[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2024-12-21(UTC)"],[],[],null,["# VMware Engine shared responsibility model\n=========================================\n\nThis page describes what you, as a Google Cloud VMware Engine customer, are responsible\nfor and what Google is responsible for.\n\nIntroduction\n------------\n\nTrusted security in Google Cloud is achieved through the shared responsibilities\nof customers and Google as a service provider. This model is intended to provide higher security and eliminate single points of failure. The following sections list the responsibilities by role.\n\nGoogle's responsibilities\n-------------------------\n\nVMware Engine service elements:\n\n- Deploying and lifecycle management of hosts and management services in a private cloud\n- ESXi patch and upgrade\n- vCenter Server patch and upgrade\n- NSX patch and upgrade\n- vSAN patch and upgrade\n- HCX - initial installation, configuration, and monitoring of HCX\n- Backup and Restore of management services (does not include customer workloads)\n- Backup and Restore vCenter Server\n- Backup and Restore NSX Manager\n- Replacing failed hosts\n- Maintaining adequate capacity\n- Acquiring and maintaining industry and regulatory compliance certifications for Google-managed services and infrastructure\n\nPhysical infrastructure elements:\n\n- Physical infrastructure\n- Google Cloud regions\n- Compute, network, storage (deployment \\& lifecycle)\n- Rack and Power Bare Metal Hosts and network equipments\n- Acquiring and maintaining industry and regulatory compliance certifications for Google-managed services and infrastructure\n\nCustomer's responsibilities\n---------------------------\n\n- Deploying VMware Engine private clouds\n- Network range for management appliances and resources\n- Configuring private cloud networking and security\n- Configuring VMware Engine firewall, regional settings, client VPN, and external IP address allocations\n- Configuring NSX based firewalls, VPN, and NAT settings\n- Provisioning NSX segments\n- Deploying and managing Virtual Machines\n- Installing guest operating systems\n- Patching guest operating systems\n- Installing and managing antivirus software on customer environments and workloads\n- Installing and managing backup software on customer environments and workloads\n- Installing and managing any configuration management\n- Migrating Virtual Machines to VMware Engine\n- Migration tools\n- Capacity planning \\& reservations\n- vSAN KEK encryption key lifecycle (KEK rotation)\n- vCenter and NSX user management (identity, access control)\n- HCX - lifecycle management of HCX Cloud and service appliances like HCX-IX Interconnect\n- Acquiring and maintaining industry and regulatory compliance certifications for customer environments and workloads\n\nWhat's next\n-----------\n\n- [Security bulletins](/vmware-engine/docs/security-bulletins)."]]
