Application Deployment Strategy November 2005 Authors: Peter Nilsson, Matt Saxon...

Application Deployment Application Deployment StrategyStrategy

November 2005November 2005Authors: Peter Nilsson, Matt SaxonAuthors: Peter Nilsson, Matt SaxonContributors/Reviews: Ian Race, Eric Shaw, Andrew Muir, Contributors/Reviews: Ian Race, Eric Shaw, Andrew Muir, Mark CribbenMark Cribben

3

Application DeploymentApplication Deployment

RequirementsRequirements

Service definitionService definition

Service architecture Service architecture

Service deliveryService delivery

Service implementationService implementation

Management toolsManagement tools

Support modelSupport model

IssuesIssues

RoadmapRoadmap

4


Functional RequirementsFunctional RequirementsSupport Strategic Deployment ModelsSupport Strategic Deployment ModelsSupport Tactical Deployment Models (necessary to complete Support Tactical Deployment Models (necessary to complete application migration – use of tactical options is by exception)application migration – use of tactical options is by exception)Framework allows accommodation of new deployment models (such Framework allows accommodation of new deployment models (such as application “streaming” – Softricity SoftGrid / Citrix Tarpon)as application “streaming” – Softricity SoftGrid / Citrix Tarpon)Application deployment to DSMP desktop/laptop, Citrix farm, Virtual Application deployment to DSMP desktop/laptop, Citrix farm, Virtual machines, Winscape servers, kiosk, (possibly) non-DSMP desktopmachines, Winscape servers, kiosk, (possibly) non-DSMP desktopAllow developers sufficient privileges to install their own applicationsAllow developers sufficient privileges to install their own applicationsAllow support staff to be given elevated privileges where necessary to Allow support staff to be given elevated privileges where necessary to perform their rolesperform their rolesConflict handling strategy to cover all cases (including application Conflict handling strategy to cover all cases (including application isolation techniques as necessary)isolation techniques as necessary)Maintain core infrastructure based on a single repository and provide Maintain core infrastructure based on a single repository and provide a single management view of application deployment status; different a single management view of application deployment status; different “views” optimised for different purposes, e.g.“views” optimised for different purposes, e.g.

Application catalogueApplication catalogueLicenses / deployment statusLicenses / deployment statusDeployment pipelineDeployment pipeline

Decision-making criteria for application re-engineeringDecision-making criteria for application re-engineeringDecision-making criteria for server application consolidationDecision-making criteria for server application consolidation

5


Non-functional RequirementsNon-functional RequirementsTarget machines to remain managedTarget machines to remain managed

Parts of the process open to delegation (e.g. allowing Parts of the process open to delegation (e.g. allowing Business Units to package applications)Business Units to package applications)

Central infrastructure sharable between packaging / Central infrastructure sharable between packaging / deployment teamsdeployment teams

Security RequirementsSecurity RequirementsEnsure that the use of elevated privileges by Ensure that the use of elevated privileges by developers and support staff is managed within a developers and support staff is managed within a framework that maintains overall security of the framework that maintains overall security of the environmentenvironment

6

Service DefinitionService DefinitionMap Functional RequirementsMap Functional Requirements

#1: Support Strategic Deployment Models#1: Support Strategic Deployment Models

DSMP Desktop /

Laptop

DSMP Desktop /

Laptop

Virtual machine

environment

Virtual machine

environment

WinscapeWinscapeFile server (apps to run on desktop or Citrix

server)

File server (apps to run on desktop or Citrix

server)

Citrix farmCitrix farmKiosk / standalone

PC

Kiosk / standalone

PC

Centralised software delivery solution

Office / COE

Packaged apps (MSI)

ClickOnce

Apps written for .NET

Framework 2.0 and above


Office / COE

Packaged apps (MSI)

Manual install

Any application


Office / COE

Packaged apps (MSI)


Packaged apps (MSI)

Scripted install

Any application

Manual build

Any application

Image clone

Any application

KeyKeyKeyKey Strategic deployment patterns

Under investigation or development

Tactical deployment patterns

7

Service DefinitionService DefinitionMap Functional RequirementsMap Functional Requirements

#2: Support Tactical Deployment Models#2: Support Tactical Deployment Models

DSMP Desktop /

Laptop

DSMP Desktop /

Laptop

Virtual machine

environment

Virtual machine

environment

WinscapeWinscapeFile server (apps to run on desktop or Citrix

server)

File server (apps to run on desktop or Citrix

server)

Citrix farmCitrix farmKiosk / standalone

PC

Kiosk / standalone

PC

Centralised delivery

Office / COE

Packaged apps (MSI)

ClickOnce

Apps written for .NET 2.0


Office / COE

Packaged apps (MSI)

Manual install

Any application


Office / COE

Packaged apps (MSI)


Packaged apps (MSI)

Scripted install

Any application

Manual build

Any application

Image clone

Any application

Manual install

Any application

Manual install

Any application

Manual copy

Simple apps (no DLLs)

Scripted copy


Scripted copy


Emerging technologies

Manual install

Any application

KeyKeyKeyKey Strategic deployment patterns

Under investigation or development

Tactical deployment patterns



77

8

Service DefinitionService Definition

Map Functional RequirementsMap Functional Requirements

RequirementRequirement Service ImplementationService Implementation

Support strategic deployment Support strategic deployment modelsmodels

See slide 5See slide 5

Support tactical deployment Support tactical deployment modelsmodels

See slide 6See slide 6

Accommodate new Accommodate new deployment models (e.g. deployment models (e.g. application “streaming”)application “streaming”)

Technical evaluation and cost/benefit analysis requiredTechnical evaluation and cost/benefit analysis required

Deployment to Deployment to desktops/laptops, Citrix, desktops/laptops, Citrix, Winscape, kiosk, non-DSMP Winscape, kiosk, non-DSMP workstationworkstation

Desktops/laptops: package as MSI & deploy via [SMS or Desktops/laptops: package as MSI & deploy via [SMS or equivalent], exception processequivalent], exception processCitrix: package as MSI and deploy via Citrix Application Citrix: package as MSI and deploy via Citrix Application Manager, exception processManager, exception processWinscape: package as MSI and deploy via Tivoli or script Winscape: package as MSI and deploy via Tivoli or script installation, special processes for Winscape SQL Server installation, special processes for Winscape SQL Server platform, exception processplatform, exception processKiosk: manual trigger of MSI or manual installKiosk: manual trigger of MSI or manual installNon-DSMP: equivalent process to DSMP – to be finalised Non-DSMP: equivalent process to DSMP – to be finalised depending on detailed requirementdepending on detailed requirement

9


Map Functional Requirements (ctd)Map Functional Requirements (ctd)


Elevated privileges for Elevated privileges for developersdevelopers

Mechanism to issue developers with local admin Mechanism to issue developers with local admin accounts; security guidelines for use of admin privileges; accounts; security guidelines for use of admin privileges; modified SLAs and support model for developersmodified SLAs and support model for developers

Elevated privileges for support Elevated privileges for support staffstaff

Mechanism to grant privileges to support staff; security Mechanism to grant privileges to support staff; security guidelines; modified SLAsguidelines; modified SLAs

Conflict handlingConflict handling Conflict database, conflict testing (closed groups), Conflict database, conflict testing (closed groups), packaging rules (isolation techniques), Citrix Application packaging rules (isolation techniques), Citrix Application Isolation with PS 4Isolation with PS 4

Core infrastructure and single Core infrastructure and single management viewmanagement view

Product selection (CMDB/repository) to be confirmed; Product selection (CMDB/repository) to be confirmed; integration and development work subject to analysisintegration and development work subject to analysis

Decision tree for application re-Decision tree for application re-engineeringengineering

Detailed guidanceDetailed guidance

Decision tree for server Decision tree for server application consolidationapplication consolidation

Detailed guidanceDetailed guidance

10


Map Non-functional RequirementsMap Non-functional Requirements


Target machines remain Target machines remain managedmanaged

Modified definition of “managed” and different SLA Modified definition of “managed” and different SLA depending on deployment methods used, rollback / reset depending on deployment methods used, rollback / reset process developed for each methodprocess developed for each method

Delegate parts of processDelegate parts of process Entry & exit points defined (e.g. allow packaging, Entry & exit points defined (e.g. allow packaging, development of installation scripts, etc. by different development of installation scripts, etc. by different teams or different Business Units)teams or different Business Units)

Shared infrastructureShared infrastructure Enterprise conflict database, repository, test Enterprise conflict database, repository, test environmentsenvironments

11


Map Security RequirementsMap Security Requirements


Framework to manage use of Framework to manage use of elevated privilegeselevated privileges

Policy and guidelines for developers and support staff Policy and guidelines for developers and support staff (including a separation between installing software as an (including a separation between installing software as an administrator and developing as an administrator)administrator and developing as an administrator)

12

Service ArchitectureService Architecture

Demand Demand ManagementManagement

Change &

Configura

tion

Change &

Configura

tion

Managem

ent

Managem

ent

Desktop Application Desktop Application Preparation & PackagingPreparation & Packaging

Deployment Deployment StreamsStreams

Server (Winscape) Server (Winscape) Application Preparation & Application Preparation &

PackagingPackaging

Web Application Web Application Preparation & PackagingPreparation & Packaging

SQL Database SQL Database Preparation & PackagingPreparation & Packaging

Rele

ase

Managem

ent

Rele

ase

Managem

ent

RepositoryRepository

Software Software DeliveryDelivery

Deliver to DesktopsDeliver to Desktops

Deliver to application Deliver to application serversservers

Deliver to web serversDeliver to web servers

Deliver to database Deliver to database serversservers

Management tooling (workflow, reporting)Management tooling (workflow, reporting)

Windows Application Windows Application Management ServicesManagement Services

Application ServicesApplication Services

CIO Application CIO Application DeliveryDelivery

Re-e

ngin

eer

(e.g

. A

ccess

R

e-e

ngin

eer

(e.g

. A

ccess

data

base

, .N

ET a

pp)

data

base

, .N

ET a

pp)

Deliver to PortalDeliver to Portal

Deliver to/via new Deliver to/via new technologies…technologies…

Governance and StandardsGovernance and Standards

Deliver to Citrix farmDeliver to Citrix farm

13

Service ArchitectureService ArchitectureStandards & Governance:Standards & Governance:

Application architecture strategy and standards; development Application architecture strategy and standards; development standards & procurement guidelinesstandards & procurement guidelines

Demand-challenge new application requestsDemand-challenge new application requests


Change &

Configura

tion

Change &

Configura

tion

Managem

ent

Managem

ent




PackagingPackaging



Rele

ase

Managem

ent

Rele

ase

Managem

ent










Re-e

ngin

eer

(e.g

. A

ccess

R

e-e

ngin

eer

(e.g

. A

ccess

data

base

, .N

ET a

pp)

data

base

, .N

ET a

pp)




14

Change &

Configura

tion

Change &

Configura

tion

Managem

ent

Managem

ent

Re-e

ngin

eer

(e.g

. A

ccess

R

e-e

ngin

eer

(e.g

. A

ccess

data

base

, .N

ET a

pp)

data

base

, .N

ET a

pp)


Decision flows to ensure appropriate deployment patterns are selected Decision flows to ensure appropriate deployment patterns are selected (package, script, manual, etc.)(package, script, manual, etc.)

Decision flows for preferred delivery mechanism, including degrees of isolation, Decision flows for preferred delivery mechanism, including degrees of isolation, consolidation, virtualisation desiredconsolidation, virtualisation desired

Decision flows on when and when not to re-engineerDecision flows on when and when not to re-engineer








PackagingPackaging



Rele

ase

Managem

ent

Rele

ase

Managem

ent










15


Platform standards, packaging / deployment guidelines and standardsPlatform standards, packaging / deployment guidelines and standards


Change &

Configura

tion

Change &

Configura

tion

Managem

ent

Managem

ent




PackagingPackaging



Rele

ase

Managem

ent

Rele

ase

Managem

ent










Re-e

ngin

eer

(e.g

. A

ccess

R

e-e

ngin

eer

(e.g

. A

ccess

data

base

, .N

ET a

pp)

data

base

, .N

ET a

pp)




16


Decision flows and testing methodologies to validate chosen delivery Decision flows and testing methodologies to validate chosen delivery method (e.g. validate server consolidation decisions)method (e.g. validate server consolidation decisions)


Change &

Configura

tion

Change &

Configura

tion

Managem

ent

Managem

ent




PackagingPackaging



Rele

ase

Managem

ent

Rele

ase

Managem

ent










Re-e

ngin

eer

(e.g

. A

ccess

R

e-e

ngin

eer

(e.g

. A

ccess

data

base

, .N

ET a

pp)

data

base

, .N

ET a

pp)




17


Production application delivery processes; SLAs and controlsProduction application delivery processes; SLAs and controls


Change &

Configura

tion

Change &

Configura

tion

Managem

ent

Managem

ent




PackagingPackaging



Rele

ase

Managem

ent

Rele

ase

Managem

ent










Re-e

ngin

eer

(e.g

. A

ccess

R

e-e

ngin

eer

(e.g

. A

ccess

data

base

, .N

ET a

pp)

data

base

, .N

ET a

pp)




18

Service DeliveryService DeliveryDevelopment of application deployment capability:Development of application deployment capability:

Defined strategic and tactical deployment patternsDefined strategic and tactical deployment patternsEnsure platform support for each acceptable patternEnsure platform support for each acceptable patternFor end-to-end deployment process, describe:For end-to-end deployment process, describe:

PhasesPhasesInterfaces, entry & exit criteriaInterfaces, entry & exit criteriaHandover points between teamsHandover points between teamsDecision criteriaDecision criteriaApplicable standardsApplicable standards

Establish capability to deliver each phase within the processEstablish capability to deliver each phase within the process

Capability to support distinct cases:Capability to support distinct cases:Migration –Migration –

To the target stateTo the target stateTo a tactical state (per application decision)To a tactical state (per application decision)

BAU process for managing ongoing changeBAU process for managing ongoing change

19

Service ImplementationService Implementation

Standards and GovernanceStandards and GovernanceDefined application architecture strategy and standardsDefined application architecture strategy and standardsDefined development standards & procurement Defined development standards & procurement guidelinesguidelinesDecision flows to ensure appropriate deployment Decision flows to ensure appropriate deployment patterns are selected (package, script, manual, etc.)patterns are selected (package, script, manual, etc.)Decision flows specifically to support migration – i.e. Decision flows specifically to support migration – i.e. when to re-engineer, when to port, when to contain?when to re-engineer, when to port, when to contain?Platform standards, packaging standardsPlatform standards, packaging standardsDecision flows to ensure appropriate delivery patterns Decision flows to ensure appropriate delivery patterns are selected (consolidation, virtualisation, isolation, are selected (consolidation, virtualisation, isolation, etc.)etc.)Production application delivery processes; SLAs and Production application delivery processes; SLAs and controls Governancecontrols Governance

Validate decisionsValidate decisionsHandle exceptionsHandle exceptions

Decision flows need to be informed by a full Decision flows need to be informed by a full understanding of the costs associated with each understanding of the costs associated with each optionoption

20


Centralised delivery of Office/COE and Centralised delivery of Office/COE and packaged apps to DSMP workstationpackaged apps to DSMP workstation

Platform definition, guidelines, service Platform definition, guidelines, service model (and infrastructure), release model (and infrastructure), release managementmanagement

ClickOnce delivery to DSMP workstationClickOnce delivery to DSMP workstation Security policies, development and Security policies, development and deployment guidelines, management deployment guidelines, management framework, service model, release framework, service model, release managementmanagement

Manual install on DSMP workstationManual install on DSMP workstation Guidelines, service model, processesGuidelines, service model, processes

Scripted install of simple apps on DSMP Scripted install of simple apps on DSMP workstationworkstation

Guidelines, service model, processesGuidelines, service model, processes

Deployment to DSMP workstation via Deployment to DSMP workstation via emerging technologies (e.g. application emerging technologies (e.g. application streaming)streaming)

Service development (including Service development (including infrastructure design and deployment)infrastructure design and deployment)

Centralised delivery to kioskCentralised delivery to kiosk Development of kiosk platform capable of Development of kiosk platform capable of “partial” integration with delivery services, “partial” integration with delivery services, service model, processesservice model, processes

Manual install on kioskManual install on kiosk Development of kiosk platform, service Development of kiosk platform, service model, processesmodel, processes

Centralised delivery to Citrix farmCentralised delivery to Citrix farm Guidelines, service model (and Guidelines, service model (and infrastructure), release managementinfrastructure), release management

Manual install on Citrix serversManual install on Citrix servers Guidelines, service model, processes, Guidelines, service model, processes, release managementrelease management

21


Deployment to Citrix farm via emerging Deployment to Citrix farm via emerging technologies (e.g. application streaming)technologies (e.g. application streaming)

Service development (including Service development (including infrastructure design and deployment)infrastructure design and deployment)

Manual copy to file server (app to run on Manual copy to file server (app to run on workstation or Citrix server)workstation or Citrix server)


Manual copy to file server (app to run on Manual copy to file server (app to run on workstation or Citrix server)workstation or Citrix server)


Centralised delivery to Winscape serversCentralised delivery to Winscape servers Platform definition, guidelines, service Platform definition, guidelines, service model (and infrastructure), release model (and infrastructure), release managementmanagement

Scripted install on Winscape serversScripted install on Winscape servers Guidelines, service model, processesGuidelines, service model, processes

Manual install on Winscape serversManual install on Winscape servers Guidelines, service model, processesGuidelines, service model, processes

Manual build in virtual environmentManual build in virtual environment Service development (including Service development (including infrastructure design and deployment), infrastructure design and deployment), guidelines, processesguidelines, processes

Image clone in virtual environmentImage clone in virtual environment Service development (including Service development (including infrastructure design and deployment), infrastructure design and deployment), guidelines, processesguidelines, processes

22

Management ToolsManagement ToolsRequirementRequirement Tools ImplementationTools ImplementationApplication packaging & conflict Application packaging & conflict managementmanagement

Macromedia/InstallShield Admin StudioMacromedia/InstallShield Admin Studio

RepositoryRepository To be decidedTo be decided

Additional tooling around change and Additional tooling around change and release management – workflow and release management – workflow and reportingreporting

To be decided in conjunction with To be decided in conjunction with selection of repositoryselection of repository

Application deployment – clientsApplication deployment – clients Progression from Radia to SMS; Progression from Radia to SMS; ClickOnceClickOnce

Application deployment – CitrixApplication deployment – Citrix Citrix toolsetCitrix toolset

Application deployment – WinscapeApplication deployment – Winscape Progression from Tivoli to SMSProgression from Tivoli to SMS

23

Support ModelSupport Model

Service ownership and deliveryService ownership and deliveryService owned by Head of IT infrastructure deliveryService owned by Head of IT infrastructure delivery

Day to day responsibility delegated to Desktop Service Day to day responsibility delegated to Desktop Service Performance Leader and his Service Performance Performance Leader and his Service Performance ManagersManagers

Technical Governance controlled throughTechnical Governance controlled throughOperational Change Control Operational Change Control

Release Management Release Management

Impact on support groupsImpact on support groupsMinimised through Minimised through

Clear Roles and responsibilities Clear Roles and responsibilities

Documentation of the Technical + Business Operational Documentation of the Technical + Business Operational ModelsModels

Use of standard and repeatable change and release Use of standard and repeatable change and release processesprocesses

24

IssuesIssuesHow to verify application deployment How to verify application deployment

patterns (e.g. validate weighting behind patterns (e.g. validate weighting behind criteria for judging whether application goes criteria for judging whether application goes to Citrix or not)?to Citrix or not)?

Continuous iteration and refinement of Continuous iteration and refinement of deployment patternsdeployment patterns

Management tooling – need authoritative Management tooling – need authoritative data sources & reliable reporting, as well as data sources & reliable reporting, as well as workflow support for managing the workflow support for managing the application migration processapplication migration process

Product selection / development & Product selection / development & deployment requireddeployment required

Lack of resources (and therefore lack of Lack of resources (and therefore lack of readiness) within groups such as Web readiness) within groups such as Web Services & DBLS suggests they may become Services & DBLS suggests they may become bottlenecksbottlenecks

Application discovery needs to feed into Application discovery needs to feed into overall resource model – further actions to overall resource model – further actions to be determined once a better idea of scale of be determined once a better idea of scale of problem is understoodproblem is understood

No mature assessment criteria for server-No mature assessment criteria for server-based apps (including web sites, web apps, based apps (including web sites, web apps, databases) – will make it difficult to decide databases) – will make it difficult to decide when to re-engineer and may lead to poor when to re-engineer and may lead to poor ROI on money spent on migrationROI on money spent on migration


Many standards and processes have yet to Many standards and processes have yet to be developedbe developed

Work needs to be triggered by application Work needs to be triggered by application discovery processdiscovery process

Existing DSMP desktop cannot immediately Existing DSMP desktop cannot immediately accommodate all of the deployment models accommodate all of the deployment models requiredrequired

Roadmap to be worked out with outsource Roadmap to be worked out with outsource partnerpartner

25

Issues #2Issues #2Better cost models required to support Better cost models required to support

decision flows (especially decisions on when decision flows (especially decisions on when to deploy thin, when to virtualise, when to to deploy thin, when to virtualise, when to consolidate, when to re-engineer)consolidate, when to re-engineer)


26

RoadmapRoadmap

Technology RoadmapTechnology RoadmapWindows clientWindows client

.NET Framework 2.0 and Visual Studio 2005 will .NET Framework 2.0 and Visual Studio 2005 will enable ClickOnce deployment (with further enable ClickOnce deployment (with further refinements due in Vista)refinements due in Vista)See Systems Management Strategy for SMS See Systems Management Strategy for SMS roadmaproadmap

Citrix serverCitrix serverPresentation Server 4 released 2005, includes Presentation Server 4 released 2005, includes application isolation technologyapplication isolation technologyPresentation Server 5?Presentation Server 5?Project “Tarpon” – application streamingProject “Tarpon” – application streaming

Windows serverWindows serverSee Systems Management Strategy for SMS See Systems Management Strategy for SMS roadmaproadmap

VMWare serverVMWare serverVMWare roadmap?VMWare roadmap?

Application Deployment Strategy November 2005 Authors: Peter Nilsson, Matt Saxon...

Documents

Transcript of Application Deployment Strategy November 2005 Authors: Peter Nilsson, Matt Saxon...