Dana Gardner's  Instablog

Often lost amid the talk of cloud deployment models and hybrid hosting efficiencies is the actual task of properly deploying enterprise applications. Deploying applications touches so many aspects of IT systems and business processes, and requires ongoing updates and management, that only the enterprise IT staffs can really do the job.

So if cloud is a way of doing an end-run around IT -- yet IT is integral to proper applications deployment and care -- how exactly do these disparate propositions co-exist?

Not too well, it turns out, especially as the pace that apps development and deployment -- and the skyrocketing need to bring more mobile apps into production -- complicates the already tough task of overall applications management.

HP Software today announced four products that aim to tackle this thorny reality -- that traditional apps deployment was already broken, and that the new requirements make automation and comprehensive management an inescapable necessity. [Disclosure: HP is a sponsor of BriefingDirect podcasts.]

HP is also banking on the role it can play as a neutral party to better orchestrate the apps lifecycle because -- unlike most other large enterprise software vendors -- it doesn't have a legacy applications, operating system, hypervisor, database and/or middleware heritage (and cash cows) to favor and protect. That means supporting heterogeneity in total is the imperative, not the exception, for HP.

The next generation of HP's data-center automation, orchestration, and cloud management software scales in terms of volume, supports all the installed enterprise kit, and allows for unprecedented simplicity, so that IT can get control before its too late, said Manoj Raisinghani, Senior Director of Worldwide Product Marketing for Cloud Automation Software and SaaS at HP Software.

It's not enough to solve parts of the enterprise IT complexity problem, said Raisinghani. The management of the server deployment and management has an impact on the database and middleware management, which then need to be orchestrated as a whole, which then needs to apply to the cloud services deployment options. So, server, data, middleware, cloud and orchestration all need to be part of the management solution for the scale, simplicity and automation to be impactful and practical, he said.

And that's why HP has bundled these four major products under a common release, with a common version number: 10.

"Server automation is key to the cloud path," said Raisinghani. He said the announcements were a "10" on a scale of 1 to 10 for HP Software.

Managing complex distributed systems and heterogeneous environments is so time-consuming and complex -- hindering business agility and innovation -- that IT has relied on systems integrators, and is now being tempted to hand over more process orchestration to the cloud providers. But the trends around mobility, big data and software-as-a-service (SaaS) services mean that IT need to be more in control, not less. And IT needs the means to deploy the answer themselves, and rely on the software orchestration they control to move the workloads and date to where the model works best, said Raisinghani.

Therefore, whether it's routine data center maintenance to the delivery of extended enterprise business processes, automation and cloud management software reduces automating repetitive, manual and time-consuming operations, and makes the entire approach more secure and more easily tracked for intrusions, according to HP.

Even deploying the HP Server Automation (SA) 10 product itself is being streamlined via a virtual appliance, said Raisinghani. IT users can do it themselves, he said. Thanks to the virtual appliance model, the suite is "customer installable," said Raisinghani.

HP Database and Middleware Automation (DMA) 10 further automates manual database management tasks. HP Cloud Service Automation 3.2 provides service life cycle automation and IT assets management capabilities to scale to cloud services safely. HP Operations Orchestration (OO) 10 automates up to 15,000 simultaneous operations to track all of the above products, processes, and services.

HP SA 10, the life cycle management platform, enables IT to manage more than 100,000 physical and virtual servers from a single pane of glass, as well as improves operational economics by reducing the administrator-to-server ratio by up to 60 percent, said Raisinghani.

This HP Software approach has been long in the making -- from the acquisition of Mercury and Opsware, to the business service management emphasis to the early recognition that hybrid cloud was the long-term IT model.

And while the total management approach -- supporting all the major OSes, hypervisors, RDBs, apps, and clouds -- makes HP a services management Switzerland, there are some advantages too for HP. By focusing on the automation and orchestration, they are building a default capability to the HP public cloud for those organization seeing an integrated advantage over the more maul efforts require for other public clouds such as Amazon Web Services, said Raisinghani.

"You can go agile, to where the applications can be best deployed," said Raisinghani. "But this is seamless to the user. It just gets deployed. IT can automate how the services are prepackaged and cloud-burst."

And HP is determined to make the HP public cloud the best way to get those services up and running, although the customer will have choice on which cloud or clouds to target, said Raisinghani. "The user gets choice -- but the default is the HP Cloud," he said. "HP on HP is going to work better. We'll be making them an offer that's very attractive."

So think about it. Would you as a vendor rather be in a race to the bottom on hypervisor price? On public cloud price? On database price? On storage price? Or would you rather be building market at being best at enabling the automation, speed and security of the workloads and processes that IT needs to navigate the new IT landscape?

Management, orchestration and automation may well be the killer apps of the cloud era. Management, orchestration and automation from apps and data cradle to grave is the sticky value that locks-in based on productivity, not technology. HP has clearly got its eyes on this prize, and the latest releases this week are a major salvo in the cloud enablement as a function of IT -- not outside of IT. Because, like it or not, enterprise IT is the ultimate cloud broker to win over.

In other cloud applications automation news, ServiceNow on Monday announced its ServiceNow App Creator, designed to enabling "citizen developers" to rapidly create enterprise and mobile applications on the ServiceNow Service Automation Platform.

Originally targeting the ITSM function, ServiceNow is broadening the use of its tools and platform for apps outside the IT management domain, but with IT as the driver as to what platforms the developers will use. The App Creator technology itself is now included in the platform.

"This arms IT to provide developers with a rich RAD platform and puts those apps on a single platform in a single place," said Arne Josefsberg, CTO at ServiceNow.

Leveraging a forms-based workflow on making and deploying apps and process flows, App Creator ensures "best practice" development of custom applications without requiring coding or technology expertise, said Josefsberg.

Applications that the enterprise builds on the platform are then separately licensed on a per user basis. The ServiceNow App Creator is available today to all current ServiceNow customers.

• Service Virtualization brings speed benefit and lower costs to TTNET applications testing
• ERP for IT Helps Dutch Insurance Giant Achmea to Reinvent IT Processes to Improve Business Performance Across the Board
• McKesson Redirects IT to Become a Services Provider That Delivers Fuller Business Solutions
• Investing Well in IT With Emphasis on KPIs Separates Business Leaders from Business Laggards, Survey Results Show
• Expert Chat with HP on How Better Understanding Security Makes it an Enabler, Rather than Inhibitor, of Cloud Adoption
• Expert Chat with HP on How IT Can Enable Cloud While Maintaining Control and Governance

Listen to the podcast. Find it on iTunes. Read a full transcript or download a copy. Sponsor: VMware.

The next BriefingsDirect IT leadership discussion focuses on how leading Australian IT services provider Thomas Duryea Consulting made a successful journey to cloud computing as a business.

We'll learn why a cloud-of-clouds approach is providing new types of IT services to Thomas Duryea's many Asia-Pacific region customers.

The first part of our series addressed the rationale and business opportunity for TD's cloud-services portfolio, which is built on VMware software.

The latest discussion continues a three-part series on how Thomas Duryea, or TD, designed, built and commercialized an adaptive cloud infrastructure. This second installment focuses on how a variety of risks associated with cloud adoption and cloud use have been identified and managed by actual users of cloud services.

Learn more about how adopters of cloud computing have effectively reduced the risks of implementing cloud models from Adam Beavis, General Manager of Cloud Services at Thomas Duryea in Melbourne, Australia. The interview is conducted by Dana Gardner, Principal Analyst at Interarbor Solutions. [Disclosure: VMware is a sponsor of BriefingsDirect podcasts.]

Here are some excerpts:

Gardner: Adam, we've been talking about cloud computing for years now, and I think it's pretty well established that we can do cloud computing quite well technically. The question that many organizations keep coming back with is whether they should do cloud computing. If there are certain risks, how do they know what risks are important? How do they get through that? What are you in learning so far at TD about risk and how your customers face that?

Beavis: People are becoming more comfortable with the cloud concept as we see cloud becoming more mainstream, but we're seeing two sides to the risks. One is the technical risks, how the applications actually run in the cloud.

Moving off-site

What we're also seeing -- more at a business level -- are concerns like privacy, security, and maintaining service levels. We're seeing that pop up more and more, where the technical validation of the solution gets signed off from the technical team, but then the concerns begin to move up to board level.

We're seeing intense interest in the availability of the data. How do they control that, now that it's been handed off to a service provider? We're starting to see some of those risks coming more and more from the business side.

Gardner: I've categorized some of these risks over the past few years, and I've put them into four basic buckets. One is the legal side, where there are licenses and service-level agreements (SLAs), issues of ownership, and permissions.

The second would be longevity. That is to say, will the service provider be there for the long term? Will they be a fly-by-the-seat-of-the-pants organization? Are they are going to get bought and maybe merged into something else? Those concerns.

The third bucket I put them in is complexity, and that has to do with the actual software, the technology, and the infrastructure. Is it mature? If it's open source, is there a risk for forking? Is there a risk about who owns that software and is that stable?

And then last, the long-term concern, which always comes back, is portability. You mentioned that about the data and the applications. We're thinking now, as we move toward more software-defined data centers, that portability would become less of an issue, but it's still top of mind for many of the people I speak with.

So let's go through these, Adam. Let's start with that legal concern. Do you have any organizations that you can reflect on and say, here is how they did it, here is how they have figured out how to manage these license and control of the IP risks?

Beavis: The legal one is interesting. As a case study, there's a not-for-profit organization for which we were doing some initial assessment work, where we validated the technical risk and evaluated how we were going to access the data once the information was in a cloud. We went through that process, and that went fine, but obviously it then went up to the legal team.

One of the big things that the legal team was concerned about was what the service level agreeement was going to be, and how they could capture that in a contract. Obviously, we have standard SLAs, and being a smaller provider, we're flexible with some of those service levels to meet their needs.

But the one that they really started to get concerned about was data availability ... if something were to go wrong with the organization. It probably jumps into longevity a little bit there. What if something went wrong and the organization vanished overnight? What would happen with their data?

Escrow clause

That's where we see legal teams getting involved and starting to put in things like the escrow clause, similar to what we had with software as a service (SaaS) for a long time. We're starting to see organizations' legal firms focus on doing these, and not just for SaaS -- but infrastructure as a service (IaaS) as well. It provides a way for user organizations to access their data if provider organizations like TD were to go down.

Beavis

So that's one that we're seeing at the legal level. Around the terms and conditions, once again being a small service provider, we have a little more flexibility in what we can provide to the organizations on those.

Once our legal team sits down and agrees on what they're looking for and what we can do for them, we're able to make changes. With larger organizations, where SLAs are often set in stone, there's no flexibility about making modifications to those contracts to suit the customer.

Gardner: Tell us about your organization, how big you are, and who your customers are, and then we'll get back into some of these risks issues and how they have been managed.

Beavis: Traditionally, we came from a system-integrator background, based on the east coast of Australia -- Melbourne and Sydney. The organization has been around for 12 years and had a huge amount of success in that infrastructure services arena, initially with VMware.

Other companies heavily expanded into the enterprise information systems area. We still have a large focus on infrastructure, and more recently, cloud. We've had a lot of success with the cloud, mainly because we can combine that with a managed services.

We go to market with cloud. It's not just a platform where people come and dump data or an application. A lot of the customers that come into our cloud have some sort of managed service on top of that, and that's where we're starting to have a lot of success.

As we spoke about in part one, our customers drove us to start building a cloud platform. They can see the benefits of cloud, but they also wanted to ensure that for the cloud they were moving to, they had an organization that could support them beyond the infrastructure.

That might be looking after their operating systems, looking after some of their applications such as Citrix, etc. that we specialize in, looking after their Microsoft Exchange servers, once they move it to the cloud and then attaching those applications. That's where we are. That's the cloud at the moment.

Gardner: Is there something about the platform and industry-standard decisions that you've made that helps your customers feel more comfortable? Do they see less risk because, even though your organization is one organization, the infrastructure, is broader, and there's some stability about that that comes to the table?

Beavis: Definitely. Partnering with VMware was one of our core decisions, because their platform everywhere is end-to-end standard VMware. It really gives us an advantage when addressing that risk if organizations ask what happens if our company doesn't run or they're not happy with the service.

The great thing is that within our environment -- and it's one part of VMware's vision -- you can then pick up those applications, and move them to another VMware cloud provider. Thank heaven, we haven't had that happen, and we intend it not to happen. But, for organizations to understand that, if something were to go wrong, they can move that to another service provider without having to re-architect those applications or make any major changes. This is one area where we're well getting around that longevity risk discussion.

Gardner: Is there a confluence between portability and what organizations are doing with disaster recovery (DR)? Maybe they're mirroring data and/or infrastructure and applications for purposes of business continuity and then are able to say, "This reduces our risk, because not only do we have better DR and business continuity benefits, but we're also setting the stage for us to be able to move this where we want, when we want."

They can create a hybrid model, where they can pick and choose on-premises, versus a variety of other cloud providers, and even decide on those geographic or compliance issues as to where they actually physically place the data. That's a big question, but the issue is business continuity, as part of this movement toward a lower risk, how does that pan out?

Beavis: That's actually one of the biggest movements that we're seeing at the moment. Organizations, when they refresh their infrastructure, don't see the the value refreshing DR on-premise. Let the first step cloud be "let's move the DR out to the cloud, and replicate from on-premises out into our cloud."

Then, as you said, we have the advantage to start to do things like IaaS testing, understanding how those applications are going to work in the cloud, tweak them, get the performance right, and do that with little risk to the business. Obviously, the production machine will continue to run on-premises, while we're testing snapshots.

It's a good way to put a live snapshot of that environment, and how it's going to perform in the cloud, how your users are going to access it, bandwidth, and all that type of stuff that you need to do before starting to run up. DR is still the number one use case that we're seeing people move to the cloud.

Gardner: As we go through each of these risks, and I hear you relating how your customers and TD, your own organization, have reacted to them, it seems to me that, as we move toward this software-defined data center, where we can move from the physical hardware and the physical facilities, and move things around in functional blocks, this really solves a lot of these risk issues.

You can manage your legal, your SLAs, and your licenses better when you know that you can pick and choose the location. That longevity issue is solved, when you know you can move the entire block, even if it's under escrow, or whatever. Complexity and fear about forking or immaturity of the infrastructure itself can be mitigated, when you know that you can pick and choose, and that it's highly portable.

It's a round-about way of getting to the point of this whole notion of software-defined data center. Is that really at heart a risk reduction, a future direction, that will mitigate a lot of these issues that are holding people back from adopting cloud more aggressively?

Beavis: From a service provider's perspective it certainly does. The single-pane management window that you can do now, where you can control everything from your network -- the compute and the storage -- certainly reduces risk, rather than needing several tools to do that.

Backup integration

And the other area where the venders are starting to work together is the integration of things like backup, and as we spoke about earlier, DR. Tools are now sitting natively within that VMware stack around the software-defined data center, written to the vSphere API, as we're trying to retrofit products to achieve file-level backups within a virtual data center, within vCloud. Pretty much every day, you wake up there's a new tool that's now supported within that.

From a service provider's perspective it's really reducing the risk and time to market for the new offerings, but from a customer's perspective it's really getting in that experience that they used to. On-premise over a TD cloud, from their perspective, makes it a lot easier for them to start to adopt and consume the cloud.

Gardner: I suppose this is a good segue into this notion of how to make your data, applications, and the configuration metadata portable across different organizations, based on some kind of a standard or definition. How does that work? What are the ways in which organizations are asking for and getting risk reduction around this concept of portability?

Beavis: Once again, it's about having a common way that the data can move across. The basics come into that hybrid-cloud model initially, like how people are getting things out. One of the things that we see more and more is that it's not as simple as people moving legacy applications and things up to the cloud.

To reduce that risk, we're doing a cloud-readiness assessment, where we come in and assess what the organization has, what their environment looks like, and what's happening within the environment, running things like the vCenter Operations tools from VMware to right-size those environments to be ready for the cloud.

Gardner: Now the flip-side of that would be that some of your customers who have been dabbling in cloud infrastructure, perhaps open-source frameworks of some kind, or maybe they have been integrating their own components of open-source available software, licensed software. What have you found when it comes to their sense of risk, and how does that compare to what we just described in terms of having stability and longevity?

More comfortable

Beavis: Especially in Australia, we probably have 85 percent to 90 percent of organizations with some sort of VMware in their data center. They no doubt seem to be more comfortable gravitating to some providers that are running familiar platforms, with teams familiar with VMware. They're more comfortable that we, as a service provider, are running a platform that they're used to.

We'll probably talk about the hybrid cloud a bit later on, but that ability for them to still maintain control in a familiar environment, while running some applications across in the TD cloud, is something that is becoming quite welcoming within organizations. So there's no doubt that choosing a common platform that they're used to working on is giving them confidence to start to move to the cloud.

Listen to the podcast. Find it on iTunes. Read a full transcript or download a copy. Sponsor: VMware.

• Thomas Duryea's Journey to the Cloud: Part One
• VMware-Powered Cloud Adoption Delivers Bevy of Data and Performance Benefits for Revlon, Says CIO David Giambruno
• Services Provider BancVue Leverages VMware Server Virtualization to Generate Private-Cloud Benefits and Increased Business Agility
• Roundtable: Revlon and SAP executives describe accretive benefits from aggressive cloud adoption
• From VMworld, cosmetics giant Revlon harnesses the power of private cloud to produce impressive savings and cost avoidance
• VMware CTO Steve Herrod on How the Software-Defined Datacenter Benefits Enterprises

Ariba, an SAP Company, and Discover Financial Services today unveiled Ariba Pay. The new service, to be offered by Ariba, is expected to transform B2B payments by eliminating paper transactions, providing better visibility into cash flow, and producing rich remittance information that improves reconciliation processes for buyers and sellers.

The cloud-based service. announced at the Ariba LIVE conference, will combine the applications and insights embedded in the Ariba Network and deliver them through a trusted and secure global-payments infrastructure to streamline and enhance settlement and reconciliation of business commerce. The service is expected to be generally available in 2014. [Disclosure: Ariba is a sponsor of BriefingsDirect podcasts.]

"It's the classic joke: The check is in the mail. But few companies find it funny," said Kevin Costello, president, Ariba. "Buyers are drowning in paper, and sellers have no idea when -- or how much -- they will be paid. AribaPay will effectively eliminate these issues."

AribaPay will provide a way for buyers to create purchase orders, receive invoices, and send payments, while sellers receive more-detailed remittance information in a fast, secure, electronic environment.

"Ariba and Discover are seizing the opportunity to digitize a share of the estimated $30 trillion in B2B payments that are still mostly made with paper checks," said Roger Hochschild, president and chief operating officer for Discover. "Discover is broadening its network capabilities and infrastructure and choosing diverse business partners like Ariba to move beyond facilitating payments to enabling and improving business commerce."

For buyers and sellers connected to the Ariba Network, AribaPay will deliver data that shows what payments represent at the invoice and line-item level, fueling faster, more accurate reconciliation on both sides.

Other benefits include:

• Lower processing cost
• Richer remittance advice
• Reduced fraud risk
• Elimination of paper checks and invoices
• Fewer payments lost to escheatment
• Ability to track and trace transactions
• Faster reconciliation and dispute resolution

To learn more about AribaPay and the benefits it is expected to deliver, visit: www.aribapay.com

• The Networked Economy Newly Forges Innovation Forces for Collaboration in Business and Commerce, Syas Author Zach Tumin
• Collboration-Enhanced Procurement and AP Automation Maximize Productivity and Profit Gains in Networked Economy, Says Ariba's Drew Hofler
• Ariba Network Helps Cox Enterprises Manage Procurement Across Six Different ERP Systems
• Ariba CMO Tim Minahan on how networked economy benefits spring from improved business commerce and cloud processes
• Ariba and Discover to Transform B2B Payments with AribaPay
• Discover and Ariba partner for B2B Payments