Rack Security¶

Hyperview Rack Security lets you visualize and interact with rack door access controls for security-enabled racks. It is a separately licensed set of features that are only available for Rack Security-licensed instances, and only apply to security-enabled racks. For compatibility information see Supported hardware.

Note

To confirm if you have a Rack Security license, check the License page (Settings → License, Administrator-only).

Supported hardware¶

Rack Security currently supports:

Panduit SmartZone G5 rack PDUs with Rack Access Control sensors and accessories.
TANlock 3 smart rack locks, manufactured by FATH Mechatronics GmbH and distributed by OEM partners such as Eaton.

Linking rack door sensors¶

With Rack Security, you do not need to manually link door sensors; they will be automatically linked in Hyperview when you add the connected rack PDU to the rack. To do so:

Discover the rack PDU.
Drag the rack PDU under the target rack in the Asset Hierarchy. The location of the sensor, i.e. Front or Rear is inferred from the rack PDU configuration (see Lock positioning).

The DOOR, doorElectronicLockStatus and doorMechanicalLockStatus sensors will now be listed on the rack PDU’s Sensors page (Information → Sensors). The read-only Unlink button implies that the sensor is already linked and cannot be linked or unlinked manually.

Setting control credentials¶

If a rack PDU requires access control credentials (typically to allow remote door unlock requests), an Administrator can add them from existing Discovery credentials. Only SNMP v1 and v2 credentials are supported at the moment.

Open the rack PDU’s Information → Control Operations page.
Select the intended credentials from the dropdown list and click Save.

If the intended credentials do not exist, you can add them via Manage Credentials → Add. You may need to refresh the Control Operations page for the new credentials to appear in the dropdown list.

Control credentials can also be added in bulk using a bulk action from Advanced Search, an “Assets by Type” grid or the Information -> Assets grid.

Note

As a best practice, set the Hyperview Data Collector as one of the SNMP trap receivers on each controlled device (for example, a rack PDU or TANlock lock) so that the device reports its events to Hyperview.

Configuring TANlock smart rack locks¶

TANlock 3 smart rack locks are added to Hyperview as their own assets. To configure a lock:

Discover the TANlock device.
Place the device in the rack on the appropriate side (Front or Rear).
Once the rack is configured, set the appropriate SNMP control credentials on the lock (see Setting control credentials).

Authorized users can then send unlock signals to the lock (see the “Unlocking rack doors” section below).

Lock positioning¶

How Hyperview determines which side of the rack a lock is on (Front or Rear) depends on the product:

TANlock - after the lock is discovered, you place it on the appropriate rack side (Front or Rear) yourself, as described in “Configuring TANlock smart rack locks” above.
Panduit - the smart lock is connected to a rack PDU, and that rack PDU must be placed in the rack. Hyperview detects the lock and its sensors when the rack PDU is discovered. If a lock is detected, its assignment to the Front or Rear of the rack is determined by the rack PDU configuration: a Cold Aisle assignment maps to Front, and a Hot Aisle assignment maps to Rear.

Viewing a rack’s security status¶

Rack Security sensors are visualized (“decorated”) or displayed in the following places in Hyperview:

The Rack Security widget
The Rack Elevation widget
The Rack Security layout view
The Hierarchy tree
The Sensors page of applicable rack PDUs or racks

The security status for the overall rack (and/or a rack side) is indicated using a lock icon. The lock color will change depending on the status (green = normal, red = critical, yellow = warning, gray = unknown).

The various nuances in Rack Security decorations are covered in the following subsections.

In addition, Advanced Search can be used to generate a status report of all security sensors, depending on the search parameters. This search can then be saved and shared with internal users.

In the Rack Security widget¶

You can add the Rack Security widget from a rack’s Dashboard (Dashboard → Edit → Add Widget). It only shows the security status (lock icon and text) for rack sides that have at least one security sensor.

If the rack has sensors on both sides, then the rack security status is shown for both sides.
If the rack has partial sensors on a side, then the rack security status is shown but missing sensors are marked as “Unknown”.
If the rack has no associated rack security sensors, a “No rack security sensors detected” message is displayed.

In the Rack Elevation widget¶

You can add the Rack Elevation widget from a rack’s Dashboard (Dashboard → Edit → Add Widget). It also appears on the rack’s Layout page, and wherever multi-rack views are displayed (for example, if you click on Show Selected Racks while multi-selecting racks in a location layout). The popover on the lock icon in the Rack Elevation widget shows the rack security status for sides that have at least one rack security sensor.

No rack security decorations are shown if the rack has no associated rack security sensors.
If the rack has partial sensors on a side, the rack security status is shown but missing sensors are marked as “Unknown”.

In the Rack Security view of a location layout¶

To view the security status of racks under a given location, go to the location’s Layout page → View → select “Rack Security” from the Asset Data dropdown.

The rack color (and associated text) will indicate the security status.
The layout only shows lock icons (using the appropriate color) for rack sides that have door sensors.

In the Hierarchy¶

Lock icons will appear in the Asset Hierarchy tree for racks that have security sensors.

Only security-enabled racks will have lock icons.
The lock icon color will indicate the overall security status of the rack.
Hovering on the lock icon will show a pop-up with door-specific icons and sensor details.
If the rack has sensors on both sides, then the lock icon and pop-up text will be displayed on both sides.
If the rack has partial sensors on either side, then the lock icon will reflect the rack security status but the missing sensors will be listed as “Unknown”.

Unlocking rack doors¶

Administrators and Data Center Managers can remotely unlock security-enabled rack doors using the Unlock Front Door and Unlock Rear Door commands (provided control credentials have been already set on the applicable rack PDU or lock; see Setting control credentials). The door unlock commands can be accessed from either of the following places.

From the right-click menu from the security-enabled rack in the Asset Hierarchy tree:

Or from the security-enabled rack’s Actions dropdown:

Triggering the unlock action will create a work order.

The work order can then be tracked from the work orders page.

Auditing and reporting door sensor values¶

Several built-in Hyperview features can be used to monitor, review, and report on the Rack Security status of eligible racks across your data centers.

View historical sensor data¶

The Graph button on the rack Sensors page (Information → Sensors → Graph) can be used to view graphical representations of door sensor data within a selected timeframe.

Find and export sensor data for all or some racks¶

You can filter the Advanced Search grid (Search → Advanced → Filters) to find racks with door security sensors that are on a certain rack side or have a certain value. Combining these filters can help you further refine search results. You can export records as you would from the Rack Assets By Type page.

Get notified about door sensor events¶

As long as you have read access to the rack PDU, you can watch it (Actions → Start Watching) to receive email notifications for related events.

Note

Any user can receive read-only event notifications for security-enabled rack doors. However, only Administrators and Data Center Managers can acknowledge or close them. Sensitive data such as electronic lock pin codes will appear masked in application and asset event records, email notifications, and log files.

Troubleshooting notes¶

To receive applicable trap events, make sure the Hyperview Data Collector is set as one of the device’s SNMP trap receivers, as recommended under Setting control credentials.
Due to the polling interval and other data transmission factors, the rack PDU’s Events page might not list the door unlock event until several minutes after the event has taken place.
After sending an unlock request to an electronic lock in Hyperview, it may take up to 30 seconds before the request is received by the lock.
After manually locking and unlocking a mechanical lock it may take Hyperview up to 4 minutes to detect the change. This will be improved in the future.