In addition to the monitoring of the same, the IOC is charged with managing access to many IT infrastructure installations and locations. Access to physical equipment and locations is controlled primarily by physical exclusion (doors); authorized individuals carry their credentials to access these spaces with them (keys).
Some individuals without routine access will require occasional access to these spaces or equipment. For example:
| Group | Reason | Required Access |
|---|---|---|
| Physical Facilities | preventative maintenance on CRAC unit | personnel would need access to CRAC units in datacenters |
| Networking | replace card in switch in academic building networking closet | personnel would need access to the academic building |
| UNIX admin | require physical interaction with unresponsive machine to restart machine | personnel would need access to the datacenter that houses the machine in question |
| Building Services | wax floors in restricted area | personnel would need access to the restricted area |
| Third Party Contractor | upgrade fibre in TEL vault | personnel would need access to TEL and the vault |
IOC personnel will grant access to authorized individuals in one or more of three ways (in the following order of preference):
- provision door plan on PUID card,
- issue "contractor" card,
- issuance of cut keys.
Generally, the location of the requested access will dictate which method of access should be issued. Facilities that are not Transact/door swipe enabled will obviously be inaccessible with a PUID; a cut key would be required. However, a datacenter may have both a card swipe AND keyway/cut key; in this case, other aspects of the request should be considered to determine the most appropriate method of access to provide.
Checking Keys Out/enabling door plans:
Before checking keys out or granting swipe access to a PUID, IOC needs to:
- verify/establish the need for access
- verify the building/key being requested; is the location appropriate to the request?
- have them present a photo ID
- gather their
- Name
- Group
- Contact number
- For individuals with a previous history of datacenter access, grant access after verifying the above, and email DCM.
- For individuals for whom no prior authorization is found:
- Email DCM to request authorization if access is needed
- If access is requested urgently/emergently, call DCM for authorization, and send follow-up email.
- REMOTE REQUESTS TBD - call DCM for instructions.
Log their info into the IOC log and make sure they have the key. Remind them to return the key(s) within the same day unless arrangements are made otherwise. This procedure is for both cut keys and electronic (swipe) key-cards. Key cards have an additional hard copy log to fill out.
Keys need to be returned same day unless arrangements are made otherwise. 2nd shift should follow up before end of shift (preferably before 9ish so as not to call too late). Remind users to return the key(s).
...
Admins will need to check out keys to buildings on campus for access to Telcomm rooms. There are card swipe keys and physical keys.
ACT and Transact Door Plans (enabling PUID cards):
Authorized IOC personnel can provision certain access to PUID cards for some door swipe-protected facilities:
- MATH G190 (datacenter)
- MATH G109 (datacenter)
- MATH B60 (datacenter)
- TEL (building and elevator)
- TEL 210 (datacenter)
- HAAS (datacenter)
- LAMB (datacenter)
Access should be granted for the least amount of time necessary to complete the task. This should be determined in collaboration with the individual requesting access.
Adding Access to Contractor Keycards:
Login to https://www.purdue.edu/business/card/act/
Click on "Add Access Change"
Select the "Reason for Change" and "Type of change". Make sure to fill out the "Detailed reason for change" as well.
Grant access for the least amount of time necessary to complete the task.
Scroll down and click "Add Customers"
In the "Customer numbers, PUIDs, or aliases" field, type in the Generic Card Number.
Select "Add as Approved"
Under "Access Plan Name" type the building you are looking for. In this case, TEL.
Select the checkbox with the appropriate plan. In this case, TEL E01 6A-6P M-F.
Select "Save"
The next screen will give you the Access Change confirmation and number.
Record this information in the log and send a follow up email to: ITIDataCenterManagement@groups.purdue.edu
Info about utilizing ACT:
Adding a Door Privilege, Single Customer, Manual Entry
Revoking a Door Privilege to Single Customer Manually
General Help: https://www.purdue.edu/business/card/act/Help/Home
Link to Google Docs page with our key list:
https://drive.google.com/drive/u/3/my-drive
Physical Building Keys:
These are located in the TEL keybox.
The are in the box in roughly alphabetical order.
| Excel | ||
|---|---|---|
|
Card Swipe Keys:
TEL, MATH, HAAS, and LAMB swipe cards are in the file cabinet > binder
...
Business Hours 8 to 5pm: Greg 765-496-2456, Joe Wenzel 765-532-3624 , Greg 3624
After Business Hours: Joe Wenzel 765-607532-6324 then 3624, Todd Turner 765-496-8214After Business Hours
Escalation: Todd Turner 765-496-8214, Greg 765-607-6324 then Joe Wenzel 765-532-3624 If the on-calls do not answer, call Taylor Donald 317-340-9937. If Taylor doesn't answer, call Keith Duvall 219-448-8281
TEL - 596076 and 596077
MATH - 610620 and 561110
HAAS - 477925 and 477926 and 477931
LAMB - 596440 and 596441
Physical Building Keys:
These are located in the keybox.
The are in the box in roughly alphabetical order.
| Excel | ||
|---|---|---|
|
Checking Keys Out:
Before checking keys out, IOC needs to:
- verify the building/key being requested
- have them present a photo ID
- gather their
- Name
- Group
- Contact number
...
Checking Keys In:
When an individual returns the key, the return should be logged and the key should be placed in the lock-box. This procedure is for cut keys.
...