Tenant Managed Services (TMS)

Description

Basic

TMS Basic (formerly known as COEMS) provides secure space in a state-operated, Tier III equivalent data center, while still allowing customers to maintain full control over their computing environment. Tenants also provide and manage their own security components (e.g. Firewall, IPS, etc).

Premium

TMS Premium (formerly known as FDC) offers an additional layer of service. In addition to providing secure space, it also provides a managed local area network (LAN) and storage area network (SAN).

Tenant Managed Services - Colocation.

TMS Model Comparison

FEATURE/COMPONENTBASICPREMIUM
Locking Cabinetxx
Redundant 30 amp power whipsxx
Service Desk and Operations Centerxx
Cabinet Spacexx
Coolingxx
Managed Firewallsx
Copper/fiber cables
x
Tenant environment cable connectivityx
Managed LAN x
Managed SAN fabric x

Standard Components

Premium and Basic

Standard Cabinet

TMS-SiteTMS-BasicTMS-Premium
Rancho Cordova24”W x 48”D x 78”H 30”W x 48”D x 78”H *30”W x 42”D x 78”H
Vacaville30”W x 42”D x 78”HN/A

* Subject to availability

Tenant server cabinet requirements that exceed the Standard Cabinet specifications will be addressed on a case-by-case basis and may incur additional costs. Charges will be based on the current CDT Rate Schedule.

  • The Basic Model comes with 42 (RU) of available space while the Premium Model comes with 36 (RU) of available space.
  • Included in the cabinets are two – 30 amp intelligent power strips with a combination of C13 & C19 power receptacles.
  • Climate controlled environment
  • Dual Intelligent Power Strips
  • Please ensure all equipment power supplies support 208 volt AC and have power cords with C13 or C19 plugs to maximize the power efficiency of your equipment and comply with our data center design standard.

 

Only Available in Premium

Managed LAN Service is offered to TMS Premium Customers

  • Includes redundant Ethernet connections, up to 10 GB

Managed SAN Service is offered to TMS Premium Customers

  • Up to 18 Server Connections

Drop-in office space (limited)

Security

The TMS Security Standard discusses the requirements that must be adhered to for both physical facility access and data protection. The Data Classification Standard should be followed to ensure that the State Administrative Manual (SAM) section 5305.5 and the Statewide Information Management Manual (SIMM) section 5305-A are adhered to.

Note: Customers/Agencies cannot share cabinets.

Roles & Responsibilities

The table below is intended to provide clarity around roles and responsibilities between CDT and Tenants for each TMS Model.

RoleResponsibilityBasicPremium
FacilitiesPhysical Site Access & SecurityCDTCDT
Computer Room SpaceCDTCDT
ElectricalCDTCDT
HVACCDTCDT
Equipment Delivery Loading DockTenant/CDTTenant/CDT
Drop-in Space for CustomersN/ACDT
Computing Software (Servers)OSTenantTenant
OS PatchingTenantTenant
ApplicationTenantTenant
Application Layer SecurityTenantTenant
Application MaintenanceTenantTenant
Application SupportTenantTenant
CabinetsTenant/CDTTenant/CDT
StorageDevice(s)TenantTenant
Connectivity to ServersTenantCDT
Disk Space ManagementTenantTenant
Backup and RecoveryTenantTenant
Capacity MonitoringTenantTenant
Maintenance ContractsTenantTenant
Network InfrastructureRouter Installation and ConfigurationTenantCDT
Firewall TenantCDT
Firewall Context Configuration & ManagementTenantTenant
Switch Installation & ConfigurationTenantCDT
Cabling Installation & ConfigurationTenant/CDTTenant/CDT
IT Security ManagementConfigure System Security ToolsTenantTenant
Monitor System SecurityTenantTenant
Ensure System SecurityTenantTenant
Ensure System Security ResponseTenantTenant
Manage System AuthenticationTenantTenant
Physical SecurityCDTCDT
Resource AdministrationMonitor Resource PerformanceTenantTenant
Fix Resource PerformanceTenantTenant
Monitor Resource CapacityTenantTenant
Add Resource CapacityTenantTenant
AdministrationHardware ProcurementTenantTenant
System Software ProcurementTenantTenant
Maintenance Contract ManagementTenantTenant

Rates

The rate schedule represents standard CDT services. If a Customer requires technology solutions that are not part of the standard, CDT will review the Customer’s request and provide customized pricing as necessary.

The below tables can be sorted by Service Code, Service Description, Unit of Measurement, Rate, and Group.

TMS Basic and Premium

Service DescriptionService IdentifierProduct NameUnit of MeasurementRateService CodeNotes
Basic Tenant Managed Services Cabinet Rancho CordovaTenant Managed ServicesMonthly/Per Cabinet$1,504.00F114
Basic Tenant Managed Services Cabinet VacavilleTenant Managed ServicesMonthly/Per Cabinet$2,090.00F115
Power Exceeding 3.5 kW (Basic Cabinet)Tenant Managed ServicesMonthly/Per Whip$103.00F116
Premium Tenant Managed Services Cabinet Rancho CordovaTenant Managed ServicesMonthly/Per Cabinet$1,504.00F301
Power Exceeding 3.5 kW (Premium Cabinet)Tenant Managed ServicesMonthly/Per Whip$103.00F305
Expedite FeeMiscellaneousOne-Time/Per Request$541.00X1xx

TMS Premium Options

Service DescriptionService IdentifierProduct NameUnit of MeasurementRateService CodeNotes
Tenant Managed Services Managed LANTenant Managed ServicesMonthly/Per Cabinet$2,034.00F302
Tenant Managed Services SAN FabricTenant Managed ServicesMonthly/Per Cabinet$747.00F303
Tenant Managed Services Additional 10 GIG ConnectionTenant Managed ServicesMonthly/Per Connection$214.00F312

TMS Basic Network Connectivity Options

Service DescriptionService IdentifierProduct NameUnit of MeasurementRateService CodeNotes
TMS/Foreign Cable InstallNetwork - Other ServicesNetwork ServicesOne-Time/Per Install$368.00N607
Site to Site VPN Set-upConnectivity - MiscellaneousNetwork ServicesOne-Time/Per Install$758.00N608
CGEN Connection Bandwidth Change - Foreign/TMS-BNetwork - Other ServicesNetwork ServicesOne-Time/Per Change$368.00N619
56KB Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$129.00N732
T1 Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$215.00N733
DS3 Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$344.00N734
10 Mbps Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$474.00N735
100 Mbps Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$1,205.00N736
1000 Mbps Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$2,153.00N747
50 Mbps Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$689.00N775
5G Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$3,014.00N776
10G Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$4,090.00N777
500 Mbps Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$1,550.00N779
750 Mbps Foreign/TMS Basic ConnectivityForeign/Tenant Managed Services Basic ConnectivityNetwork ServicesMonthly/Per Connection$1,894.00N784

Other Network Connectivity Options

Service DescriptionService IdentifierProduct NameUnit of MeasurementRateService CodeNotes
STaaS/Foreign Cable Install - TMS BasicStorage as a Service (STaaS) - On PremisesOne-Time/Per Install$368.00K617
STaaS/Foreign Cable Install - TMS PremiumStorage as a Service (STaaS) - On PremisesOne-Time/Per Install$368.00K618
Equipment InstallNetwork - Other ServicesNetwork ServicesOne-Time/Per Install$1,575.00N615
5 Gbps DC-DC Fiber ConnectionConnectivity - MiscellaneousNetwork ServicesMonthly/Per Connection$2,520.00N782
10 Gbps DC-DC Fiber ConnectionConnectivity - MiscellaneousNetwork ServicesMonthly/Per Connection$3,360.00N783
100 Mbps DC-DC Fiber ConnectionConnectivity - MiscellaneousNetwork ServicesMonthly/Per Connection$1,050.00N785
2GB DC-DC Fiber ConnectionConnectivity - MiscellaneousNetwork ServicesMonthly/Per Connection$2,100.00N787

Subscriptions to this service are available.

Request Service

  1. The Customer contacts their Account Lead regarding setting up Tenant Managed Service (TMS).
  2. The Customer fills out the Tenant Equipment Survey (Basic or Premium).
  3. The Customer submits a Case/Request to CDT for an assessment and cost proposal.
    • The Tenant Equipment Survey Form must be attached.
  4. The TMS Support Group processes and reviews the Case/Request.
  5. The TMS Support Group attaches a cost estimate to the Customer’s Case/Request.
Service Request NameLink
Add, Change, Delete Basic or Premium or Premium Billable TMS
Cabinets, power and connectivity, etc.
Order Tenant Managed Services

Access to the Rancho Cordova FacilityOrder Rancho Cordova Access
Access to the Vacaville FacilityOrder Vacaville Access
Installation or Removal of Hardware at the Rancho Cordova OR Vacaville Facility.
Note: 10-days’ notice, as well as an updated Tenant Equipment Survey and Cable Schema (for TMS-P) must be given to CDT prior to installation of new equipment.
Order Installation/Removal Access
Non-Billable Support
* Add VLAN (Premium only)
* Update Cable Schema (Premium only)
* Activate ports (Premium only)
* Submit a Storage zoning request (Premium only)
* Power Consumption Report (Basic or Premium)
* Update Tenant Contact List (Basic or Premium)
Order Non-Billable Support
Billable Support
* Power upgrades
* Add additional cabinets
* Circuit extensions
* Network Connectivity Requests (other than DC to DC fiber connections)
* Expedite Fee
Order Billable Support
Tenant Guide, TMS Fact Sheet, or TMS Access ProcedureOrder Documentation

Tips and Tricks

As an effort to enhance the service request experience, please review the tips and tricks below to help avoid processing delays.

TMS Site Visit Tips & Tricks
Rancho Cordova (Gold Camp) Site Visit Requests:
  • You must submit your request at least 48 business hours in advance.
    • NOTE: Visit Start & End Times auto fill. Be sure to update to the correct date and time.

  • Less than 24-hour requests are for Emergency and/or Urgent situations. This is automatically calculated based on the submission day/time compared to the identified visit day/time. If this time is less than 24 hours, it will automatically be identified.
Vacaville Site Visit Requests:
  • A Vacaville request requires 48 business hours advance notice in order to coordinate access.
  • After-hours / Emergency requests can be submitted, and CDT will do its best to accommodate but times cannot be guaranteed.
  • Access requires CDT Resources, dependent on availability.
  • If underfloor access is required, be sure to check the box in the ServiceNow request.
  • DR Site.
Case and Visitor Log #:
  • Ensure you use the correct Case# (specific to date) when checking in with Security. This can be found in your ServiceNow case or the email response for it.
    • Each case number is only valid for a single day visit.
    • Multiple cases (1 for each day) will be required if you are requesting to be on site for multiple days.

  • Ensure you have a valid VL#:
    • This information is provided with the confirmation note/email.
    • This number is required to gain physical access to the Gold Camp site/parking lot. Not having this number will delay your access to the site.
List of Personnel and Cabinets:
  • Ensure to list all personnel needing access.
  • If personnel requesting access are not on the Authorized list for your department, a request for authorization will be sent to identified approvers from your department.
  • Ensure to list all cabinets to be accessed.
  • If it is determined that access to another cabinet is required, please be aware that it will have to be added and may slow down the process of gaining access to the computer room and your cabinets.
Loading Dock Access:
  • When creating your visit ticket, ensure you select “Yes” for loading dock if you require this access for your visit.
    • Customer deliveries to CDT must be for the day of the customer visit. Any exception requests will need to be made to your TMS representative and may be rejected.

  • Specify precise Duration Start and End, based on Delivery Start and End times (It is not the
    same as the Visit Start and End Times).
    • Note: This is needed to coordinate access.
    • Note: Reminder – Cardboard is not allowed on the computer room floor. Therefore, visitors must unpack all items before bringing them into the computer room and must take all cardboard away when leaving.

Wi-Fi Access:
  • When filling out your visit request, please select Yes for Wi-Fi access if it will be needed.
  • Please make sure you list all personnel and their emails needing Wi-Fi access.
Tenant Equipment Survey (TES):
  • Ensure to use and update the latest TES when removing and/or installing equipment. If necessary, you can request it from TMS.
  • Please be aware that if you submit an older form, TMS will provide the correct version of the form for you to use for your visit.
  • When completing the form for an installation, please be sure to populate column X as it is required for calculating that power consumption is within allowable thresholds for your cabinet. Failure to do this may cause delays or re-allocating equipment to ensure the load
    on the cabinet power is within thresholds.
Property Transaction Form:
  • Ensure that you complete the Property Transaction form when removing and/or installing equipment at CDT.
  • This is required for all equipment and is also to ensure that there is a record of equipment entering and exiting the data center.
Tenant Contact List update:
  • Submit a request via ServiceNow and ensure to use the “Tenant Contact List” service option.
  • Ensure to use the latest Contact List. If necessary, you can request it from TMS.
Cabling (TMS-P caged area):
  • For security concerns, customers are only allowed to run cables inside their cabinets and between their adjacent cabinets.
  • For cabling that will connect with other customers’ cabinets, please submit a cable request for completion by CDT staff. A one-time fee applies, unless subscribing to Managed LAN or SAN.

FAQs

1. What is the difference between Tenant Managed Services (TMS) Basic and Premium Models?

Basic services include:

  • Secure space in a Tier III data center.
  • Full control of the computing environment.
  • Customer provided and managed security components.

Premium services include:

  • All basic services.
  • Security tools/components are provided by CDT.
  • Customers manage security tools/components
  • Managed local area network (LAN).
  • Managed storage area network (SAN).

2. What are the hardware and cabinet requirements?

  • Customer hardware must be assessed prior to installation by CDT.
  • Considerations such as excessive power requirements and cooling needs are reviewed during the assessment process.
  • Hardware must physically fit/mount into the CDT provided TMS Cabinets.
  • Customers may request to provide their own cabinets and will be considered on a case-by-case basis.
  • After installation, CDT will provide a brief inspection to ensure that equipment is properly racked, cables are bundled, and power strips are plugged in redundantly.

3. Can customers share cabinets?

No

4. How do customers access their TMS environment?

  • TMS customers have physical access to their cabinets 24×7 at Rancho Cordova.
  • The customer authorizes cabinet access by completing a Tenant Contact List.
    Rancho Cordova Site: Customers must submit a TMS Raised Floor Activity Request through ServiceNow, to access the Rancho Cordova site.
  • For non-urgent/planned visits, we request at least 48 business hours advance notice prior to the visit.
    For emergency or break-fix issues, a customer should open a Case via ServiceNow or by calling the Service Desk at (916) 464-4311.
  • Visitors not listed on the Tenant Contact List will require approval by a Customer’s Authorized Representative prior to being granted access to the Computer Room.
  • Vacaville Site: Customers must submit a TMS Raised Floor Activity Request through ServiceNow, to access the Vacaville site.
  • For non-urgent/planned visits, we request at least 48 business hours advance notice prior to the visit.
  • We request 72 business hours advance notice if you need access to the loading dock.
  • Visitors not listed on the Tenant Contact List will require approval by a Customer’s Authorized Representative prior to being granted access to the Computer Room.
  • Customers visiting the Vacaville site must be escorted by a CDT employee.
  • Authorized (badged) vendors may access the Vacaville site without an escort.
  • Authorized (badged) vendors may not act as an escort for TMS customers or other vendors.
  • Off-hour visits to the Vacaville site may incur additional fees to compensate for overtime costs.
  • Off-hour visit times to the Vacaville site can be requested, but are dependent on resource availability.

5. What assistance will CDT provide in moving equipment?

CDT staff will coordinate access through the facility and loading dock.

6. Are TMS customers responsible for providing movers?

The customer is responsible for moving and installing/racking their equipment into the TMS Basic or Premium environment.

  • The customer is responsible for physically moving their equipment from CDT loading dock to the final destination within the TMS raised floor or hire a vendor to provide moving services.
  • CDT has some moving equipment available to the customer with advance notice. All packing materials, cardboard, Styrofoam, and pallets must be removed by the customer.

7. Who is responsible for server software installation?

The customer.

8. What are the advantages of 208-voltage power cords?

  • 208-volt power cords draw less current than the standard 110-volt power cord.
  • Less current mean less heat; therefore, your device will run cooler and will help minimize the risk of equipment failure.
  • The lower power consumption also helps contribute to the overall power efficiency of the data center.

9. Can customer deliveries be made to the Rancho Cordova site?

  • Yes, the customer is responsible for all deliveries and must be present (or a designee) to sign for and accept all shipments.
  • All delivery attempts made to the Rancho Cordova site without a representative present will be refused and sent back with the shipper at the customer’s expense.
  • Delivery notifications must be submitted through ServiceNow.
  • CDT is unable to sign for or store customer-owned packages or assets.

10. How do customers connect to their TMS Basic environment?

Option 1: Customers can order their own circuits via CALNET, from their site to the CDT data center. CDT will extend the circuit from the MPOE to the TMS rack, for a one-time fee.
Option 2: Customers can request bandwidth (aka a ‘handoff’) to the Internet and other CDT resources to their TMS rack at the following speeds:

56 kb10 Mbps1 Gbps
T-150 Mbps5 Gbps
DS3100 Mbps10 Gbps

Each connection will incur both a one-time and monthly fee, per the CDT Rate Schedule.

11. Will TMS Premium customers have their own set of IP Addresses?

  • Customers can use an allocation of their own network IP addressing, use some allocation from the TMS Premium globally routable allocation, or get an allocation from CDT.
  • Customers can use either globally routable or private IP addressing in their environment.
  • TMS Premium was designed in such a way that there is no issue with Customers overlapping IP address space.

12. What appliances will be acceptable to deploy within TMS Premium?

  • Computing hardware is the ideal candidate for TMS Premium cabinets.
  • All appliances must be rack mountable into the CDT provided server cabinets; however, all proposed devices will be reviewed on a case-by-case basis.

13.What rights do TMS Premium customers have to their firewall in the virtual security context?

  • Customers have full manageability of their firewall security context.
  • Customers control all rule sets, logging, and authentication to their firewall security context.

14. How many VLANs are allowed per TMS Premium server cabinet?

Up to 10 VLANs.

15. Does CDT provide a Network Time Protocol (NTP) service in TMS Premium?

Yes

16. Is the Statewide Data Center Service Organization Control (SOC) 2 certified?

The CDT Data Center is not SOC 2 certified.

17. Is the Data Center suitable for Protected Health Information (PHI) and Personally Identifiable Information (PII)?

Yes, for CDT-hosted platforms. For TMS, CDT can only attest the physical environment is suitable. In TMS, the IT components are owned, configured, and managed by the customer (except for the service’s perimeter firewall).

18. Is there a contact at CDT for TMS Support?

Support and questions can be submitted at CIODCSupportTMSSupport@state.ca.gov.

19. What are the costs of the TMS service offering?

Rates vary based on subscribed services. Rate information can be found on this page under the Rates section.