Download ND State Architecture Overview

ATTACHMENT 1 STATE OF ND TECHNICAL ARCHITECTURE OVERVIEW
North Dakota State Government Technical Environment
In overview North Dakota's technical environment consists of Windows based desktops and a variety of
server platforms connected via an IP based network. Desktop support is provided by the individual
state agencies with the Information Technology Department (ITD) providing the statewide network and
support for the majority of the server platforms. Brief descriptions of each component are provided
below.
Desktop Environment
The de facto desktop standard is an Intel platform running some variety of Windows. Windows 7 is the
most common with some Windows XP still existing.
Network Services
ITD provides both local and wide area network services for North Dakota Government. All LAN
segments are switched Ethernet networks. The Fargo, Minot, Grand Forks and Bismarck metropolitan
area networks are gigabit fiber based while the majority of WAN connectivity is obtained via both ATM
and Ethernet transport services. The core of the WAN consists of a 10 Gigabit Ethernet ring. End User
support is provided through a central help desk; this service is available 24x7x365.
Directory Services/Authentication
ITD provides a single Active Directory network domain that provides agencies with a single network
sign on. All agency computers utilizing the State’s Active Directory are members of the state forest,
NDGOV. Each agency comprises an Organizational Unit (OU) within NDGOV. ITD provides the
necessary Domain controllers and Global Catalog servers for authentication services.
In addition, ITD provides an LDAP directory service for public facing applications using the IBM Tivoli
Directory Server. IBM Tivoli Directory Server LDAP directory service is used to provide authentication
and authorization for web applications. This LDAP directory is also used to provide authentication for
the ITD managed FTP server.
Multi-factor Authentication
Multi-Factor Authentication (MFA) is a simple best practice that adds an extra layer of protection on top
of user name and password. ITD’s MFA solution, Safenet, complements the State’s Virtual Private
Network (VPN) offerings. The solution provides increased security for NDGOV account settings and
resources. With MFA enabled, when a user signs in to their VPN client, they will be prompted for their
user name, password, and PIN (the first factor—what they know), as well as for an authentication code
from their Safenet MFA device (the second factor—what they have).
Hosting Services
The majority of state agencies receive hosting services from ITD. These services are hosted on the
following platforms:
1. IBM BC12 mainframe running z/OS version 1.13,
2. IBM iSeries, model P520 running OS version V6R1M1,
3. Windows servers with Microsoft mainstream support; Windows 2012 R2 Server is the preferred
operating system,
4. IBM AIX 6.x, 7.x,
5. Intel Red Hat (RHEL) 6.x, 7.x Linux.
Page 1 of 7
End User support is provided through a central help desk; this service is available 24x7x365. The IBM
BC12 mainframe provides CICS for transaction management. The standard deployment platform is a
VMware virtual environment hosting either Windows or Red Hat Linux
Database Services
The majority of state agencies receive database services from ITD. The following databases are
supported:
1. Software AG's ADABAS hosted on the IBM BC12 mainframe and Linux,
2. IBM DB2 version 9.1 hosted on the IBM BC12 mainframe with plans to upgrade to version 10 in
2016,
3. Oracle 11gR2 and 12c, and
4. Microsoft SQL Server 2008, 2008R2, 2012, and 2014.
ITD provides both test and production database shared environments.
Web Environment
ITD provides both clustered .NET and J2EE web application environments; test and production
environments are provided. The J2EE platform consists of IBM WebSphere version 8.x running on Red
Hat Enterprise Linux. Load testing of any web application is required prior to production deployment
and is highly recommended during application development. ITD uses HP LoadRunner software to
perform load testing.
EDMS Environment
The majority of state agencies using EDMS technologies receive their services from ITD. These
services are provided by the following platforms:
1.
2.
3.
4.
5.
FileNet P8 version 5.2.1 Content Manager
Eforms
IBM Content Collector
Cardiff LiquidOffice
ILINX Capture
Data Backup
Backup services are provided by IBM's Tivoli Storage Manager.
Email Environment
The State of North Dakota Email Environment consists of two platforms:
1. Microsoft Exchange 2010
2. POP3 server
There are approximately 10,500 users on Exchange. The POP3 server is a Linux (Sendmail) based
server with approximately 2,000 users.
Geographic Information System (GIS) Environment
ITD provides a database and web server infrastructure for hosting GIS data and serving web services;
this infrastructure is known as the GIS Hub. Data are stored on ITD's SAN and file-based storage
systems. Oracle-based geodatabases are hosted on dedicated Linux servers. Esri’s ArcGIS Server and
Safe Software's FME Server are hosted on dedicated Windows servers. ArcGIS Online is used by a
number of agencies with much of the data and services originating from the GIS Hub.
Page 2 of 7
Business Intelligence Environment
The State supports Cognos 10.2.1 and Microsoft SSRS as business intelligence tool sets. State
agencies also use Crystal Reports, SAS and SPSS. The State has Oracle Enterprise and SQL Server
platforms which it supports and implements data warehouse initiatives.
Master Data Management
The State utilizes IBM’s Initiate Master Data Service.
NORTH DAKOTA UNIVERSITY SYSTEM (NDUS) TECHNICAL ARCHITECTURE OVERVIEW
Core Technology Services (CTS) technical environment consists of Windows and MacBook-based
desktop systems and a variety of server platforms connected via an IP-based network. Desktop support
is provided by CTS. Beginning in April 2016, the System Office desktop environment and support
(Bismarck locations) will be provided by the state’s Information Technology Department. Brief
descriptions of components are provided below.
Individual NDUS institutions support a wide variety of user technologies and we expect the provided
solution to support a broad spectrum of devices and platforms.
Workstation Environment
The NDUS CTS/System Office desktop environment is comprised of Windows and MacBook-based
desktop systems. Supported operating systems include Windows 7, Windows 8.1, and Windows 10, as
well a number of recent versions of Mac OS. Hardware is standardized on Lenovo and Apple. iPads are
also supported for many staff members. Users are issued two monitors, a docking station, and a spare
power adapter. Each workstation is managed using Microsoft’s System Center Configuration Manager
(for Mac and PC). The standard antivirus software is Microsoft’s System Center Endpoint Protection
along with Malwarebytes for additional protection. All user workstations are required to have disk
encryption. A local backup strategy is also provided for the desktop systems.
Email/Calendar Environment
The NDUS CTS/System Office Email/Calendar Environment is Microsoft’s Office 365 cloud service.
Users can access their email and calendar from their laptop using the Outlook client (2013 or 2016 for
Windows, 2016 for Mac OS). Outlook Web Access (OWA) clients are also available for mobile devices
such as tablets and smartphones or users can access their email and calendar through the web
interface. Office 365 includes instant messaging and collaboration with Skype for Business, OneDrive
for Business, and SharePoint.
Hosting Services
CTS supports 700 servers with approximately 550 virtualized instances. Systems are x86 hardware
running Windows and Linux or Hyper-V and VMware hypervisors. All systems are located in 45u racks
with dual 3-phase monitored power outlet units. Ninety-nine percent of the systems have redundant
power and network connections.
In addition, the datacenter hosts a Linux-based high-performance computing cluster utilizing InfiniBand
and its own highly available storage system.
Database Services
CTS supports the following database platforms:
1. Oracle 11g and 12c Enterprise running several single instances and several Windows Server
Cluster instances.
2. Microsoft SQL Server Enterprise and Standard Versions of 2008R2, 2012 and 2014 hosted on
single database instances and Windows Server clusters.
Page 3 of 7
3. MySQL 5.6 Community and Enterprise versions hosted on Windows or LINUX single database
instances and Windows Server Clusters.
CTS provides multiple development, test, and production database shared environments.
Storage Services
Storage is provided with two SANS. One is a 300 TB SAN with six controller nodes supporting 16 GB
fiber channel and 10 GB iSCSI connections. The other is a 48 TB SAN with two controller nodes
supporting 8 GB fiber channel connections. 48-port switches with 8 GB transceiver modules support
fiber channel connectivity.
Data Backup
IBM Tivoli Storage Manager provides backup services. It runs on an IBM hardware and an IBM TS3500
tape library that consists of eight tape drives and currently holds up to 1031 700 GB tapes. Additional
tapes are stored off-site.
Network Services
CTS provides and supports the data center network with Cisco Nexus switches and Palo Alto firewalls.
Link speeds are a mix of 1 GB and 10 GB switched Ethernet interfaces, configured in a high availability
design. North Dakota Information Technology Department provides the wide area network services.
The core of the WAN consists of a 10 GB Ethernet ring, with a point of presence located within the
datacenter. A central help desk supports end-users; this service is available 24x365.
Datacenter Monitoring
The datacenter is monitored utilizing several products. Paessler PRTG is the main monitoring system.
SolarWinds ORION is used to monitor network systems. The Tivoli Productivity Center is used to
manage and monitor the Tivoli Backup System and IBM SAN. Dell Enterprise Manager is used for the
Dell SAN. The Enterprise IBM Network Advisor is used for the fiber channel switches. Microsoft System
Center Operations Manager, Configuration Manager, Orchestrator and Virtual Machine Manager
monitor and manage systems such as Hyper-V as well as other applications. VMware vCenter is
currently used for vSphere monitoring and management.
Directory Services/Identity & Access Management
CTS provides three Active Directory network domains that provides NDUS users with a single network
credential. All computers utilizing the NDUS Active Directory are members of the NDUS forest. NDUS
has a single flat Organizational Unit (OU). CTS provides the necessary domain controllers and Global
Catalog servers for authentication services.
IAM is a centralized identity management service for user accounts and password synchronization. IAM
helps simplify and standardize user accounts and passwords by managing one user ID and password.
IAM can be used to provide sign-on capability with University resources and passwords.
Web Environment
Web environments vary and are dependent on application types, system requirements, and the needs
of the CTS user community. While flexibility and changing needs can require rapid change, the primary
technologies currently used are Red Hat Enterprise Linux, Apache, MySQL, ColdFusion and PHP.
Windows IIS and MSSQL environments are also available with limited support, although used to a
lesser degree. Future environments will include support for Oracle Java EE and Tomcat.
EDMS Environment
Many NDUS institutions are in the process of migrating to Lexmark ImageNow document management.
Page 4 of 7
Miscellaneous Supported Systems
1.
2.
3.
4.
5.
6.
PeopleSoft Campus Solutions, HRMS and Financials
Oracle Identity Management System
Blackboard Learning Management System
Multiple SMTP servers
LISTSERV email distribution system
SharePoint 2013
Pearson eCollege (Pearson Learning Solution)
Pearson eCollege is a hosted solution (cloud based SaaS) and provides a 24x7 technical support for
students, faculty, and administrators.
Features include:
1. Enterprise reporting
2. Custom reporting
3. Blackboard Collaborate
4. Intuitive User Interface
5. Attendance Tool
6. Advanced Scheduling Capabilities for course dates
7. Collaborative learning tools
8. Native phone and tablet apps
9. REVEL dynamic learning environment
10. ProctorU
11. Rubric-based grading
Currently used integrations included:
1.
2.
3.
4.
5.
6.
7.
8.
9.
TurnItIn
Campus Pack (Cengage)
Tegrity
ExamGuard (Respondus)
Class Live
Fully integrated MyLabs (Pearson)
Learning Outcome Management
Smarthinking
Atomic Learning
Page 5 of 7
Moodle – version 2.8.5 (please note – additional modules are available to campuses; however, not
active today.)
LTI Integrations
LTI and External Service Integration
McGraw Hill AAIRS (Tegrity)
Moodle mobile web service
OUBlog import
Smarthinking
TaskStream
Atomic Learning
NetTutor
ALEKS
Non-Starter report (NDUS tool)
LIS Gateway enrollment
ProctorU
NewSchool Learning customized themes
NDUS campus library search tool
Activity Modules
Built-in Activity Modules (Core Moodle)
Assignment
Attendance
Book
Certificate
Chat
Checklist
Choice
Database
Feedback
Folder
Forum
Glossary
IMS content package
Journal
Label
Lesson
Lightbox Gallery
External tool
OUT blog
OU wiki
Page
Questionnaire
Quiz
File
SCORM pakage
Survey
URL
Wiki
Workshop
Third Party Activity Modules
Blackboard Collaborate
Flash Card Set
HotPot
Blackboard IM
Respondus 4.0 Web Services (Lockdown Browser)
Turnitin Assignment 2
Blocks
Built-in Blocks (Core Moodle)
Activities
Admin bookmarks
Administration
Appointments
Blog menu
Blog tags
Calendar
Census Report
Checklist
Comments
Community finder
Courses
Feedback
Flickr
HTML
Latest news
Logged in user
Login
Main menu
Mentees
Messages
My latest badges
Page 6 of 7
Online users
OpenID
People
Quiz results
Random glossary entry
Recent activity
Recent blog entries
Remote RSS feeds
Upcoming events
Youtube
Search forums
Course completion status
Course overview
Course/site summary
My private files
Navigation
Network servers
Third Party Blocks
Blackboard Collaborate
Blackboard IM
iMail
Mass action block
Password Status Block
Remote Learner-BackTrack
Recovery
Remote Learner Update
Manager
Remote Learner Data Hub
Respondus LockDown
Browser
Sharing Cart
Tegrity
Turnitin block
Page 7 of 7
Section links
Self completion
Social activities
Tags