Enterprise Linux Log - A SearchEnterpriseLinux.com blog

Enterprise Linux Log:

 

A SearchEnterpriseLinux.com blog


A blog for Linux administrators covering Red Hat, SUSE, Ubuntu, Linux in data centers, Oracle Linux, Linux vs. Windows, Linux vs. Unix, interoperability, migration, the Linux kernel and more.

Server platform consistency for Linux systems

Today’s top server hardware vendors have expanded the line of Linux compatible server systems. HP and Dell, for example, have Red Hat Enterprise Linux (RHEL) and Novell SUSE Enterprise Linux available as OEM build installations, the same hardware that a Windows server can be built on. As recommended configurations from the vendors are quite similar, this can make any server purchases a little easier to swallow. Because configurations are similar for Windows and Enterprise Linux builds, these servers can be repurposed to change their roles to Windows or Linux without additional equipment.

Take for example the HP ProLiant DL 380 G5 and the Dell PowerEdge 2950 III, which can be configured for a general purpose Windows or Linux server and can have most connectivity options available: fiber networking interfaces, storage area network (SAN) fiber channel adapters and any additional copper networking. The local drive configurations currently use serial attached SCSI (SAS) drives with local array controller. 

Dell and HP generally divide models by Intel and AMD processor offerings, so the selection process is aided by that distinction. If you strive for a common server for the Enterprise Linux builds and the Windows server space, a uniform processor brand platform is a must. 

Choose wisely

If you embark on the single server across software groups, be sure to get all members on board and mutually agree on a server specification. If the needs are different, it may be more likely to work in terms of base server and customize up as required. This can save the incremental cost of a small number of under-utilized servers in a mixed environment. 

HP earns EAL 4 certification on Linux

Today HP execs wrote to tell us that their company has been awarded a top international Linux security certification. The certification, called the Evaluation Assurance Level 4 (EAL4+) Common Criteria security certification for Red Hat Enterprise Linux 5, applies to HP servers, workstations and notebooks.

In June, if you’ll remember, IBM was awarded the same EAL4+ certification for RHEL5 running on IBM System x, System p, System z, and BladeCenter servers.

This cert is part of the Common Criteria Evaluation and Validation Scheme (CCEVS), an internationally recognized standard used by governments and businesses worldwide to determine the level of security and assurance of IT products. CCEVS, undertaken by the National Information Assurance Partnership (NIAP), is part of a collaboration between the National Institute of Standards and Technology and the National Security Agency.

HP has been awarded EAL4+, the highest level of assurance for an unmodified, commercial operating system, for Labeled Security Protection Profile (LSPP), Controlled Access Protection Profile, and Role-Based Access Control Protection Profile for Red Hat Enterprise Linux 5 on HP Integrity, ProLiant and BladeSystem platforms as well as select workstations and desktops.

According to HP, the company worked with Red Hat and the Linux community to develop the features required for the EAL4+ certification. This included contributions to help customers integrate a Linux system into a mixed network with other trusted operating systems. As part of HP’s Secure Advantage product portfolio, this certified product offering helps companies protect data and resources across their entire IT infrastructure to achieve better business outcomes.

The LSPP profile enables HP and its partners to build applications with multiple levels of security. This capability allows government agencies and commercial businesses to collaborate securely by sharing applications with different security clearances on a single system and still have assurance that the system will enable only authorized access at the appropriate level.