Abstract: A request to create a set of security policies for an application is received at a graphical user interface. Information identifying a set of source VMs, a set of destination VMs, and a set of target VMs also are received, wherein the target VMs are executing the application and are supported by (a) node(s) in a clustered virtualization environment. A set of inbound rules identifying (a) category(ies) of source VMs permitted to initiate connections with a subset of target VMs and a set of outbound rules identifying (a) category(ies) of destination VMs to which the subset of target VMs are permitted to initiate connections are received at the graphical user interface. Upon receiving a request to apply the security policies, the policies are configured based at least in part on the inbound and outbound rules and a visual representation of the security policies is presented in the graphical user interface.

Abstract: Examples of systems and methods are described for selecting firmware versions of multiple components for a distributed computing system (e.g., a cluster). Multiple selection interfaces may be presented to a user who may select at least one firmware version of at least one component. Based on the user selection(s), a service manager may evaluate firmware component dependencies and identify compatible firmware versions of other components for installation. In this manner, a set of firmware versions may be installed and/or upgraded which may be different than a current set of versions and/or a set of versions recommended in a wholly automated manner.

Abstract: Computer-aided computer system configuration techniques for adding new computing resources to an existing set of computing resources. A method embodiment commences upon identifying an existing computing system having a first set of configuration parameters. A second computing system having a second set of configuration parameters is deployed. A user interface is provided to accept user input comprising a location and protocol to access the existing computing system. Syntactical and semantic differences between the configuration parameters of the existing computing system and those of the newly added set are identified. The identified differences are analyzed to generate a parameter map that relates the existing set of configuration parameters to the second set of configuration parameters and vice-versa. Relationships that are codified in the parameter map are validated through user interactions.

Abstract: Systems and methods for aggregating policies to enforce on computing entities of a computing system. A method embodiment commences upon administrative definition of a set of named policy associations that are applicable to various types of such computing entities. The occurrence of two or more named policy associations that are associated with a particular computing entity cause the policies to be processed to detect and reconcile possible conflicts. Reconciliation is accomplished by applying a set of conflict resolution rules. The result of detection and reconciliation of conflicts is a policy aggregate that comprises two or more non-conflicting policy subcomponents. During ongoing uses of the computing entities, policy actions are taken so as to enforce the semantics of the policy subcomponents onto the computing entity.

Abstract: Examples of systems and methods are described for selecting firmware versions of multiple components for a distributed computing system (e.g., a cluster). Multiple selection interfaces may be presented to a user who may select at least one firmware version of at least one component. Based on the user selection(s), a service manager may evaluate firmware component dependencies and identify compatible firmware versions of other components for installation. In this manner, a set of firmware versions may be installed and/or upgraded which may be different than a current set of versions and/or a set of versions recommended in a wholly automated manner.

Abstract: A request to create a set of security policies for an application is received at a graphical user interface. Information identifying a set of source VMs, a set of destination VMs, and a set of target VMs also are received, wherein the target VMs are executing the application and are supported by (a) node(s) in a clustered virtualization environment. A set of inbound rules identifying (a) category(ies) of source VMs permitted to initiate connections with a subset of target VMs and a set of outbound rules identifying (a) category(ies) of destination VMs to which the subset of target VMs are permitted to initiate connections are received at the graphical user interface. Upon receiving a request to apply the security policies, the policies are configured based at least in part on the inbound and outbound rules and a visual representation of the security policies is presented in the graphical user interface.

Abstract: Computer-aided computer system configuration techniques for adding new computing resources to an existing set of computing resources. A method embodiment commences upon identifying an existing computing system having a first set of configuration parameters. A second computing system having a second set of configuration parameters is deployed. A user interface is provided to accept user input comprising a location and protocol to access the existing computing system. Syntactical and semantic differences between the configuration parameters of the existing computing system and those of the newly added set are identified. The identified differences are analyzed to generate a parameter map that relates the existing set of configuration parameters to the second set of configuration parameters and vice-versa. Relationships that are codified in the parameter map are validated through user interactions.