FGCP/S5. Introduction Guide. Ver. 2.3 FUJITSU LIMITED

Transcription

1 FGCP/S5 Introduction Guide Ver. 2.3 FUJITSU LIMITED

2 FGCP/S5 Instruction Guide Ver. 2.3 Date of publish: July, 2012 All Rights Reserved, Copyright FUJITSU LIMITED No reproduction or republication without written permission. 1

3 Modification history Version Date of issue Description 1.0 Mar 19, 2010 Original version 1.1 Apr Add description of trail. - Add undecided item list. - Edit the obtain timing of client certification. - Edit system deployment flow. - Edit framework information. - Add data center out-sourcing window. 1.2 May 28, Revise [Chapter. 1]. - Add Contact information of Support Desk 1.3 June 28, Fix reference information in [Introduction]. - Add Attention Note at the time of estimating with Administrator ID. 1.4 July 26, Fix the description of file location of reference in [Introduction]. 2.0 Feb 4, 2011 [General] - Fix some descriptions. - Change the overall structure of the document. - Delete all Beta Limits. [Introduction] - Update the reference information. [1.1 General Outline] - Delete both Arrange the Intranet Connection step and Apply to the Software Support (SDK) step. [1.2 Obtain Administrator ID] - Update the supported Java version information - Update the description about Private IP Address Space Settings. [1.3 Apply to the Service] - Delete the description about Beta Limits [1.4 How to Log-in with Administrator s ID (Certificate login)] - Change the title. - Change the figures. [1.5 Add Resource Controller ID] - Add [1.5.5 Add the Privilege to the Resource Controller ID] [1.7 Create Middleware and Application Environment] - Add the description about Software Media Pack Library. [3. About Applying to the Service] - Add the following chapters - [3.1 Apply to the Help Desk] - [3.2 Apply to the Support for OS and Middleware] - [3.3 Apply to the FENICS Line Service] - [3.4 Apply to the DC Internal Connection Service] [4. Service Window] - Add [4.1 Support Window] [Other] - Delete [4. Role Sharing] and [5. Provided Resources] which were printed on the previous version. 2.1 Sep 1, 2011 [General] Change the Service Name from On-demand Virtual System Service to FGCP/S5 2.2 Feb 27, 2012 [1.2.1 Log-in to Top page] - Update System requirements - Add Microsoft Windows 7(32bit/64bit) - Update JRE 2.3 Jul 12, 2012 [1.2.1 Log-in to Top page] - Add Japan WEST region s URL 2

4 3

5 Introduction This document is about how-to guide on developing a new system by using FGCP/S5. Please also refer to following manuals about the details of FGCP/S5. References ([Top page] -> [Library]) FGCP/S5 Service Catalogue Manual ([Top page] -> [Sign-in] -> [Manual]) (*1) Service Portal User s Guide Functional Specification FGCP/S5 SSL Server Certificate Registration Procedure KMS User s Guide API User s Guide *1. These documents are available after Administrator ID is activated. Contract Documents ([Top page] -> [Sign-in] -> [Contract Documents]) FGCP/S5 Terms (Japanese only) FGCP/S5 Community Terms (Japanese only) Other materials Restriction / Consideration ([Top page] -> [Restriction / Consideration]) FAQ ([Top page] -> [FAQ]) Notes Contents in this guide are subject to change/update without notice. 4

6 Table of contents Chapter.1 Start-up General Outline Obtain Administrator ID Log-in to Top page New Registration of Constructor ID Login with ID/password Apply to the Service Request a Service Application form Receive a Service Application form Fill in a Service Application form Return the completed Service Application form Receive an ID Activation Completion notice How to log-in with Administrator s ID (Certificate login) Download the Client certificate Import the Client certificate Log-in to Service Portal with Administrator s ID. (Client certificate) Add Resource Controller ID Apply to add new Resource Controller (Registrant s part) Registration Process (Registered person s part) Log-in with ID/password Log-in with Resource Controller s Certificate Create New System Login to Service Portal (Client certificate) Create New Virtual System Confirm an approximate estimate Agree to the terms / deploy virtual system Install Middleware and Application SSL-VPN Console Connection Building an environment for Middleware and Application Public Audit Open the Service to the public (Modify Network Settings) Operate / Monitor the Virtual Systems Operate Virtual Systems Monitoring Chapter.2 Cancelation Flow to cancel the contract Save data outside FGCP/S5 (If necessary) Log-in to Service Portal with Administrator s ID (Client Authentication) Return All Virtual Systems Submit a Service Cancellation Request Receive a Service Cancellation Request Chapter.3 About Applying to the Service

7 3.1 Apply to the Help Desk Apply to the Support for OS and Middleware Apply to the FENICS Line Service Apply to the DC Internal Connection Service Chapter.4 Service Windows Support Windows Support window for purchase and installation Help Desk Support Window (Paid) OS / Middleware Support Window Contact Window about the System Trouble

8 Chapter.1 Start-up This chapter explains about the advance preparations before using this service. 7

9 1.1 General Outline The following diagram explains the flow to start using this service. Workflow Actions at Application Remarks Service Portal works 1.2 Obtain Administrator ID Receive Registration Guide mail. Receive Registration Completion mail 1.3 Apply to the Service Receive Service Available notice mail 1.4 Certificate login with Administrator ID OPTION 1.5 Add Resource Controller ID Receive Registration Guide mail Receive Registration Completion mail 1.6 Create New System 1.7 Install Middleware and Application Operations after introducing this service. 1.8 Operate / Monitor Virtual Systems 8

10 1.2 Obtain Administrator ID This section explains about how to obtain an Administrator ID. This service has 2 types of ID: Administrator ID and Resource Controller ID. ID type Administrator ID Resource Controller ID Description This is the ID which manages a contract of FGCP/S5. Each contract can obtain only one ID. This ID has a privilege which manage Resource Controller ID. This is the ID which is created by user with Administrator ID, and can access and control the FGCP/S5 system. Multiple Resource Controllers can be created within each contract. The number of Resource Controller ID is unlimited Log-in to Top page Users can access to the Service Portal from the client PC s web browser via Internet. Please access to the following URL. URL Japan EAST: Japan WEST: * If displayed language is not in English, please click the pull-down menu at upper-right and select [English].) Figure 0-1 Top page System requirements of Service Portal are as follows. Screen Resolution 1280 x 1024 or higher (Recommend) 1024 x 768 (Minimum) CPU / Memory / HDD No particular restrictions as long as following OS, Web browser, Flash Player, and Java are running OS Microsoft Windows XP SP3 (32bit) Microsoft Windows Vista SP2 (32bit) Microsoft Windows 7 (32bit/64bit) Web browser Microsoft Internet Explorer 7 / 8 Flash Player Adobe Flash Player 10 Java Runtime Environment JRE 6.0 Update 10 or higher (Required when downloading the Certificate file) 9

11 1.2.2 New Registration of Constructor ID (1) Click Sign up button on the top page. * If root certificate [SecureSignAD RootCA11] is not installed, the error message [There is a problem with this website s security certificate] is displayed at the time of screen transition. Users can install this root certificate by using Windows Update/Microsoft Update or Japan Certification Services, Inc. s web site ( (2) Click Subscribe button. Figure 0-2 New Registration of Constructor ID (1) 10

12 (3) Enter the address and agree to the terms. Figure 0-3 New Registration of Constructor ID (2) Figure 0-4 New Registration of Constructor ID (4) Please enter the address. * address is required. Please enter the address twice. * Registration guide and some important information to continue the registration are sent to this . So please enter the valid address. (Please check the mail rejection setting etc.) After checking the agreement check box for the service terms and the catch-all control, please click Apply button. 11

13 (4) Confirm the acceptance of application Figure 0-5 New Registration of Constructor ID (5) The mail which explains the next step is sent to the entered address. Receive the guidance mail and access to the URL in the mail. If users do not proceed the registration process within 24 hours, this application becomes invalid. (5) Enter the temporary password. Figure 0-6 New Registration of Constructor ID (6) Enter the temporary password printed in the guidance mail, and click Go to Registration Procedure button. 12

14 (6) Enter User Information Figure 0-7 New Registration of Constructor ID (7) Enter the user information and click Next button. * Items with (*) mark are required, so please enter them. * Furigana : Kana over or beside kanji to indicate pronunciation. For users lived besides eastern language area, please enter the same letters as entering at Name. 13

15 (7) Confirm the input information Figure 0-8 New Registration of Constructor ID (8) Check the input information, and click Register button if there is no mistake. If there is a mistake, please click Back button and fix the information. (8) Completion Figure 0-9 New Registration of Constructor ID (9) about registration information is sent to the registered address. This contains some secret information, so that please keep it in safe. 14

16 1.2.3 Login with ID/password (1) Click Sign in button on the top page. Figure 0-10 Login with ID/password (1) (2) Input the registered information (User ID and password), and then click Sign in button. (3) Complete login Figure 0-11 Login with ID/password (2) Figure 0-12 Login with ID/password (3) After login is completed, users can quote the monthly service charge by designing the system. After Administration ID is activated at [1.3 Apply to the Service], users can download the certificate, create/deploy the system, and add Resource Controller ID etc. At the first estimate operation, users need to specify the private IP address space settings. Please carefully read the attention notes below, and then specify the setting. 15

17 [Excerpts from FGCP/S5 Functional Specification (ver. 2.0)] Private IP address space setting In the private IP address allocation, first of all, network address with 24 bits netmask from among the range of specified IP address are allocated to each segment in the system. Next in the specified range of network address, private IP addresses are allocated automatically to each resource (VMs and SLB built-in servers). * Private IP addresses are set when each resource is deployed, and they are released when resources are deleted. Therefore private IP address will not change by the start/stop operation of each resource. The ranges of private IP addresses that can be specified are as follows. - Class A: Class B: Class C: [Attention] * In the above range of private IP address, [ /16] is not available. [Example of private IP address allocation] If there is a virtual system which has 3 segments (DMZ, SECURE1, SECURE2), and [ ] ~ [ ] is specified for the IP address range for this system, private IP address is allocated to each resource as follows. DMZ segment Any IP address within /24. SECURE1 segment Any IP address within /24 SECURE2 segment - - -Any IP address within /24 * In addition, 1 segment range is specified to the network address (24 bit mask) of [1.9.1 Private IP address connection] (Since this setting is shared within the contract, only 1 segment range is used), and the network address is allocated automatically from the specified network address. Private IP address is allocated to the each resource at the time of 1st boot, and the IP address is released when the target resource is deleted. Therefore, the IP address is not changed by the start/stop operation of the resource. [Attention] About the address overlap when using Private Network Connection When users use [1.10 Private Network Connection], the Private network connection is failed if the destination network address space overlaps with the range of network address of created system. Please specify the range of network address that is different from the other network address if uses use or will use [1.10 Private Network Connection]. [Attention] About private IP address setting for each resource Users cannot specify the private IP address for each resource. They can only specify the range of IP address. Please do not change the private IP address of VM or do not allocate the virtual IP address to VM manually, otherwise users will not communicate with those VMs at all. [Attention] About the address overlap when using SSL-VPN Console Connection When users connect via SSL-VPN by using [1.5.6 VPN Connection], the VPN connection is failed if the IP address of client PC overlaps with the range of network address of created system. Please specify the range of network address that is different from the network address of client PC in the private IP address space setting. 16

18 1.3 Apply to the Service This section explains about how to apply and start this service. Customers Sales at Fujitsu Request a Service Application form. Receive a Service Application form request. Receive a Service Application form. Send a Service Application form. Fill in a Service Application form. FGCP/S5 Return the completed Service Application form. Receive the completed Service Application form. Activate the Administrator s ID (*) Receive an ID Activation Completion notice. Send an ID Activation Completion notice. * The Administrator s ID obtained at section 1.2 is allowed only to obtain the estimate of designed system. In order to use other functions in Service Portal, it is required to update the status of the Administrator ID. This step (Update the status of the Administrator ID) is called [Activate the Administrator s ID]. * If users do not activate the administration ID within 90 days from the registration date, this administration ID is deleted. 17

19 1.3.1 Request a Service Application form Please ask Fujitsu Sales or Sales Inquiry Window (Refer to the section [4.1.1 Support window for purchase and installation]) to send a Service Application form Receive a Service Application form Fujitsu Sales will send a Service Application form Fill in a Service Application form Fill-in the Service Application form and sign it. * Please refer to [3.1 Apply to the Help Desk] about the Help Desk support Return the completed Service Application form Return the Service Application form to Fujitsu Sales Receive an ID Activation Completion notice When the applied Administrator s ID is activated, the ID Activation Completion notice will send to Applicants. When the Administrator s ID is activated, users can download the Client certificate. By logging in to the FGCP/S5 with the downloaded certificate, users can use all functions on the Service Portal. 18

20 1.4 How to log-in with Administrator s ID (Certificate login) Download the Client certificate When users log-in to Service Portal with ID/password after Administrator s ID is activated, they can download the certificate. By importing the certificate to the client PC, users can log-in to Service Portal with client certificate. (1) Log-in to Service Portal with ID/password after Administrator s ID is activated. (2) Click Create Certificate button. Figure 0-13 Download the Client certificate (1) (3) Click Issue/Update Certificate. Figure 0-14 Download the Client certificate (2) 19

21 (4) Enter the password for the private key. Figure 0-15 Download the Client certificate (3) The password for the private key is required when importing a certificate to the client PC. Enter the password for the private key, and then click Issue button. * Between 16 and 31 letters of one-byte alphanumeric characters and symbols for the password of the private key. The letters are case-sensitive. * Password of the private key is required information, so please make sure to enter it at 2 parts. * If the following security warning message is displayed after clicking the Issue button, please click No. Figure 0-16 Download the Client certificate (4) (5) Specify the folder location where certificate files are saved. Figure 0-17 Download the Client certificate (5) Click Browse button, and then specify the folder location where certificate files are saved. After folder location is specified, please click Store button. 20

22 * In order to download the certificate, Java Runtime Environment (JRE) 6.0 or higher is required. If JRE 6.0 or higher is not installed, please install JRE 6.0 or higher first, and then start over this procedure. * Specifying the folder location where the certificate file is save is required field, so please make sure to specify it. (6) Complete the download Figure 0-18 Download the Client certificate (6) Import the Client certificate Import the certificate which is downloaded from Service Portal. The following operations are implemented not on the web browser but on the Windows. (1) Execute the downloaded certificate file (UserCert.p12). When double-clicking the certificate file, the Certificate Import Wizard is displayed. (2) Start the Certificate Import Wizard Figure 0-19 Import the Client certificate (1) Click Next button and move to the next step. 21

23 (3) Specify the Certificate file Figure 0-20 Import the Client certificate (2) Specify the Certificate file (UserCert.p12) to import, and then click Next button. If the file is not specified automatically by default, please click Browse button and specify the Certificate file manually. (4) Enter the password for the private key Figure 0-21 Import the Client certificate (3) Enter the password for the private key which is specified when downloading the Certificate file from the Service Portal. In addition, in order to keep the security level, please check the box of [Enable strong private key protection.] and remove the checkmark of [Mark this key as exportable.]. The option of [Include all extended properties.] will not be displayed depending on the OS. If it is displayed, please keep the defaults setting. (Whether it is checked or not checked, there is no influence to use this service.) When entering the password and checking the boxes, please click Next button. 22

24 (5) Specify the Certificate Store Figure 0-22 Import the Client certificate (4) Select the [Automatically select the certificate store based on the type of certificate] and click Next button. (6) Complete the Certificate Import Wizard Figure 0-23 Import the Client certificate (5) Confirm the specified settings and click Finish button. 23

25 (7) Specify the Security Level Figure 0-24 Import the Client certificate (6) Change the Security Level from [Medium] to [High]. Click Set Security Level button. (8) Select the Security Level Figure 0-25 Import the Client certificate (7) Choose [High], and click Next button. (9) Specify the Key Protection Password Figure 0-26 Import the Client certificate (8) Create the Key Protection Password which is required to log-in to Service Portal with Client Certificate. After entering the passwords, click Finish button. * Password and Confirm fields are required items. Please enter the same character letters at both fields. 24

26 (10) Confirm the Security Level Figure 0-27 Import the Client certificate (9) Please confirm that the Security Level is High. After the confirmation, please click OK button. (11) Confirm the import of root certificate Figure 0-28 Import the Client certificate (10) Please confirm that the valued of displayed Thumbprint (sha1) is same as the value of Thumbprint printed on the following URL. URL: After the confirmation, please click Yes. Please confirm that the message The import was successful is displayed. In case any other message is displayed, please contact Support Desk. When the installation is completed, please close all web browsers. 25

27 1.4.3 Log-in to Service Portal with Administrator s ID. (Client certificate) (1) After importing the Certificate, click Sign in button on the top page. Figure 0-29 Log-in to Service Portal with Administrator s ID. (Client certificate) (1) (2) Select the Certificate Figure 0-30 Log-in to Service Portal with Administrator s ID. (Client certificate) (2) The dialog box of Identification is displayed. Select the Certificate which is used for login by looking at the Name column as a key, and then click OK button. 26

28 (3) Select Grant permission and enter the Key protection password Figure 0-31 Log-in to Service Portal with Administrator s ID. (Client certificate) (3) The Key protection password is a password which is specified when importing the Certificate. After enter the password, please click OK button. When login is completed, the following menu window is displayed. Figure 0-32 Log-in to Service Portal with Administrator s ID. (Client certificate) (4) 27

29 1.5 Add Resource Controller ID This section explains how to add a Resource Controller ID. * This step is not mandatory, but we recommend implementing this step for your secure operation. The procedure of obtaining Resource Controller ID consists of 2 parts; Registrant part and Registered person s part. For the difference between Administrator s ID and Resource Controller ID, Please refer to the section [1.2 Obtain Administrator ID]. Registrant (Administrator) Registered Person (Resource Controller) Apply to add new Resource Controller Registration Process Log-in with ID/password Allocate privileges to the Created Resource Controller ID Log-in with Resource Controller s Certificate Apply to add new Resource Controller (Registrant s part) (1) Log-in to Service Portal with Administrator s ID (Certificate Login). (2) Select User Management from the Portal Menu. Figure 0-33 Add Resource Controller ID (1) 28

30 (3) Select Administrator List from the User Management menu. Figure 0-34 Add Resource Controller ID (2) (4) Click Adding Resource Administrator button. Figure 0-35 Add Resource Controller ID (3) 29

31 (5) Enter the registered person s address. Figure 0-36 Add Resource Controller ID (4) In order to send a guidance mail to the registered person, please enter the valid address of that person, and then click Apply button. The mail which explains the next step is sent to the entered address. * address is required information, so please makes sure to enter the same address at both fields. (6) Confirm the Registration Application Acceptance Figure 0-37 Add Resource Controller ID (5) The guidance main is sent to the entered address. Please ask the registered person to implement the registration procedure from [1.5.2]. If the person does not implement the registration procedure within 24 hours, the application becomes invalid. 30

32 1.5.2 Registration Process (Registered person s part) The following procedure is done by the registered person. Receive the guidance mail, and access to the URL in the mail. If the registration procedure does not complete within 24 hours, the application becomes invalid. (1) Enter the temporary password and agree to the Terms. Figure 0-38 Add Resource Controller ID (7) Check the guidance mail, and enter the temporary password written in the . 31

33 Check and agree to the Terms of service as well as the Agreement items on the Catch-All Control, and then click Go to Registration Procedure button. (2) Enter the User information Figure 0-39 Add Resource Controller ID (8) Enter the customer s information and click Next button. * Items with (*) mark are required, so please enter them. (3) Confirm the registration information Figure 0-40 Add Resource Controller ID (9) Check the entered information, and click Register button if there is no mistake. If there is a mistake, click Back button to move the previous window, and then fix the information. 32

34 (4) Registration completion Figure 0-41 Add Resource Controller ID (10) Log-in with ID/password Please refer to the section [1.2.3 Login with ID/password] Log-in with Resource Controller s Certificate Please refer to the section [1.4.3 Log-in to Service Portal with Administrator s ID. (Client certificate)] Allocate privileges to the Created Resource Controller ID. The following procedure is done by the Registrant (Administrator). By allocating the operation privileges, it is possible for Resource Controller ID to operate the system (such as deploy new virtual system). (1) Log-in to Service Portal with Administrator s ID (Certificate Login). (2) Select Access Control from the Portal Menu. Figure 0-42 Add Resource Controller ID (11) 33

35 (3) Click Authorization Setting: Authorization List. Figure 0-43 Add Resource Controller ID (12) (4) From the Access Control: Authorization List, click the target Resource Controller ID. Figure 0-44 Add Resource Controller ID (13) 34

36 (5) At the Access Control: Authorization Setting > Set User Authorization window, select [Central Administrator], and then click Next button. Figure 0-45 Add Resource Controller ID (14) 35

37 (6) At the Access Control: Authorization Setting > Set User Authorization window, confirm that [Central Administrator] is specified at Central Management Authorization, and then click Fix button Figure 0-46 Add Resource Controller ID (15) (7) Confirm the displayed message (ex. The authorization for the user (kikijiji) was set ), and then click Back to Authorization List button. Figure 0-47 Add Resource Controller ID (16) 36

38 1.6 Create New System Resource Controller ID or Administrator s ID Log-in to the Service Portal (Certificate login) Create New Virtual System Confirm an Approximate Estimate Agree to the Terms of service / Deploy a virtual system Login to Service Portal (Client certificate) Log-in to Service Portal as Resource Controller or Administrator by the Client Certificate login Create New Virtual System Please refer to [FGCP/S5 Service Portal User s Guide Chapter 2. Create/modify a Virtual System] about the details of creating new virtual system. Standard procedure is explained below. (1) Select My Portal from the Portal menu. Figure 0-48 Create New System (1) 37

39 (2) Select Design Studio from My Portal. Figure 0-49 Create New System (2) (3) Specify the Private IP address space setting When creating a first new virtual system, the Network Configuration must be specified. Users need to specify the range of private IP address which is allocated to the virtual systems (VMs and load balancers). Figure 0-50 Create New System (3) (Important) Users can configure this setting only when they create a first new virtual system. Therefore, please refer to the [FGCP/S5 Functional Specification] as well as the [FGCP/S5 Service Portal User s Guide 2.2 Private IP Address Space Setting] about the details in advance. If users plan to deploy a virtual system which has 3 segments, they need to specify at least the range of 4 consecutive 24-bits netmask s network addresses (3 network addresses (used for each 3 segments) + 1 network address (used for private IP address communication)) 38

40 Ex) If users plan to deploy 2 3-segments virtual systems, they need to specify consecutive 7 24-bits netmask network addresses ( = 7). In such case, please specify as follows (4) Create New Virtual System Figure 0-51 Create New System (4) Click Create a new system link to start creating the system. 39

41 1.6.3 Confirm an approximate estimate Please refer to [2.3.4 Confirm an approximate estimate] in the [Service Portal User s Guide] about the detailed procedure. Figure 0-52 Create New System (5) After users design the virtual system configuration, the approximate estimate of service charge is displayed. The approximate estimate is calculated from the situation that if all services in the created system are used in a month (31 days). After confirming the amount, please click Next button. [About the functions in the screen] PDF Output: Users can download the approximate estimate in PDF format. CSV Output: Users can download the approximate estimate in CSV format. Save Estimate: Users can save the Virtual System Configuration, and interrupt the process of creating a Virtual System. 40

42 1.6.4 Agree to the terms / deploy virtual system Figure 0-53 Create New System (6) Please read the displayed Terms of Service. After users understand and agree the Terms of Service, please check I agree to the Terms of Service, and then click Final Confirmation button. When the button is clicked, the virtual system is started to deploy. 41

43 1.7 Install Middleware and Application The following procedure explains not only how to install both middleware and application but also how to open the service to the public SSL-VPN Console Connection By using the SSL-VPN Console Connection service from the Service Portal, users can connect to the VMs via SSL-VPN. After SSL-VPN connection is established, they can access to the VM via RDP (Remote Desktop) for Windows Servers and via SSH for CentOS. Please refer to [3.2 VPN Connection (Log-in to VMs)] in the [Service Portal User s Guide] for the details. Target OS Remote Connection method Data Transfer method Windows Server Remote Desktop Protocol (RDP) connection Shared resource of the Remote Desktop connection CentOS Red Hat SSH SCP Building an environment for Middleware and Application Please install middleware and applications as necessary. For the virtual system has either Internet connection or Intranet connection, users can build the environment via Intranet or Internet if they specify the firewall rules which allow the access from the Internet or the Intranet Public Audit Before opening the service to the public, please take the Public Audit as appropriate with the User s responsibility. If the service is opened to the Internet, we strongly recommend taking the Public Audit Open the Service to the public (Modify Network Settings) By specifying the Firewall s network settings and allow either Internet or Intranet, users can open the service to the public. 42

44 1.8 Operate / Monitor the Virtual Systems General operation and monitoring for the virtual systems are described below Operate Virtual Systems Please refer to [Chapter 3. Operate Virtual System] in [FGCP/S5 Service Portal User s Guide] about the details Monitoring Please refer to [Chapter 4. Monitor the Virtual Systems] in [FGCP/S5 Service Portal User s Guide] about the details. 43

45 Chapter.2 Cancelation This chapter explains how to cancel the contract. 44

46 2.1 Flow to cancel the contract The below flow diagram explains how to cancel this service. Users need to cancel the connection fee and support fee, which are special arrangements, separately. Customer Fujitsu Save data outside FGCP/S5 (If necessary). Log-in to Service Portal with Administrator s ID (Client Authentication) Return all virtual systems. Submit a service cancellation request. Receive a service cancellation request. Receive a cancel completion notice. Send a cancel completion notice Save data outside FGCP/S5 (If necessary) When all virtual systems are returned, all data on the virtual system are all deleted. Please copy the data on the virtual system to the customer s local environment in advance, if necessary Log-in to Service Portal with Administrator s ID (Client Authentication) Log-in to the Service Portal with Administrator s ID (Client Certificate and PIN) Return All Virtual Systems Return all virtual systems at System Manager in the Service Portal. Repeat the following procedure until all systems are returned. 1) Stop all VMs (include Firewall and SLB) in the virtual system. 2) Return the virtual system. At this moment, it will be entirely free of charge for this service. If users want to cancel the contract itself, please implement the following procedure Submit a Service Cancellation Request. Submit a Service Cancellation Request on the Service Portal Receive a Service Cancellation Request. Fujitsu will send a cancellation completion notice. Please confirm the contents. 45

47 Chapter.3 About Applying to the Service This chapter explains about how to apply to the FGCP/S5 related services. 46

48 3.1 Apply to the Help Desk For questions about how to use FGCP/S5 and supports for problem resolution, please use the Help Desk Service (paid), which users can apply when they apply to the service. In the Help Desk Support, we will answer any questions about the details of FGCP/S5 s specification, how to specify the VMs and virtual systems, and how to use the FGCP/S5 (Except questions regarding the software provided by FGCP/S5). Users can apply to this service at the application form described at [1.3 Apply to the Service]. Please circle Yes for the Help Desk Support on the application form and write down the number of services. * 1 service will support up to 5 virtual systems. * It will take about a week to complete the registration. So please allow enough time for applying this service. 3.2 Apply to the Support for OS and Middleware With this support, it is possible for users to deploy the VMs with support (maintenance and operation support for Windows OS, Red Hat, and SQL Server etc.). The application for this service will complete when users deploy the VMs with support on the Service Portal. * We will send the contact information within 5 days after the target VM (VM with support) is deployed. 47

49 3.3 Apply to the FENICS Line Service FENICS VPN Connection Service is one of the Fujitsu FENICS s Services which will connect between Customer s network system and the virtual system on the FGCP/S5. Users need to separately apply and sign-up with FNICS service. In order to apply to the FENICS service (Cloud Connection Application), users need to obtain Contract Number and LAN address in advance. Contract Number is provided when users obtain the Administrator s ID in FGCP/S5. Therefore, users need to complete the FGCP/S5 Application before applying to the FNICS Line service. After obtaining the Contract Number, users can apply to the FENICS service. * In order to open the FENICS Line, a virtual system is deployed in the FGCP/S5 beforehand. Please create and deploy at least 1 virtual system before a week from the opening date. (VMs do not need to be Running states.) Customer Sales FENICS Line Application Window Deploy a virtual system in FGCP/S5 Confirm the system ID, and LAN addresses. FENICS Service Name System ID LAN address Bandwidth Request a FENICS Service Application form. Apply to FENICS. Receive the FENICS Service Application form. Receive the Open date Open date Service is available. Receive/Send the Open date Send the Open date Contract Number LAN Address ID which is determined automatically when the contract is completed. Ex : WAGY8H6D The ranges of private IP address which are specified at Network Settings when creating a new system. (*) Ex : * For LAN Address, please write down the ranges of IP address which are specified at section [1.6.2 (3) Specify the Private IP address space setting]. 48

50 3.4 Apply to the DC Internal Connection Service DC Internal Connection Service is one of the Fujitsu s services which will connect between the customer s network system in the Datacenter and the virtual system on the FGCP/S5. This service is available at Fujitsu Tatebayashi System Center in Japan. In order to use this service, users need to use the Outsourcing Service at Fujitsu Tatebayashi System Center. Please contact to Fujitsu s Outsourcing Department. 49

51 Chapter.4 Service Windows This chapter explains about the contact information that needs to know when starting this service. 50

52 4.1 Support Windows For troubles, questions about Service Portal, and service specifications, please contact to the following support window Support window for purchase and installation Please send the l to the following address or use the Inquiry form about the questions from the customers who plan to introduce the FGCP/S5 as well as the consulting about the quotes and system installation. contact-oviss@cs.jp.fujitsu.com URL: Help Desk Support Window (Paid) For questions about how to use FGCP/S5 and supports for problem resolution, please use the Help Desk Service (paid), which users can apply when they apply to the service. In the Help Desk Support, we will answer any questions about the details of FGCP/S5 s specification, how to specify the VMs and virtual systems, and how to use the FGCP/S5 (Except questions regarding the software provided by FGCP/S5). * Help Desk will support the Symantec s Licensed software. Contact list for this service will be provided to the Constructor individually OS / Middleware Support Window With this support, it is possible for users to deploy the VMs with support (maintenance and operation support for Windows OS, Red Hat, and SQL Server etc.). Please refer to [FGCP/S5 Software Support Specification] about the detail of the service. We will provide the Usage Method to users individually Contact Window about the System Trouble We will prepare the following contact window for customers in case FGCP/S5 does not work properly. Please contact to the Contact Window below by following the mail format described at [Top Page] -> [Sign In] -> [Inquiries]. contact-oviss-trouble@cs.jp.fujitsu.com Business Hour: 9:00 am- 5:00 pm, JST (UTC+9h) Monday - Friday (except business holidays) Contacts after-hours will accept on 9:00 of the next business day 51