter of minutes), easy maintenance, and effortless scale-out using agentless container services. We’ve delivered this foundation for the compliance microservice.

13 of 14

Thank You. Questions?