00:01
Cool. All right. Hey, welcome everybody to Pure Accelerate 2023. Today's sessions, automate your storage management, the secure way. So my name is Matt Bradford, technical marketing for pure digital experience team. And so we're focused on all of our subscription offerings.
00:16
Evergreen uh as well as uh Pier One and awesome. Hey folks. Uh Thank you for joining this session. My name is Raj. I'm director of product for pure one and looking after monitoring management, automation, anything on the pure one side. All right. So let's talk to the next slide.
00:37
So what are we covering today? Three things. How many of you guys have heard about self service upgrade in the pure one? Raise your hand. How many of you guys are using it? Awesome. So we got a few people. So one of the things which we are going to talk about is storage upgrade.
00:55
Pr has done a phenomenal job in the realms of allowing an upgrade to the customer via support. Now, imagine that same functionality we replicated in the pure one without any support help where you as a customer can go in or partner can go in and upgrade the customer fleet or your fleet in your environment without any support interaction. The second is purity optimization.
01:21
So we all know that this software software would have some security vulnerabilities, some bugs with this feature. We allow you as a customer to go from pure one management layer into the purity data plan layer and allow you to fix some of the security vulnerabilities and patching by pushing some of the things from the cloud layer to the purity layer. And the third is the policy based management.
01:46
It's all about the automation and workload, rebalancing with the pure fusion feature, what we've delivered to you uh last year. All right. Awesome. I if if you essentially look into it, the there are a bunch of challenges today in the town of and how we do, how the environment is slow or there's a challenge
02:12
with the scaling of the environment or in the sums of insecurity and with all these things, what we are talking about today, we are resolving such such such kind of an issue in the cloud layer. So one of the things which you would see today's topic is pure one servers and which will be in the next slide. It allows you to see how pure is changing the automation world,
02:36
but allowing you to manage your infrastructure directly from the cloud with a full blown security layer and allowing you to scale to the next level. So let's talk about it in the next slide. Yeah. So actually I think, you know, some of the things too to to kind of address, you know, as we're talking about automation and this is really how pure is,
02:52
you know, providing an integrated solution to automate your storage is, you know, things like security, right? Um If you were to open up things api right, you are opening up a little bit of risk there. So, you know, from a pure one or from a pure perspective with the pure edge services we design, you know, the service is to be uh really, really secure.
03:10
So we're working with things obviously pier one and then fusion too for the uh for the automated piece of it. So that's, that's kind of a big part of the uh the pure one ED service. But awesome. Uh we deliver pure one ED service last year in May. I clearly remember the date because it was one of the big projects that you were driving May
03:28
27th around 12:10 p.m. I just remember the time. Uh what is pure service to simplify pure net service is a bidirectional communication channel from your cloud to your data player. If you think what pure one was where pure one started, we had a direct communication layer where R A used to send the telemetry data to the cloud.
03:54
With the pure one service, we allow a customer to have that bidirectional messaging layer where customer can initiate some of this conversation from the cloud layer and it actually interacts to the a a level with a bunch of agents and things like that. So if you go into the more details into the architecture around it, so as we talked about, there are three use case which we are serving and there are going to be
04:19
way more use cases with the pure one service because we truly believe this is the future how we are going to manage your infrastructure. So as we mentioned, there are three use cases upgrade allowing you to manage your purity release directly from the pure one without the help of support, support experience allowing you to fix some of the issues,
04:42
things like NV Ram or any security vulnerabilities on demand, pushing it into the environment with a full secure solution. And the third is the fusion which allows you to do the workload, rebalancing and cloud based orchestration in your environment with the help of N Pr one internet service. So underneath infrastructure,
05:01
whatever use case, which we are seeing its leverage is the pure one night service. So let's talk about the next slide and the details of the architecture. So there are four layers over here with the pure one edge service. So number one is a pure one edge gateway. So it's a container running into the purity.
05:21
Now it's off by default as a customer, you need to honor it. So whenever you get any purity release about 6.2 0.10. You would have a pure one edge gateway installed into your purity right now. We just support flash array. Our goal is to support flash bed two in the near future, pure one edge gateway is in the active active mode.
05:42
We are running on the custom lean export part man. Just it's a very, very light container. The next one is a pure one service. It's an it's a communication layer between the cloud to your on premise. Think about edge gateway as a gatekeeper to any communication which is done from the cloud to
06:02
the array. So every time any single message which is sent from the cloud, it actually hits the edge gateway and edge gateway would pass those messages to the agent. The third one is a pure one service dashboard. So the entire life cycle management of the agent gateway are done into the cloud
06:21
management layer. But as a customer, you can automatically upgrade your agent, you can delete your agent, you can enable, disable your edge gateway. So all of them can be done itself into the cloud layer with a pure one service dashboard and the fourth piece is in agents. So for you to run any of the services as a
06:43
customer, you need to download an agent. How do we do it as a customer? You go into pure one, you say I want to run self service upgrade moment. You say that we are going to download the agent over the air deploy into your purity environment in a secure manner. Yeah, onto the arrays. Yes.
07:07
You know. So the good thing we, we are only asking you to open an inbound SSO SSL 443 port. So today, if you are using pure one, there's no changes required because the connection is always initiated from the array level, it never gets initiated from the cloud level. So it's it's in, in that way, we are not allowing any outbound connection to be
07:34
actually going inside your array and doing any spoofing. So talking about the pure one service security, it actually falls into the three categories. The number one is the pure one cloud. So for us, the security is really, really important. We got an entire dedicated security team who is looking after the pure one service and some of
07:55
the other functionality which we are delivering at this point of time. And we got a big white paper more than happy to send you guys a link if anyone is interested. So with the pure one cloud, the first thing we started doing is a step of authentication. So what it means, I give this analogy, take an example for a big house, you enter into the house with the standard user name and password.
08:19
Now you want to enter into the some specific room which has a sensitive things in order to do that you need an additional layer of multi factor authentication. So that's the step of authentication for you as a customer to enable anything deploy anything there needs to be an additional step of authentication, which is right now S MS based and we are also adding totp based authentication.
08:42
Everything is audited, alerted onto the cloud layer and the data playing layer, we got a robust role based access control for each of the things which we are allowing customers to manage from the pr one pr one today is in two. it's a so two certified at this point of time, we got it from the, from the stand point of view of the infrastructure, it has all the firewall
09:04
protection and database is totally encrypted. So even the pure one employee cannot look into what's going on in the environment. In the terms of a bidirectional communication, we support TLS 1.2 T as 1.3 each and every message which is communicated from the array to the cloud is goes to the message signing and verification and there's a mutual TLS which happens when the bidirectional communication
09:27
gets initiated. And from the device, device point of view, when I say device, it's an edge device which is an array first, it's an N force R 10. So we don't allow you to say by default, it's going to be enabled you as a customer need to enable this service that's really critical.
09:46
All the containers are super secure, we do the containers hardening on the regular cadence. There's a granular api tokens for the agent. So what it means is if you have deployed certain agent, that agent has some specific task, the agent cannot do randomly and delete the volume or cannot just talk to your VP environment. Again, everything is audited on the device level if any changes happens.
10:10
And we are only asking you to open the outbound firewall port 443. So there's no inbound opening at this point of time. And that's exactly the same thing what we do with the pure one. It has an entire security cycle too. The reason we are focusing on the security a lot in this presentation, it's critical because this is something the storage has been
10:32
something it's super critical for all our customers and for for us to make sure a customer has that comfort level. There needs to be a security around it. We do a track modeling and design harding for each and every feature which we deliver. There's a pen testing happens on each and every feature which we deliver. And there's a SAT and DAST which happens at the at the cloud layer on the device layer level
10:58
which I already talked about. Every feature goes to the OS hardening. It should be in the latest operating system, it should have a container image hardening happening. And the last thing we just got a secure C I CD pipeline and secure keys to to make it sure that it's very end to end secure in the terms of the future, what we are delivering.
11:17
And so we're following the stride framework for exactly we are following the stride framework. Cool subtitle. Yeah. So getting started is simple. If you have your purity release around about 6.2 0.10 or 6.3 0.1 you need to just enable your phone home data. Once you enable your phone home data, you can go into your array,
11:42
enter two commands. I want to enable a service and the service is enabled at that point of time. Oh, I thought the next slide was that command line. But this is what I was gonna say that there's also obviously support for uh pure cloud blocks star, right? So different version of purity 637.
12:01
But again, you're gonna have that, you know, the uh container engine out there. So I guess to kind of get started here, right? The first step if you want to enable the Ed services is to go into pier one. And this is something that is totally, you know, we don't touch the array, we don't do anything other than just enable this in your tier one cloud.
12:20
So if you're even curious about this, go ahead and request access to to the system within pier one. So you go into the ED services. Many of you here under administration, obviously, you need to be an admin to request this. Um But once you request those access, we're gonna get things set up on the back end here.
12:34
And it takes, you know, it takes a little bit of time, a couple of days, maybe. No, no, it actually we, we, we so I will, I will tell you this when we started it, it used to take roughly around 28 days to enable pure one service because we were looking into the back end side of looking into is the data clean,
12:50
is the configuration clean. We have automated that process. So our 75% of the customer can enable pure one service in less than one minute. That's awesome. Yeah. So if, if that takes roughly seven days, depending upon what sort of an issue we have it on the,
13:10
on the customer, has it on the back end side or it's some issue on our side. For example, we saw some customer using an AOL email on the pure one. We are like now, we cannot allow AOL email if you want to use pr one at service. Uh So those are the such kind of security things which we are taking. So if you reach out to customer and say, hey, please don't use AOL email.
13:31
If customer removes it, we can just turn on in a few seconds. If this customer takes time, then it takes a few days. So it just depends upon how how, how responsive the customer is and if there are issues on our side, how fast we will resolve it. So usually I have seen 6 to 7 days, that's what it takes. So then the next step,
13:52
once you get that enabled, right? If you log into your pure run a right, again, we're on 631 at least or 628. go ahead run these two commands. Pure support, enable edge management. Anybody here, guess what the command would be to disable it.
14:07
OK? So very, very easy, right? So we want to enable that edge management. So again, we want to open things up to that pier one edge service. And then the second one is to enable the agent updates. So this is where we actually put those agents onto the array where we can actually go ahead
14:21
and we can upgrade those array, those agents. Now let's talk about installing the fa upgrade agent. So the first thing what we do is you come into the pure one service dashboard. So this is a dashboard. You would see three agents. We got an fa optimization agent, upgrade agent, pure fusion agent.
14:41
You click on install this agent and moment you do that from the pure one, the agent gets installed itself into the purity. Do you wanna go to the next up? Sure. Other sample subtitle security optimizations. Yeah. So this is this has been one of the interesting things, right?
15:01
Again, as I said, it's a software. Purity is a software, we are going to find a bug, but the goal is how can we remedy those security bugs or any sort of other VR is really, really fast and that's the whole reason or if, if it's anything to do with the performance of the purity, how can we do that resolve that really fast itself from the pure one?
15:23
So the idea with the purity optimization is very simple. If we identify any issue into the customer environment, based on the predictive analytics, what we do at the pure one. So we collect your data, we see that you are running on the certain version. And based on that view, identify saying that this version has a potential issue,
15:42
we would notify you and once we notify you, you can come into the pure one, pure one service, you can see that yes, I want to do, deploy this patch onto my array. First thing you need to do is install the agent. Once you install the agent, you can opt in for the pure one service at that point of time simultaneously. And you can just schedule that fix at what
16:04
point of time you want to do it in your environment at that point of time. Once you say I'm scheduling this fix support team will go in, ask you to open the RS session for that window and then we will fix the issue right away. So I think, you know, another good example of that too was like the big log for J thing, you know, a couple of years ago, right? Like being able to push out that code within a
16:27
matter of days to mitigate all of that. So a little bit more about self service upgrades specifically, right? What are some of the benefits of this? We know our customers love the, you know, support assistant upgrades. It's a great thing to have support on the phone with you.
16:42
I've seen some disagreement here. Um you know, to be able to uh perform those upgrades together, but, you know, it does come with some, some limitations, right? Of course, scheduling and, and trying to get everything aligned between, you know, your application teams between your change, control boards,
16:56
between, you know, uh getting your maintenance windows and making sure that that alliance will support. So let me ask you a question, how much, how much time you guys have seen typically to schedule the something with the support to upgrade your fleet? A couple of weeks, two weeks. And how much time do you think that this would take to upgrade your fleet?
17:17
38 minutes? So that's the difference. You would see 38 minutes versus scheduling something with the support. You're not saying it's bad with the support. It's a great thing if you want to have a support thing. But if you want to upgrade your fleet on the regular cadence.
17:33
This is one of the tools which we are offering on the pure one and they say you. Hm. Right. Rescheduling, I mean, so the other thing too, right? For those customers that really like the support so upgrade like that kind of warm cozy feeling of having support on the phone with them. One of the questions we get is like, OK,
18:02
what if something happens? Well, support still there, right? You can still open up a tier or uh uh you know, one case, right? We're gonna be on the phone with you within minutes to get that result. So, you know, that's not really, you know, so much of an argument as it is again,
18:17
just kind of more of a convenience um to be able to do this upgrade at any time. The other thing is too, right? Ok. I've done upgrades on, you know, other storage vendors and everything. Uh the process is kind of a pain, right? I mean, having to go through, figure out. Ok, first of all,
18:32
what version do we want to upgrade to? Where do I go to get those binaries? What commands am I going to need to run on the array, all of this stuff? And so again, you know, the whole support system thing is nice. They're just going to kind of cruise through the whole thing. Well, with self service upgrades, we're doing that same thing,
18:45
we're taking that same process and it's I mean, I'll show you in the demo here how easy it is. A marketing guy can do it. I can click through and I can get that uh storage upgraded on, on both controllers. We'll do the fail overs. We'll do the whole nine yards all within pier one, right. So this tool that everybody has access to and just to add on the map,
19:03
the vision where we are driving is a fully automated upgrade. What it means today when you are trying to upgrade, you still need to be in the front of laptop to click next. Next, next the vision. What we are driving is you start the upgrade, you go for a coffee, come back in the 45 minute and the upgrade is done and you get a notification on the pr one
19:22
mobile saying that hey your notification, uh your upgrade is done and you can start using the new purity version. And, and I think, you know, also to the support level, right? If there is a problem, we're gonna open up a set one for you too. So there's a question I can sort it.
19:41
So I three reds now. Yeah. Yeah. So can you select which rep I'm gonna show you that in the demo because it's, it's when you say I wanna upgrade these three. Yes, that's correct. So right now we got an array by array in next three months, we are getting a bulk upgrade too. So if you are a customer who got 10 arrays,
20:06
20 arrays. You can select five arrays, 10 arrays say I want to upgrade all those 10 arrays you can go for, you can be in the front of the computer right now. Eventual goal is to have fully automated upgrade and then you can upgrade your fleet. So it's very flexible in the terms of one array versus 10 array. It doesn't matter for us and this isn't
20:24
something we charge extra for either. This is again, everybody here has, you know, if you're a pure customer, I should say has access to, you know, to be able to do this within pier one. So, OK, how do we know what version of purity to upgrade to? Right, we've got these uh this is actually brand new,
20:41
just went live Monday, I think or something. Yeah. So you know, up to the minute uh news here is the policy driven recommendations. So you know, to Russia's point of like getting towards that fully automated piece of it. OK. You know, before, right, you select the purity version, you kind of have to know what, what you're getting into as far as you know,
21:00
what your starting point is, what your end goal is. But what this is doing is this is trying to help you to figure out what that end goal, what that version is going to be based on your strategy for storage upgrades. Do you want to be reserved. Do you want to be, you know, that customer that's just going to upgrade and it is totally fine to be the
21:16
customer that's upgrading, you know, just when there's a security vulnerability or when that version of purity is going end of life. Cool, we have a policy for that that's called essential, right? Then on the other end of the spectrum that's proactive, I want the latest release that is enterprise ready uh for my race, that's going to be proactive and then balanced is where we see most of our customers are going
21:35
to be going and that's going to be somewhere in the middle, right? We want the long life Enterprise Ready releases, it's going to be fewer upgrades um throughout the year, right? But so what this is going to do is, you know, based on that policy, based on that strategy that you have is it's going to basically open
21:51
things up and say, OK, these are the versions of purity that we recommend that you upgrade to. And the vision is simple. Once you select the policy, we would allow you to create an scheduling into your maintenance window. You can say that I want to just kick kick, kick, start this policy at this point of time in this window, automatically, you'll get notified on your P one mobile saying that hey,
22:13
your policy has kick started. You want to start the upgrade and you say yes, I want to start the upgrade upgrade gets started and the upgrade is done. You get notified on the pure one mobile. Yep. So the the balance versus proactive is that and even versus O dot Yes. So the so yeah, is the proactive versus balance the even versus odd dot release.
22:40
So what is it odd dot Is Long Life release? I always mix them up, but either way. So proactive is basically going to be once there is a new release and it's enterprise ready, then you know, we're gonna make a recommendation or we're gonna make those versions available to you. So for flash, we are now going every month release in the flash world.
22:58
So you would see a lot of release coming up on a monthly basis. Now we would have release and short lived release. So the proactive is it's going to be like you want to be in short lived release, you want to try latest and greatest features. Sure. We would allow you to do that.
23:12
You balance is you want to be a long lived release for a long, long time. We would allow you to do the balance. So a lot of customers would use proactive in their test environment where they want to test the new features, but balance would be allowed on the production side. Does it have, does it have to be your whole? No, you can select the Yeah.
23:32
Yep. Yep. So when you schedule it, does it do pre flight stuff. Yeah, and we'll, we'll show you that in the, in the demonstration here. Um Self service upgrades. Of course, we've been talking about that. I think we'll, we'll kind of skip ahead here. We'll see all this in the demonstration,
23:47
which is right now. So with this, let's jump in and take a look at the policy driven upgrades here. So hopefully everybody can see. Um So to get started, right, we've got that step up authentication, that second factor of authentication, which today is via S MS.
24:03
Um So to enroll in this, of course, I need to be an administrator for the self service upgrades. Um But I'm going to enroll in all of this and basically, of course, my screen is cut off here. So I'm just going to add my mobile number to this, right? We need to send that text message to uh to something.
24:20
So I'm gonna roll my mobile device here. We're gonna send a code out to the email, enter that code, continue and then we're going to do a test, send out an S MS to my phone, right? Pretty basic stuff here. But that's the enrollment process, right? It's that quick.
24:34
Um You know, really, really easy to uh to enroll in. So jumping into the software life cycle, of course, once we get in here, I'm gonna have to out a little bit. So sorry. Um Once we get in here, of course, you know, we've got the new screen telling us about the different policies, everything that we just mentioned.
24:50
Um But what I can do is in here say I've got my two arrays that I want to maybe look at upgrading, right? So going down here, look at the models, these are both model MS I've got AM 20 over here. And then this other ray is an M 20 R two. Well, both of these are on the essential policy, right? This is that most restrictive policy for just,
25:12
you know, again, those critical critical updates. So for example, with this array, there isn't, I'm on 636 there isn't a recommended version. You're fine, right? There's no security, major flaws or anything like that, you're still supported. So that's OK.
25:27
We're gonna add something. No, OK. No good. So let's say because these are kind of, you know, older arrays, maybe I want to take these out of production, put these into my lab so I can test out the latest and greatest features. So what I can do is under the actions here, right?
25:39
We get a whole bunch of actions. I can run my health checks across multiple arrays. I can do that simultaneously. The cool thing about the health checks is we're running this against the information that we have. You see the check type cloud right here, right?
25:53
So we're actually using the data, the phone home data that we already have within pier one to do these health checks. So, you know, even as you're just starting to think about doing these upgrades, you can go ahead, you can run this across, you know, multiple arrays all at the same time, we're not touching the arrays. There's absolutely no impact to them whatsoever. And this will give you a good idea of like,
26:11
ok, is there a lot of, you know, work that needs to be done before these uh before I perform these upgrades? And of course, you download the packages and you know, request an assisted upgrade if you really want. But in this case, we're going to change the upgrade policy.
26:22
So here's where we can get pretty granular granular, right? I can select one array or in this case, I want both arrays and I want these to both be in the proactive policy, right? So once I select that, now I'll accept this change and now I, you know, I've opened it up to the latest 6645, right?
26:42
So let's say for this particular array. Cool. Yep, great. Let's get that upgraded. The other one already has a target version of 645. We don't need to go through and do that. Um But now we can run the health checks, right? So I'm gonna run it across both arrays at the same time and you can see here. So for this upgrade,
26:56
right? Because we're on two different versions, we want to get them both to 645. Well, we've got the upgrade path right built in because it's going to be a multi hop upgrade. So we're gonna go from, in this case 63663 11 to 645. Right? And we're gonna do this serially, right?
27:10
We're gonna, we're gonna actually go through both upgrades here. Um So I've run the health check. This array looks healthy, everything is passed. We're looking for things like multi pathing. Do we have enough space on the, on the controllers for the binaries? All of that stuff? We're doing all of those checks and I can even
27:27
export this too. Say there was a finding or something and I want to send this to, you know, whatever stakeholder I need to send this to or maybe send it to change control board that yes, we perform these checks, right? I can actually email this directly from, from within one. Now, this array on the other hand, we've got a critical problem and the issue here is that ok?
27:48
There's not enough space. We need 20 gigabytes worth of space. We've only got eight or nine available on this particular controller. So best thing to do open up cale support, get that cleaned up and perform that upgrade. Now, mind you too, if we do end up like finding a critical issue or something like that and open up a support case, you're actually gonna see the uh case number under the status column
28:11
here uh as well. So you'll know um you know, there was an issue there. So with this, let's just go ahead and we'll get this one other array upgraded. Yes, sir. Warming like multi, multi maybe I have one of my sp coming down.
28:30
I don't care. Whatever is a, I don't care. Normally when you, they tell you, I, I see this what we want to do it, they ignore it and they do it, they great. It, it's the same thing. So if you were to ask you, do you wanna go ahead with this and we can ignore that.
28:47
Yep. So, so the question was, if there was a finding, can we just ignore that? And yeah, of course. Yeah. Is there another question? Yep. Yep. Is there, is there partition space for the Os file? Yeah. So that's all in that uh V uh folder within the controller.
29:05
So let's continue with the upgrade here. I was gonna run through. We're gonna agree and we'll do the step up authentication to get, you know, anything that uh we do to kind of touch the array, we want to be uh secure, right? Make sure that I am who I say I am. According to my name tag, that's my pocket. I am.
29:21
So let's go ahead and continue through here and again, we've got that multi hop upgrade, right? So this is uh this is pretty slick what we're going to do is now that I've got the um you know, my, my step up authentication here, we're actually going to perform the upgrade precheck. Uh We've actually last up, we just downloaded the binaries automatically,
29:40
right? I don't need to go out, I don't need to find that stuff. I don't need to upgrade it or upload it to the array. Right. We're handling all that through the P one edge service. So with this, right, again, view the results throughout this entire process right before we kick this off,
29:53
we're going to use the on array uh information, right? We want to get the absolute up to the second information to perform another health check here just to make sure we are absolutely good to continue with this. And so we do this at the beginning of the upgrade, we do this after the first, the secondary controller is upgraded and then we do another one at the end and because we're
30:13
doing a multi hop upgrade, we're going to have even more, but we recommend, you know, definitely check these out too, just, you know, along the way it takes two seconds to scroll through. Yep, pass everything looks good. So let's go ahead and we're going to start the upgrade.
30:26
So to Russia's point about automating everything, right, right now, we're kind of we're taking a conservative approach to this and there are certain, you know, stops along the way where we just want you to have your hand on the kill switch as it were. So, you know, before we perform that first upgrade, we want your Vaid that we're ready to go, we're going to perform everything.
30:46
We're going to upgrade the secondary controller, we're going to reboot it. The new version of purity is going to come up and now we're going to perform another check. Right. So that secondary controller has been upgraded, we perform the checks here again. Great idea, check, uh check the report and then we can continue on to the next step here.
31:04
And now before we perform that fail over, right again, another check, just make sure, hey, we're good with this upgrade. Let's go ahead. Continue. We're going to perform the same thing, right? So now both controllers are on 63 11, right? Again, another check,
31:19
check it. Great. Cool. Everything looks awesome. And we go ahead to the next step. So again, because it's a a multi hop upgrade, right? We're going to upgrade secondary controller fail over, upgrade the new secondary controller. Then we're gonna go do that, that secondary upgrade, right? So, ok, let me ask you this question.
31:37
If we deliver such kind of a thing where you can see, continue on your one mobile. Will you guys be using it? Raise your hand if it, it would be interesting for you just to get notified on your mobile application. This is the guy to ask for that stuff.
31:53
Yeah, I like, yeah. Yeah. Yeah, very cool. Um So yeah, so it's going to be basically more of the same, right? We're gonna go through, we're going to do that upgrade, that multi hop upgrade here until the entire thing is complete. And again, guess what? There's another report.
32:09
Yes, sir. Question need to have a, can you have your own delay for the controller upgrade? Not right now at this point of time, actually, let me, I would need to get back to you on that one. Uh I don't know the answer to that question. I will need to check on the current delay. I'll get back to you on the delay.
32:34
So then once everything's done right, we've got another report here. Just say, hey, everything looks good. I can send this along to change control board or whatever whoever might need this report. Just say, hey, this has been finished, right? We're now running 645 on this array. So kind of, you know, again, really take things from, from the start of like knowing what
32:51
version of purity to upgrade to and then all the way to actually helping you to get to that version. So just to add on the customer base, we got more than 500 plus customers using pure service today. The number is growing just crazily. We almost got more than 3000 Rs just getting upgraded by cell service upgrade in in just a
33:12
couple of months. So more and more customers are leveraging this feature itself on the pure one. Yeah. So part of the yes be yes if I sit down, yes, another question. So what if pre checks are successful?
33:40
But something may still happen. We have a system. So if all the precheck pass and that something happens during the upgrade, I lost the last part of that. So we rolled back to the previous version and we would also allow you to create the 71 support ticket right away.
34:04
So it roll back. You need to say that you're rolling it back. So you need to Yeah, exactly. Yes, cool. Um So another thing kind of outside of the whole pure and service, but we still want to talk about it because we, we're, we're gonna be bringing this very soon. Um Who are I using safe mode?
34:24
Awesome, cool. You guys will love with us. New feature would be Yeah. So, you know, it's kind of fitting to talk about this as we're talking about, you know, working with support and you know, ways to kind of streamline things for you all is of course trying to make any changes to safe mode, right?
34:40
If we wanted to say disable safe mode or we wanted to change our eradication way, reduce it, right? So just to add on what matt says to today, if you want to disable your safe mode, the process says you call support, you have a Google pin authenticator, you share that you need to be on the Zoom call with the multiple people and then support would disable it three people.
35:02
Now we are automating that process in the pure one and trying to deprecate that pin with all the things which we are building with a step of authentication and multi party approval in the pure one. So that's the thing you guys are going to see. Exactly. So yeah, so new role within pure one, it's the um the approval role here. I'll show you a quick demo of those two.
35:24
Um But yeah, exactly. So once, once an administrator makes a request to change something in safe mode, uh instead of having to call and support, have multiple people on that call, right? The we need at least two approvers for each org, right? And then those approvers are going to go into tier one and they're actually going to click
35:41
approve and then schedule that time with support support still needed to make those changes, right? But we're going to basically open up a window, schedule time with support, open up the remote assist so that they can go in and they can make those changes. But the whole, you know, approval authentication kind of process is handled and the eventual vision which we are
35:59
driving right now support still needs to disable it. So you need to still schedule the call with the support. You would see that eventually, once we integrate this with the pure one service, there's no support help needed. At that point of time, you as a customer can go through all the process and just disable your safe or enable
36:18
safe more by yourself. On the one question on just the upgrade process, this is a roll back and uncommon thing. Is it roll back an uncommon thing. Hey, when you say roll back is an uncommon, it's like most of the time we have seen the role. Yeah, roll if the issue, we we have seen very,
36:40
very less customers seeing the issue when they are upgrading and when they are seeing an issue, the rollback happens. That's the only scenario we see in the terms of a roll back. Other than that, we haven't seen anything right now where customers saying that I want to roll back, we don't allow roll back saying that once you upgrade it to the latest release, now I want to go back to the old.
37:02
Yeah, we have seen, yeah, it's not, we have seen very, very less in the terms of an uh roll back where customer had to do roll back and actually call support just to give you data. Uh on an average, let's say if we did 300 upgrades, 333 of them, customer would need to reach out to the uh support.
37:23
So it's like around one person where, where they would require a roll back or some customer support help. Do you have any for the same safe more coming up very soon in a month. Yeah. Yeah. So in a month when you log in into tier one and you try to make changes within safe mode,
37:46
I, I'll show you the, the, you know, where we can do that. Um But you're going to get this notification saying, hey, your organization's noncompliant. What do we do? Well, you know, this basically just means you need those two approvers uh you know, set up within your organization.
37:58
So very simple, right? As an administrator, I can go in and this was just for the initial set up, right? I can take these two users here. I could say Lucy give her the new role of safe mode approver, click save and then we're done there, right? And then same, let's do the same with Miroslav. We're going to give him access to safe mode
38:17
approver and then that's done, right? So now I've got two approvers on my account. Again, this is just for the initial set up. Um But then once I go into the appliances, right? Here's where I can go to actually request those changes is, you know, click on the shield in my appliance view for this uh particular array,
38:32
say I want to make a change to safe mode and we're ready to go, right? We don't have that notification. In fact, there's actually gonna be a big banner uh that's gonna show up with pure one to say that hey, you're not compliant. Just get this set up or get at least two approvers. You can have more.
38:46
I know there's a maximum but you can have more than so right now we are starting with minimum of two safe approval. Eventually it would be an end number of configuration. So you can decide saying that I want three, I want four, I want five. So minimum two would be always persisted
39:01
because we want to support multi-party approval process in the pr one. So we've got multiple organizations. OK. This organization, I'm sorry. And they can't prove for each other right now it's going to be per organization. That's what we are starting with in the future. We are coming up with the entire new
39:30
strategical way, how the multiple arts are going to be interacting with each other. At that point of time, we have a gold single user safe for approval can be part of a multiple organization and can approve it. Yeah, so it's up to the customer. So we want to give that flexibility per organization or per multiple organization. We don't want to limit that to the customer.
39:52
Yes. So, 01 more question is there's still uh some sort of process to make sure the N fa for that individual is correct. And it's right. Yeah. So, so basically what we do is when customer register for the M fa enters the phone number, we send the one time OTP to the phone number and then the device is registered on the pure one.
40:15
We are coming up. Next is with the TOTP, which is a time based OTP authentication where you install an application like Google authenticator on your phone and the new device or new code would be generated every 32nd. So in order to register or be registered as a admin or safe approval, you need to enter one time code before you can do any sort of an action in the in the pure one.
40:41
So within here. So we've got our change here, we want to disable safe mode. I can do this across multiple appliances. Of course, we have per protection group, per safe mode. I can configure all that within here. So let's say, you know, this is basically me opening up a support case saying here's all the things that
40:55
I want to do, right? And then I can go in and I can actually schedule this with support, right? Again, we need support to go in and make these changes for us. So once I click, continue in here. Now, if I log in as Lucy is one of the uh approvers within here, um We're actually going to have a uh where is it over here on?
41:15
Oh, because my screen is cut off here. It's all the way down here on requests, right? So I don't see anything here. Well, what gives, well, we're actually limiting the approval process to uh what is it within a couple of days of the approval? You know, we need admins to go in and, and make that approval.
41:33
So we're, we're, you know, basically asking for this at the end of the month, we we need, you know, more time. Um you know, we want to get closer to that date to actually do the approval. So let's go back in and we're going to take a look at another array and in this case, we've opened up a new request here that is this week or I guess in this case,
41:52
last week when we captured this demo. So, you know, as Lucy, I can go in and I'm going to see, you know, the approvals down here, there's a pending request right highlighted here in red as an approver. I can go ahead in and I can approve this change. I'm going to enter my one time, uh my step up authentication, click continue and now it's
42:10
pending, right? So now we're still waiting for your slop to go ahead and make that approval. But once he does, hey, it's approved and now support can go in, you know, we've got that schedule to how do you make that change? So yes, so you, you would have a notification email where you say that that your approval is
42:35
pending at this point of time. That's a good, yeah, agree. Yeah, yeah. Yes. So, all right. So let's jump into pure fusion, right? The last use case for um the Pure One Ed
42:54
services as it is today, right? Lots more coming. Um so Pure One Fusion, everybody here pretty familiar with, with this product. All right. Ok. Anybody here familiar with this process of provisioning volumes, right? We need to make sure we get the capacity.
43:10
Make sure we're placing, you know, once the customer requests request some capacity on our rates, right? Make sure we're placing it on the right device that has enough capacity. Make sure we're provisioning that storage, we're approving, we're scheduling everything, you know, this whole process, right? It kind of looks more like a board game.
43:29
So I mean, it's kind of kind of a pain in the butt, right? But from within a pure fusion perspective, we're kind of thinking about like, ok, so how do we start to operate a little bit more like a cloud provider? How do we automate this? So that way we're not having to manually take in those requests to provision that storage and we can actually automate that whole process
43:46
from the decision making side of things to deciding where that volume should live. And I'll show you that we'll talk about that in just a second here, all the way to the actual provisioning on that array and then completing that request, user can actually request all of that themselves. We've streamlined the entire process.
44:03
So from a pure fusion perspective, right, we're treating your entire storage fleet, all of your arrays as a big pool of storage. Right. Again, we're going to be looking at placement, making sure it's getting placed on the right arrays. And then, you know, if you need to scale out or anything like that, you can bring more arrays into, into your availability groups within pure
44:24
fusion or if you obviously expand your capacity. And then of course, we do support cloud block store as well as your on prem storage. So the rapid deployment here where it's kind of doing storage as a code. I'm not a pure fusion expert. Um But um you know, we're, we're basically delivering the API S for you to be able to uh uh to automate all of this.
44:47
Um and then the utility workload management. So we are using the pier one meta. This is the whole A I engine behind pier one that's doing that decision making saying, OK, I know that, you know, this is the workload, what's going to be the best array for us to place it. Um So, you know, we'll do that decision making, but we can also do migrations, right? We can continuously like rebalance our
45:09
workloads across our pools of storage too, like we can do that within uh you know, pure ones again making that decision making and fusion is carrying it out. Now, if you're like me and don't have a whole lot of experience with fusion, you can actually take this for a test drive. This is brand new that we're we're pulling out here. So that way you can actually get your hands on
45:27
with this, right? And see how it can work with if you're using Terraform, if you're using answerable, if you're using Python, right? See how we can integrate into uh into your storage at a nice um clean, you know, test environment, go try this out, right? Test drive is free so you can go check this out.
45:43
Those will be taking pictures giant QR code. I hope this works for you all um to go ahead and you know, learn a bit a little bit more about the test drive here within pure fusion.
