Confidential data vs Identification of a system

[Brad Klein]

In conjunction with HP's Pay Per Use and iCOD programs, data is sent from the customer system to HP. Sometimes, HP needs to report problems with the data back to the customer. To do so, HP uses portions of the sent data to identify the system sending the data to the customer. For example, today, the data contains a fully qualified domain name, hostname, serial number, and partition ID for partitionable systems. If there is a problem with the data, HP will contact the customer and use the information in the data to identify the system in question to the customer.

We would like to understand what minimal set of data is required to identify a system to a customer while not transmitting data to HP that a customer might consider sensitive. We would appreciate it if you could take a minute and answer the following questions.

1. What is the minimum amount of data that HP would have to provide you in order for you to be able to identify a specific partition in a partitionable system in your environment? Select your minimum set from the following list:
___ serial number
___ product number
___ hostname
___ fully qualified domain name
___ partition number
___ partition name
___ IP address

2. Given just a serial number, do you have a way of physically locating a system or determining an IP address or hostname for that system?
___ yes
___ no

3. What is the maximum amount of data about your system that you are comfortable with being transmitted across the public internet (encrypted) to HP for purposes of identifying your system? Please select items from the following list that you feel are OK to send to HP within the constraints of your own security policies:
___ serial number
___ product number
___ hostname
___ fully qualified domain name
___ partition number
___ partition name
___ IP address

4. What kind of business do you represent (e.g. manufacturing, education, financial, etc)

5. Do you currently have partitionable systems deployed?

Thank you very much for giving us your perspective! It helps us to design products that meet your requirements.

[John Payne_2 · Accepted solution]

1. Serial Number

2. Yes

3. Problably all the above, as long as it is encrypted...

4. Education (University)

5. We do have partionable systems, but only with 1 partition...

What about a system handle? That might help people too...

Hope it helps

John

[John Poff]

Hello,

1. hostname, partition name, partition number.

2. Yes.

3. hostname, partition name, partition number.

4. Retail.

5. Yes.


JP

[Rita C Workman]

1. Serial Number
2. Yes
3. hostname
4. Govt
5. No - ( have them ordered - ask me again in about 3 months...!!)

Rita

[Robert-Jan Goossens]

Hi,

1 - Serial number

2 - Yes

3 - Serial number
nothing more

4 - Financial

5 - No

Kind regards,

Robert-Jan.

[H.Merijn Brand (procura]

1. hostname
2. yes
3. all
4. IT service/software for local government
5. no (but a few customers have)

[David Bell_1]

1. Serial Number (or system handle)

2. Yes

3. All listed (with encryption)

4. Manufacturing

5. Not at this time

Dave

[Ray Brewer]

1. Hostname
2. yes
3. serial number, Hostname
4. State Govt.
5. Yes

[Christopher Caldwell]

1. serial number

2. yes

3. serial number should be enough, everything else is subject to change and thus isn't really relevent.

4. mass media

5. no

[harry d brown jr]

Brad,

1. Hostname is usually good enough, but all would be fine, of course an additional "CONTACT-LIST" would help!

2. Not today, but within 8 months - Yes

3. All of that plus the "contact list stated above, plus see not below.

4. financial

5. Yes, icod and virtual partitions (not on the same box though)


NOTE: I don't have a problem with Hp having and transmitting such data providing the encryption can be trusted. Additionally, one thing I do not want is this information given to any other party, other than support. Meaning that I would not want any sales/marketing calls generated from this information. I would want it strickly to be used for support purposes ONLY!

live free or die
harry

[harry d brown jr]

Brad,

I want to add that a configurable file in /etc, say like /etc/support_info, that could be used by the customer to add additional information that might also be useful BACK to the customer. Things like physical location, applications, basicly whatever. A true customer file that can help the customer.

live free or die
harry

[Sándor Szabó]

1. hostname, partition name
2. yes
3. serial number, partition number
4. Telecommunications
5. yes
Sandor

[Kellogg Unix Team]

1. Serial Number
2. Yes
3. Serial Number (other things may change)
4. Manufacturing
5. Yes

[Yogeeraj_1]

hi,

1. Serial Number
2. Yes
3. hostname
4. Manufacturing
5. No

Regards
Yogeeraj

[Jon Mattatall]

1. Hostname OR IP Address OR FQDN.

2. Yes.

3. S/N, Product Number, Hostname.

4. Government.

5. No.

Jon