Hardware advantages and disadvantages
Contents
Overview
This documents outlines the benefits and downsides of a PINsafe Hardware installation.
For comparison of the Software Installation see Software Install advantages and disadvantages
For comparison of the VM Installation see VM advantages and disadvantages
Advantages
Supported platform for PINsafe deployment
Simple Command Management Interface (CMI) for all OS functions
Testing and support tools in CMI
Management of regular backups and off server backup storage
Appliance upgrades, patches and bug fixes
MySQL DB on appliance gives resilience and scalability
Proxy port for graphical images from the PINsafe appliance gives an additional layer of security
Management port separated from graphical image port for security
VIP on appliances allow failover on appliances on the same IP broadcast subnet
Session sharing of graphical Single Channel image between a pair of PINsafe servers on the same IP multicast network, configurable through CMI
Worldwide support of hardware through Dell Support network
Replacement hardware required in event of hardware failure
Deployment Considerations
For the Hardware Appliance Specification see Hardware Appliance Specification
High Availability
If a HA solution is required, it is better to deploy this the HA solution initially. Moving from a standalone installation to a Active/Active-DR solution requires replacing the standalone solution. It would however be possible to deploy one half of an A/A solution to compete deployment at a later date.
Virtual IP Address
This allows a Virtual IP (VIP) address to move from a failed server to a working server. This requires both PINsafe servers to be on the same subnet.
Single Channel Session Sharing
When a single Channel Image request is made, the RADIUS or Agent-XML authentication needs to be made against the same PINsafe server. To allow authentication on a second PINsafe server then session sharing needs to be enabled. This requires that the PINsafe servers are allowed to communicate using multicast.