Understanding your responsibilities when you use VMware Solutions
Learn about the management responsibilities and terms and conditions that you have when you use IBM Cloud® for VMware Solutions. For a high-level view of the service types in IBM Cloud and the breakdown of responsibilities between the customer and IBM for each type, see Shared responsibilities for IBM Cloud offerings.
Review the following information for the specific responsibilities for you and for IBM when you use VMware Solutions. For the overall terms of use, see IBM Cloud terms and notices.
Incident and operations management
Incident and operations management includes tasks such as monitoring, event management, high availability, problem determination, recovery, and full state backup and recovery. The following table describes the responsibilities that are related to incident and operations management:
Task | IBM responsibilities | Your responsibilities |
---|---|---|
Availability | Offer VMware® infrastructure in multiple locations, including multizone regions (MZR)A region that is spread across physical locations in multiple zones to increase fault tolerance.. | Plan and provision VMware infrastructure according to your availability requirements. |
Infrastructure monitoring and notification | Forward to the client all network intrusion notifications detected. Maintain shared cloud infrastructure, including network and storage. | Implement monitoring system and integrate with virtualization management. Determine the impact of each notification reported. Engage IBM Support as required. |
Workload monitoring | Monitor and respond to OS or software failures. | |
Infrastructure management | Implement monitoring and management system that is integrated with virtualization management. | |
Incident management | Unplanned incidents with customer impact are communicated through the CIE process. | Impacted customers can obtain a report about the incident upon request. |
Change management
Change management includes tasks such as deployment, configuration, upgrades, patching, configuration changes, and deletion. The following table describes the responsibilities that are related to change management.
Task | IBM responsibilities | Your responsibilities |
---|---|---|
Scaling | Scale your VMware infrastructure as requested. | Choose the capacity for your VMware Solutions instances. |
Upgrading and patching | IBM does not have access to components to perform upgrades and patching. | It's your responsibility to apply updates to VMware components (VMware vSphere Hypervisor ESXi, vCenter Server, VMware NSX-T, VMware vSAN, Microsoft Active Directory™) and any additional add-on components (VMware Aria, Caveonix RiskForesight, Veeam Backup and Replication). You can use VMware Update Manager to assist with the updates. The Regulated Workloads section of this documentation also includes a version compatibility matrix. |
Identity and access management
Identity and access management includes tasks such as authentication, authorization, access control policies, and approving, granting, and revoking access. The following table describes the responsibilities that are related to identity and access management:
Task | IBM responsibilities | Your responsibilities |
---|---|---|
Identity and access | Provide the function to restrict access to resources through the IBM Cloud console and REST APIs. Provide default access to the provisioned VMware environment. | Manage access to resources through IAM. Manage access to the VMware environment. |
Security and regulation compliance
Security and regulation compliance includes tasks such as security controls implementation and compliance certification. The following table describes the responsibilities that are related to security and regulation compliance:
Task | IBM responsibilities | Your responsibilities |
---|---|---|
Encryption | Provide integration with Key Protect and Hyper Protect Crypto Services through KMIP service as an option for implementing data at-rest encryption. | Configure and manage encryption for both data at rest and in transit, as needed. |
Disaster recovery
Disaster recovery includes tasks such as:
- Providing dependencies on disaster recovery sites
- Provision disaster recovery environments
- Data and configuration backup
- Replicating data and configuration to the disaster recovery environment
- Fail over on disaster events
The following table describes the responsibilities that are related to disaster recovery:
Task | IBM responsibilities | Your responsibilities |
---|---|---|
Business continuity and Disaster Recovery (DR) | Provide automated provision and integration for third-party services, such as Veeam and Zerto. | Provision third-party solutions such as Veeam and Zerto, or other solutions of your choice, along with the VMware Solutions instance. Configure these solutions to meet your business continuity and DR requirements for your workload. |
Preserving critical configuration
Configuration changes can impact the ability to use the VMware Solutions console to view and manage instances. Preserving certain configurations and settings is critical for the VMware Solutions automation to continue to function properly.
You must manage the VMware Solutions components that are created in your IBM Cloud account only in the VMware Solutions console. For more information, see:
- VMware Cloud Foundation for Classic - Automated overview
- Expanding and contracting capacity for Automated instances
If you change your credentials, for example passwords, IBM Support might no longer be able to help you recover lost or forgotten credentials, or to troubleshoot any problems in your environment. For more information, see Client responsibilities.
Changes to VMware ESXi server names or configurations might have a negative impact on managing your instance. For more information, see:
- Can I change the ESXi server names and IP addresses?
- Considerations about changing vCenter Server artifacts
In IBM Cloud for VMware Solutions, every primary instance deploys an Active Directory domain controller. To understand the limitations on changes that you can make and recommendations on integration in your environment, see: