Tenant Managed Services (TMS)

Tenant Managed Services (TMS) is the Statewide Data Center’s co-location service offering. TMS allows customers the ability to choose which features are needed to best meet specific departmental needs while reducing statewide data center floor space and greenhouse emissions.

Two models of co-location service are offered:



Basic

TMS Basic (formerly known as COEMS) provides secure space in a state-operated, Tier III equivalent data center, while still allowing customers to maintain full control over their computing environment. Tenants also provide and manage their own security components (e.g. Firewall, IPS, etc).



Premium

TMS Premium (formerly known as FDC) offers an additional layer of service. In addition to providing secure space, it also provides a managed local area network (LAN) and storage area network (SAN).

TMS Service Model Comparison

FEATURE/COMPONENT BASIC PREMIUM

Locking Cabinet x x

Redundant 30 amp power whips x x

Service Desk and Operations Center x x

Cabinet Space x x

Cooling x x

Managed Firewalls x

Copper/fiber cables
x

Tenant environment cable connectivity x

Managed LAN x

Managed SAN fabric x

FEATURE/COMPONENT	BASIC	PREMIUM
Locking Cabinet	x	x
Redundant 30 amp power whips	x	x
Service Desk and Operations Center	x	x
Cabinet Space	x	x
Cooling	x	x
Managed Firewalls		x
Copper/fiber cables		x
Tenant environment cable connectivity		x
Managed LAN		x
Managed SAN fabric		x

Premium and Basic

Standard Cabinet

TMS-Site	TMS-Basic	TMS-Premium
Rancho Cordova	24”W x 48”D x 78”H 30”W x 48”D x 78”H *	30”W x 42”D x 78”H
Vacaville	30”W x 42”D x 78”H	N/A

* Subject to availability

Tenant server cabinet requirements that exceed the Standard Cabinet specifications will be addressed on a case-by-case basis and may incur additional costs. Charges will be based on the current CDT Rate Schedule.

The Basic Model comes with 42 (RU) of available space while the Premium Model comes with 36 (RU) of available space.
Included in the cabinets are two – 30 amp intelligent power strips with a combination of C13 & C19 power receptacles.
Climate controlled environment
Dual Intelligent Power Strips
Please ensure all equipment power supplies support 208 volt AC and have power cords with C13 or C19 plugs to maximize the power efficiency of your equipment and comply with our data center design standard.

Only Available in Premium

Managed LAN Service is offered to TMS Premium Customers

Includes redundant Ethernet connections, up to 10 GB

Managed SAN Service is offered to TMS Premium Customers

Up to 18 Server Connections

Drop-in office space (limited)

Security

The TMS Security Standard discusses the requirements that must be adhered to for both physical facility access and data protection. The Data Classification Standard should be followed to ensure that the State Administrative Manual (SAM) section 5305.5 and the Statewide Information Management Manual (SIMM) section 5305-A are adhered to.

The table below is intended to provide clarity around roles and responsibilities between CDT and Tenants for each TMS Model.

Role	Responsibility	Basic	Premium
Facilities	Physical Site Access & Security	CDT	CDT
	Computer Room Space	CDT	CDT
	Electrical	CDT	CDT
	HVAC	CDT	CDT
	Equipment Delivery Loading Dock	Tenant/CDT	Tenant/CDT
	Drop-in Space for Customers	N/A	CDT
Computing Software (Servers)	OS	Tenant	Tenant
	OS Patching	Tenant	Tenant
	Application	Tenant	Tenant
	Application Layer Security	Tenant	Tenant
	Application Maintenance	Tenant	Tenant
	Application Support	Tenant	Tenant
	Cabinets	Tenant/CDT	Tenant/CDT
Storage	Device(s)	Tenant	Tenant
	Connectivity to Servers	Tenant	CDT
	Disk Space Management	Tenant	Tenant
	Backup and Recovery	Tenant	Tenant
	Capacity Monitoring	Tenant	Tenant
	Maintenance Contracts	Tenant	Tenant
Network Infrastructure	Router Installation and Configuration	Tenant	CDT
	Firewall	Tenant	CDT
	Firewall Context Configuration & Management	Tenant	Tenant
	Switch Installation & Configuration	Tenant	CDT
	Cabling Installation & Configuration	Tenant/CDT	Tenant/CDT
IT Security Management	Configure System Security Tools	Tenant	Tenant
	Monitor System Security	Tenant	Tenant
	Ensure System Security	Tenant	Tenant
	Ensure System Security Response	Tenant	Tenant
	Manage System Authentication	Tenant	Tenant
	Physical Security	CDT	CDT
Resource Administration	Monitor Resource Performance	Tenant	Tenant
	Fix Resource Performance	Tenant	Tenant
	Monitor Resource Capacity	Tenant	Tenant
	Add Resource Capacity	Tenant	Tenant
Administration	Hardware Procurement	Tenant	Tenant
	System Software Procurement	Tenant	Tenant
	Maintenance Contract Management	Tenant	Tenant

What is the difference between Tenant Managed Services (TMS) Basic and Premium Models?
Basic services include:

Secure space in a Tier III data center.
Full control of the computing environment.
Customer provided and managed security components.

Premium services include:

All basic services.
Security tools/components are provided by CDT.
Customers manage security tools/components
Managed local area network (LAN).
Managed storage area network (SAN).

What are the hardware and cabinet requirements?

Customer hardware must be assessed prior to installation by CDT.
Considerations such as excessive power requirements and cooling needs are reviewed during the assessment process.
Hardware must physically fit/mount into the CDT provided TMS Cabinets.
Customers may request to provide their own cabinets and will be considered on a case-by-case basis.
After installation, CDT will provide a brief inspection to ensure that equipment is properly racked, cables are bundled, and power strips are plugged in redundantly.

How do customers access their TMS environment?

TMS customers have physical access to their cabinets 24×7 at Rancho Cordova.
The customer authorizes cabinet access by completing a Tenant Contact List.
Rancho Cordova Site: Customers must submit a TMS Raised Floor Activity Request through ServiceNow, to access the Rancho Cordova site.
For non-urgent/planned visits, we request at least 48 business hours advance notice prior to the visit.
For emergency or break-fix issues, a customer should open a Case via ServiceNow or by calling the Service Desk at (916) 464-4311.
Visitors not listed on the Tenant Contact List will require approval by a Customer’s Authorized Representative prior to being granted access to the Computer Room.
Vacaville Site: Customers must submit a TMS Raised Floor Activity Request through ServiceNow, to access the Vacaville site.
For non-urgent/planned visits, we request at least 48 business hours advance notice prior to the visit.
We request 72 business hours advance notice if you need access to the loading dock.
Visitors not listed on the Tenant Contact List will require approval by a Customer’s Authorized Representative prior to being granted access to the Computer Room.
Customers visiting the Vacaville site must be escorted by a CDT employee.
Authorized (badged) vendors may access the Vacaville site without an escort.
Authorized (badged) vendors may not act as an escort for TMS customers or other vendors.
Off-hour visits to the Vacaville site may incur additional fees to compensate for overtime costs.

What assistance will CDT provide in moving equipment?
CDT staff will coordinate access through the facility and loading dock.

Are TMS customers responsible for providing movers?
The customer is responsible for moving and installing/racking their equipment into the TMS Basic or Premium environment.

The customer is responsible for physically moving their equipment from CDT loading dock to the final destination within the TMS raised floor or hire a vendor to provide moving services.
CDT has some moving equipment available to the customer with advance notice. All packing materials, cardboard, Styrofoam, and pallets must be removed by the customer.

Who is responsible for server software installation?
The customer.

What are the advantages of 208-voltage power cords?

208-volt power cords draw less current than the standard 110-volt power cord.
Less current mean less heat; therefore, your device will run cooler and will help minimize the risk of equipment failure.
The lower power consumption also helps contribute to the overall power efficiency of the data center.

Can customer deliveries be made to the Rancho Cordova site?

Yes, the customer is responsible for all deliveries and must be present (or a designee) to sign for and accept all shipments.
All delivery attempts made to the Rancho Cordova site without a representative present will be refused and sent back with the shipper at the customer’s expense.
Delivery notifications must be submitted through ServiceNow.
CDT is unable to sign for or store customer-owned packages or assets.

How do customers connect to their TMS Basic environment?
Option 1: Customers can order their own circuits via CALNET, from their site to the CDT data center. CDT will extend the circuit from the MPOE to the TMS rack, for a one-time fee.
Option 2: Customers can request bandwidth (aka a ‘handoff’) to the Internet and other CDT resources to their TMS rack at the following speeds:

56 kb	10 Mbps	1 Gbps
T-1	50 Mbps	5 Gbps
DS3	100 Mbps	10 Gbps

Each connection will incur both a one-time and monthly fee, per the CDT Rate Schedule.

Will TMS Premium customers have their own set of IP Addresses?

Customers can use an allocation of their own network IP addressing, use some allocation from the TMS Premium globally routable allocation, or get an allocation from CDT.
Customers can use either globally routable or private IP addressing in their environment.
TMS Premium was designed in such a way that there is no issue with Customers overlapping IP address space.

What appliances will be acceptable to deploy within TMS Premium?

Computing hardware is the ideal candidate for TMS Premium cabinets.
All appliances must be rack mountable into the CDT provided server cabinets; however, all proposed devices will be reviewed on a case-by-case basis.

What rights do TMS Premium customers have to their firewall in the virtual security context?

Customers have full manageability of their firewall security context.
Customers control all rule sets, logging, and authentication to their firewall security context.

How many VLANs are allowed per TMS Premium server cabinet?
Up to 10 VLANs.

Does CDT provide a Network Time Protocol (NTP) service in TMS Premium?
Yes.

Is the Statewide Data Center Service Organization Control (SOC) 2 certified?
The CDT Data Center is not SOC 2 certified.

Is the Data Center suitable for Protected Health Information (PHI) and Personally Identifiable Information (PII)?
Yes, for CDT-hosted platforms. For TMS, CDT can only attest the physical environment is suitable. In TMS the IT components are owned, configured, and managed by the customer (except for the service’s perimeter firewall).

Is there a contact at CDT for TMS Support?
Support and questions can be submitted at CIOTMSSupportGroup@state.ca.gov.

What are the costs of the TMS service offering?
Rates vary based on subscribed services. Rate information can be found on this page under the Rates tab.

The rate schedule represents standard CDT services. If a Customer requires technology solutions that are not part of the standard, CDT will review the Customer’s request and provide customized pricing as necessary.

The below tables can be sorted by Service Code, Service Description, Unit of Measurement, Rate, and Group.

TMS Basic and Premium

Service Description	Product Name	Unit of Measurement	Rate	Service Code
Basic Tenant Managed Services Cabinet Rancho Cordova	Tenant Managed Services	Monthly/Per Cabinet	$1,432.00	F114
Basic Tenant Managed Services Cabinet Vacaville	Tenant Managed Services	Monthly/Per Cabinet	$1,990.00	F115
Power Exceeding 3.5 kW (Basic Cabinet)	Tenant Managed Services	Monthly/Per Whip	$98.00	F116
Premium Tenant Managed Services Cabinet Rancho Cordova	Tenant Managed Services	Monthly/Per Cabinet	$1,432.00	F301
Power Exceeding 3.5 kW (Premium Cabinet)	Tenant Managed Services	Monthly/Per Whip	$98.00	F305
Expedite Fee	Miscellaneous	One-Time/Per Request	$515.00	X1xx

TMS Premium Options

Service Description	Product Name	Unit of Measurement	Rate	Service Code
Tenant Managed Services Managed LAN	Tenant Managed Services	Monthly/Per Cabinet	$1,937.00	F302
Tenant Managed Services SAN Fabric	Tenant Managed Services	Monthly/Per Cabinet	$711.00	F303
Tenant Managed Services Additional 10 GIG Connection	Tenant Managed Services	Monthly/Per Connection	$204.00	F312

TMS Basic Network Connectivity Options

Service Description	Service Identifier	Product Name	Unit of Measurement	Rate	Service Code
TMS/Foreign Cable Install	Network - Other Services	Network Services	One-Time/Per Install	$350.00	N607
Site to Site VPN Set-up	Connectivity - Miscellaneous	Network Services	One-Time/Per Install	$650.00	N608
CGEN Connection Bandwidth Change - Foreign/TMS-B	Network - Other Services	Network Services	One-Time/Per Change	$350.00	N619
56KB Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$123.00	N732
T1 Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$205.00	N733
DS3 Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$328.00	N734
10 Mbps Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$451.00	N735
100 Mbps Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$1,148.00	N736
1000 Mbps Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$2,050.00	N747
50 Mbps Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$656.00	N775
5G Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$2,870.00	N776
10G Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$3,895.00	N777
500 Mbps Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$1,476.00	N779
750 Mbps Foreign/TMS Basic Connectivity	Foreign/Tenant Managed Services Basic Connectivity	Network Services	Monthly/Per Connection	$1,804.00	N784

Other Network Connectivity Options

Service Description	Service Identifier	Product Name	Unit of Measurement	Rate	Service Code	Notes
STaaS/Foreign Cable Install - TMS Basic		Storage as a Service (STaaS) - On Premises	One-Time/Per Install	$350.00	K617	A 4.58% VHSS Fee will be added.
STaaS/Foreign Cable Install - TMS Premium		Storage as a Service (STaaS) - On Premises	One-Time/Per Install	$350.00	K618	A 4.58% VHSS Fee will be added.
Equipment Install	Network - Other Services	Network Services	One-Time/Per Install	$1,500.00	N615
5 Gbps DC-DC Fiber Connection	Connectivity - Miscellaneous	Network Services	Monthly/Per Connection	$2,400.00	N782
10 Gbps DC-DC Fiber Connection	Connectivity - Miscellaneous	Network Services	Monthly/Per Connection	$3,200.00	N783
100 Mbps DC-DC Fiber Connection	Connectivity - Miscellaneous	Network Services	Monthly/Per Connection	$1,000.00	N785
2GB DC-DC Fiber Connection	Connectivity - Miscellaneous	Network Services	Monthly/Per Connection	$2,000.00	N787

Subscriptions to this service are available.

The Customer contacts their Account Lead regarding setting up Tenant Managed Service (TMS).
The Customer fills out the Equipment Survey (Basic or Premium).
The Customer submits a Case/Request to CDT for an assessment and cost proposal.
- The Equipment Survey Form must be attached.
The TMS Support Group processes and reviews the Case/Request.
The TMS Support Group attaches a cost estimate to the Customer’s Case/Request.
The Customer submits a second Case/Request to establish a commitment to the service.

Service Request Name	Link
Add, Change, Delete Basic or Premium or Premium Billable TMS Cabinets, power and connectivity, etc.	Order Tenant Managed Services
Access to the Rancho Cordova Facility	Order Rancho Cordova Access
Access to the Vacaville Facility	Order Vacaville Access
Installation or Removal of Hardware at the Rancho Cordova OR Vacaville Facility. Note: 10-days’ notice, as well as an updated Tenant Equipment Survey and Cable Schema (for TMS-P) must be given to CDT prior to installation of new equipment.	Order Installation/Removal Access
Non-Billable Support * Add VLAN (Premium only) * Update Cable Schema (Premium only) * Activate ports (Premium only) * Submit a Storage zoning request (Premium only) * Power Consumption Report (Basic or Premium) * Update Tenant Contact List (Basic or Premium)	Order Non-Billable Support
Billable Support * Power upgrades * Add additional cabinets * Circuit extensions * Network Connectivity Requests (other than DC to DC fiber connections) * Expedite Fee	Order Billable Support
Tenant Guide, TMS Fact Sheet, or TMS Access Procedure	Order Documentation