{"id":87217,"date":"2020-07-05T13:42:25","date_gmt":"2020-07-05T11:42:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/sim-sim-otkrojsya-dostup-v-czod-bez-bumazhnyh-zhurnalov"},"modified":"2020-07-05T13:42:25","modified_gmt":"2020-07-05T11:42:25","slug":"sim-sim-otkrojsya-dostup-v-czod-bez-bumazhnyh-zhurnalov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/sim-sim-otkrojsya-dostup-v-czod-bez-bumazhnyh-zhurnalov","title":{"rendered":"\"Open Sesame\": access to the data center without paper logs.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"&quot;Open Sesame&quot;: access to the data center without paper logs.\" src=\"\/wp-content\/uploads\/2020\/07\/6946d5aa3c640bf6c614d58c848deaff.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>We explain how we implemented an electronic visitor registration system with biometric technologies in the data center: why it was needed, why we developed our own solution again, and what benefits we received.<\/p>\n<h2>Entry and Exit<\/h2>\n<p>\nVisitor access to commercial data centers is a crucial aspect of operational organization. The data center's security policy requires accurate tracking of visits and monitoring of dynamics.\u00a0<\/p>\n<p>A few years ago, we at Linxdatacenter decided to fully digitize all visit statistics of our data center in Saint Petersburg. We abandoned traditional access registration \u2014 that is, filling out visitor logs, maintaining paper archives, and presenting documents at each visit.\u00a0<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nOur technical specialists developed an electronic visitor registration system combined with biometric access control technologies over the course of 4 months. The main task was to create a modern tool that meets our security requirements while also being convenient for visitors.<\/p>\n<p>The system provided complete transparency regarding visits to the data center. Who accessed the data center, when, and to which server racks \u2014 all this information became instantly available upon request. Visit statistics can be exported from the system in just a few clicks, making it much easier to prepare reports for clients and certification auditors.\u00a0<\/p>\n<h2>Starting Point<\/h2>\n<p>\nAt the first stage, a solution was developed that allowed all necessary data to be entered on a tablet upon entering the data center.\u00a0<\/p>\n<p>Authorization occurred by entering the visitor's personal details. The tablet then exchanged data with the computer at the security post over a dedicated secure communication channel. After that, a pass was issued.<\/p>\n<p>The system accounted for two main types of requests: applications for temporary access (single visit) and applications for permanent access. The organizational procedures for these types of requests in the data center differ significantly:<\/p>\n<ul>\n<li>In the temporary access application, the visitor's name and company are indicated, as well as the contact person who should accompany them throughout their visit to the data center.\u00a0<\/li>\n<li>Permanent access allows visitors to move freely within the data center (for example, this is important for client specialists who regularly come to work with equipment in the data center). This level of access requires the individual to undergo an introductory safety briefing and sign an agreement with Linxdatacenter regarding the transfer of personal and biometric data (fingerprint scan, photograph), as well as receiving the necessary document packet with the rules for working in the data center via email.\u00a0<\/li>\n<\/ul>\n<p>\nWhen obtaining permanent access, the need to fill out an application and confirm identity with documents each time is completely eliminated; it's enough to provide a fingerprint for authorization at entry.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"&quot;Open Sesame&quot;: access to the data center without paper logs.\" src=\"\/wp-content\/uploads\/2020\/07\/5792fff7b1ee0c4cc5a8568125d16b76.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>Changes!<\/h2>\n<p>\nThe platform on which we deployed the first version of the system is the Jotform constructor. This solution is used for creating surveys, and we refined it ourselves for the registration system.\u00a0<\/p>\n<p>However, over time, some \"bottlenecks\" and points for further development of the solution were revealed during operation.\u00a0<\/p>\n<p>The first challenge was that Jotform was not optimized for tablet format, and forms often shifted in size after the page was reloaded, going beyond the screen or, conversely, collapsing. This created a lot of inconvenience during registration.\u00a0\u00a0<\/p>\n<p>There was also no mobile application, forcing us to open the system interface on the tablet in \"kiosk\" mode. However, this limitation played to our advantage \u2013 in kiosk mode, the application cannot be minimized or closed on the tablet without administrator permissions, which allowed us to use a regular user tablet as a registration terminal for access to the data center.\u00a0<\/p>\n<p>During testing, multiple bugs began to surface. Numerous platform updates led to freezes and failures of the solution. This happened particularly often when updates affected the modules on which our registration mechanism's functionality was deployed. For example, surveys filled out by visitors were not sent to the security point, were lost, etc.\u00a0<\/p>\n<p>The uninterrupted operation of the registration system is extremely important, as both employees and clients use the service daily. During periods of 'hanging', the entire process had to revert to a 100% paper format, which was an unacceptable anachronism, leading to errors and overall appearing as a huge step backward.\u00a0<\/p>\n<p>At some point, Jotform released a mobile version, but this upgrade did not solve all our tasks. Thus, we had to 'cross' some forms with others, for example, for training and introductory instructions by the principle of a test.\u00a0<\/p>\n<p>Even when using the paid version, an additional extended Pro license was required for all our access tasks. The final 'price\/quality' ratio turned out to be far from optimal \u2013 we ended up paying for expensive excess functionality, which still required significant modifications on our part.\u00a0<\/p>\n<h2>Version 2.0, or 'Do It Yourself'<\/h2>\n<p>\nAfter analyzing the situation, we concluded that the simplest and most reliable solution was to create our own solution and transfer the functional part of the system to a virtual machine in our own cloud.\u00a0<\/p>\n<p>We wrote the software for the forms ourselves in React, deployed all of it using Kubernetes in production on our infrastructure, and ended up with our own registration system for access to the data center, independent of third-party developers.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"&quot;Open Sesame&quot;: access to the data center without paper logs.\" src=\"\/wp-content\/uploads\/2020\/07\/0e2058582f6da82d70f2ae61c6aed76a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nIn the new version, we improved the form for the convenient issuance of permanent passes. When filling out the form for access to the data center, the client can switch to another application, undergo express training on the rules of being in the data center, and testing, and then return to the 'perimeter' of the form on the tablet to complete the registration. Moreover, the visitor doesn't even notice this transition between applications!\u00a0<\/p>\n<p>The project was implemented quite promptly: creating the basic form for data center access and deploying it in the production environment took just a month. Since the launch and up to today, we have not registered a single failure or, moreover, a 'crash' of the system, and we have avoided minor inconveniences like mismatched interfaces with screen sizes.\u00a0<\/p>\n<h2>Voila \u2013 it's done<\/h2>\n<p>\nIn the month following the deployment, we transferred all the forms necessary for our work to our own platform:\u00a0<\/p>\n<ul>\n<li>Access to the data center,\u00a0<\/li>\n<li>Application for work production,\u00a0<\/li>\n<li>Introductory briefing.\u00a0<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"&quot;Open Sesame&quot;: access to the data center without paper logs.\" src=\"\/wp-content\/uploads\/2020\/07\/ed10b02f2c31d108c08ec7462b06dc42.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>This is what the application form for work production in the data center looks like.<\/i><\/p>\n<p>The system is deployed in our cloud in Saint Petersburg. We fully control the operation of the VM, all IT resources are reserved, which gives us confidence that the system will not fail and will not lose data under any scenarios.\u00a0<\/p>\n<p>The software for the system is deployed in a Docker container in the data center's own repository \u2013 this significantly simplifies system configuration when adding new functionalities, modifying existing capabilities, and will ultimately make upgrades and scaling easier, etc.\u00a0<\/p>\n<p>The system requires minimal IT resources from the data center while fully meeting our requirements in terms of functionality and reliability.\u00a0<\/p>\n<h2>What is current and what is next?<\/h2>\n<p>\nOverall, the access procedure remains the same: an electronic application form is filled out, then the visitor data 'flies' to the security post (full name, company, position, purpose of visit, accompanying person in the data center, etc.), verification with the lists occurs, and a decision on access is made.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"&quot;Open Sesame&quot;: access to the data center without paper logs.\" src=\"\/wp-content\/uploads\/2020\/07\/90f6214aaecf78181f0481912403fdd4.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\n<img decoding=\"async\" alt=\"&quot;Open Sesame&quot;: access to the data center without paper logs.\" src=\"\/wp-content\/uploads\/2020\/07\/43480d290c9592b13d578e45135658e6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nWhat else can the system do? Any analytical tasks in the historical perspective, as well as monitoring. Some clients request reports for internal personnel control purposes. With this system, we monitor peak visiting periods, which allows us to plan activities in the data center more effectively.\u00a0<\/p>\n<p>Future plans include transferring all existing checklists into the system \u2013 for example, the process of preparing a new rack. There is a regulated sequence of steps for preparing the rack for the client in the data center. It details what exactly needs to be done and in what order before launch \u2013 requirements for power supply, how many PDUs and patch panels to connect, which plugs to remove, whether to install access control, video surveillance, etc. Currently, all this is managed through paper documentation and partially on an electronic platform, but the company's processes are already ready for a full migration of support and control tasks to a digital format and web interface.<\/p>\n<p>Our solution will continue to develop in this direction, covering new back-office processes and tasks.<br \/>\n<br \/>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/linxdatacenter\/blog\/509292\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u043a\u0430\u043a \u043c\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0432 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0441 \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u043c\u0438: \u0437\u0430\u0447\u0435\u043c \u043e\u043d\u0430 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c, \u043f\u043e\u0447\u0435\u043c\u0443 \u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0438 \u043a\u0430\u043a\u0438\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438. \u0412\u0445\u043e\u0434 \u0438 \u0432\u044b\u0445\u043e\u0434 \u0414\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0435\u0439 \u0432 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0426\u041e\u0414 \u2013 \u0432\u0430\u0436\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u043e\u0431\u044a\u0435\u043a\u0442\u0430. \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0443\u0447\u0435\u0442\u0430 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0439 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0438.\u00a0 \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":87218,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-87217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u043a\u0430\u043a \u043c\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/sim-sim-otkrojsya-dostup-v-czod-bez-bumazhnyh-zhurnalov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u00ab\u0421\u0438\u043c-\u0441\u0438\u043c, \u043e\u0442\u043a\u0440\u043e\u0439\u0441\u044f!\u00bb: \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0426\u041e\u0414 \u0431\u0435\u0437 \u0431\u0443\u043c\u0430\u0436\u043d\u044b\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u043a\u0430\u043a \u043c\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/sim-sim-otkrojsya-dostup-v-czod-bez-bumazhnyh-zhurnalov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-05T11:42:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-05T11:42:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\"Open Sesame!\": Access to the Data Center Without Paper Logs | ProHoster","description":"We explain how we implemented it.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/sim-sim-otkrojsya-dostup-v-czod-bez-bumazhnyh-zhurnalov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u00ab\u0421\u0438\u043c-\u0441\u0438\u043c, \u043e\u0442\u043a\u0440\u043e\u0439\u0441\u044f!\u00bb: \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0426\u041e\u0414 \u0431\u0435\u0437 \u0431\u0443\u043c\u0430\u0436\u043d\u044b\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 | ProHoster","og:description":"\u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u043a\u0430\u043a \u043c\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/sim-sim-otkrojsya-dostup-v-czod-bez-bumazhnyh-zhurnalov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-05T11:42:25+00:00","article:modified_time":"2020-07-05T11:42:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87217","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:56:22","updated":"2022-10-04 19:51:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/87217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=87217"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/87217\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/87218"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=87217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=87217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=87217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}