Getting Started with Vormetric DSM - Partner Template

Updated by Bob Stolzberg on Jun 30, 2015

Vormetric Logo

Partner Profile

Vormetric provides enterprise encryption and key management services that enable corporations to protect their data. Vormetric addresses industry compliance mandates and government regulations globally by securing data in physical, virtual and cloud infrastructures, through Data Encryption, Key Management, Access Policies, Privileged User Control, and Security Intelligence.

For more information, visit http://www.Vormetric.com.

Contact Vormetric

Vormetric Sales and Support:

Description

Vormetric has integrated their Data Security Manager (DSM) technology with the CenturyLink Cloud platform, publishing their virtual appliance as a CenturyLink Cloud Partner Template. The purpose of this KB article is to help the reader take advantage of this integration to achieve rapid time-to-value for this encryption solution.

Together, Vormetric and CenturyLink deliver data-centric security services that encrypts sensitive customer data and centralizes encryption key management and policy control for data-at-rest encryption, privileged user access control and value security intelligence to meet customer’s business and compliance requirements.

The Data-centric Security-as-a-Service (DSaaS) solution enables IT organizations to efficiently deploy data-centric security across CenturyLink Partner Templates with the Vormetric Transparent Encryption SW agents and the Vormetric Data Security Manager products. Now, IT security managers can define what files and folders are restricted, who is allowed to view the data, when access is allowed and what operations can be performed by the individual or group. With the Vormetric data security solution, businesses now reduce their data breach risk, guard against unauthorized data access, meet executive data privacy business requirements and satisfy security compliance regulations that govern your market.

Below is a solution diagram illustrating the Data Security Manager (DSM) deployment options available using the DSM, and also include Vormetric Agent integrations that can be automatically deployed via CenturyLink Cloud Blueprints.

DSM Topology Diagram

For more information including whitepapers and data sheets, please view the DSM product information on Vormetric's website.

Solution Overview

The Vormetric Data Security Manager (DSM) is the brain of the Vormetric Data Security Platform. The Vormetric Data Security Manager is a data security appliance which enables centralizes policy control and key management for data-at-rest-encryption, privileged user access control and security intelligence across an organization. The Data Security Manager changes the data security management game by enabling an IT organization to have a consistent and repeatable method for encrypting, enforcing access policies and gaining security intelligence for all structured and unstructured data.

Once the Data Security Manager is in place, new security mandates, compliance requirements and risks are quickly met through the provisioning of Vormetric Transparent Encryption, Vormetric Application Encryption, or managing keys and certificates for 3rd party devices. The result of centralizing control of such a breadth of data-at-rest security capabilities is low total cost of ownership, efficient deployment of new secure services, and an increase in control and visibility of data across your organization.

Offer

Vormetric has provided a Virtual Appliance - called a Partner Template - that can be deployed to your CenturyLink Cloud account via a Service Task. Although Service Tasks are ordinarily billed to the end user account, CenturyLink will provide a refund for the Service Task costs associated with deploying the Vormetric Partner Template. Please follow the process below to request credit. In order to purchase a license or entitlement, please contact Vormetric Sales using the contact information above.

Audience

  • CenturyLink Cloud Users

Impact

After reading this article, the user should feel comfortable deploying the Vormetric DSM technology on CenturyLink Cloud. Vormetric has provided a Virtual Appliance - what we call a Partner Template - that can be deployed to your CenturyLink Cloud account via a Service Task.

This task can be requested using the Runner task at Vormetric Runner Job

Prerequisite

  • Access to the CenturyLink Cloud platform as an authorized user.
  • Identify a Network VLAN you want the Vormetric DSM to reside on.

Postrequisite

  • If you want to access your Vormetric DSM over the internet, please perform the following tasks once your Vormetric DSM has been deployed to your account.

  • Add a Public IP to your server through the Control Portal.

  • If required, allow incoming traffic for the admin port by clicking on the Servers Public IP in the Control Portal. IMPORTANT: Please make sure your firewall rules are properly configured to only allow specific source traffic. If you do not configure source traffic rules you risk exposing your DSM to the entire internet. Note: When accessing your DSM for the first time or for any administration, we recommend you connect to your CenturyLink Cloud environment via Client VPN.

  • Allow incoming traffic for the following ports.

    • TCP Ports: 22, 443, 5696, 7024, 8080, 8443, 8444, 8445, 50000
    • UDP Ports: 123, 161, 7025
    • ICMP: All

Detailed Steps to Deploy Vormetric DSM

Vormetric DSM deploys in a virtual appliance model, as a CenturyLink Cloud Partner Template. Follow these step by step instructions to deploy a Vormetric DSM in to your CenturyLink Cloud account:

Accessing and Configuring your Vormetric partner template

Follow these steps to access and configure your Vormetric partner template once you receive an email from Service Tasks confirming the partner template has been deployed to your account.

  1. Connect to your DSM's IP address provided by support via SSH and login as cliadmin / Vormetric123$.
  2. Change your password and configure your DSM based on your requirements. Please view the support information on http://www.Vormetric.com for more information.

Pricing

Vormetric license fees are billed for this installation. Pricing depends on the version chosen. The product selection dropdown in the Runner job details pricing for each option.

The cost to deploy the Vormetric Partner Template will be billed as a Service Task, but CenturyLink will provide a credit for those costs. In order to receive a credit, please follow the instructions below. More information about Service Tasks and fees is available here.

Process to request credit for Service Task fee

Follow this process to request credit on your account to re-imburse any expense to deploy the Partner Template.


TO: [email protected]

EMAIL SUBJECT: Requesting Credit for Vormetric Partner Template Deployment

CLC Ecosystem Team,

I am requesting a credit be placed on my account to cover the fees associated with deploying the Vormetric Partner Template to my account under the Service Task deployed on MM/DD/YYYY. My CenturyLink Cloud username or account alias the credit needs to be placed on is ######

Thank you very much, your_name_here


Frequently Asked Questions

Where do I obtain my Vormetric License or entitlements?

Existing CenturyLink Enterprise Customers can contact their Account Representative for help obtaining a Vormetric license, or contact Vormetric directly:

Who should I contact for support?

What is the performance impact of Vormetric encryption?

Vormetric customers typically report no perceptible impact to the end-user experience. In almost every case, the impact of encryption overhead is minimal so IT teams can continue to meet their SLAs. In a benchmark conducted with Intel, Vormetric Transparent Encryption demonstrated under 2% performance overhead at 70% system utilization.

How difficult is it to deploy Vormetric?

With Vormetric Transparent Encryption, securing data is easy. Unlike other encryption offerings, this product enables security teams to implement encryption, without having to make changes to their organization’s applications, infrastructure, or business practices. Plus, Vormetric Data Security Manager offers centralized, highly efficient policy and key administration.

What operating systems are supported?

Vormetric solutions provide support for a broad range of operating systems, including Microsoft Windows, Linux, Solaris, IBM AIX and HP-UX.

What deployment models are supported?

Through the platform’s centralized policy and key management, customers can efficiently address security policies and compliance mandates across databases, files and big data nodes – whether they’re located in the cloud (or in virtual or traditional) infrastructures.

Customer Support

Can’t find what you need?
Give us a call.

1.888.638.6771

M – F, 8am to 6pm