Software requirements for purchasing software for the Bulten group
为 Bultengroup 购买软件的软件要求
This document shall be used to compile requirements of IT equipment to be purchased within operations
本文件将用于汇编业务活动中需要采购的信息技术设备的要求。.
The document describes our requirements clearly, suppliers need to fill in the check list of appendix after read over “Bulten – Software requirements for purchasing software for the Bulten group”.
文档清楚地描述了我们的要求,供应商需要在阅读 "Bulten - 为 Bulten 集团采购软件的软件要求 "之后,填写附录 中的检查清单。
In the procurement of systems to be used within the Bulten group the following requirements are to be acknowledged and a note made of software that does not meet the following requirements
在采购 Bulten 集团内部使用的系统时,应注意以下要求,并注意不符合以下要求的软件.
Client Environment
客户环境
The Bulten client environment consists of the following standard software
Bulten 客户端环境由以下标准软件组成
The following operating characteristics must be followed
必须遵循以下运行特性.
Microsoft Windows 10 Enterprise x64 version 21h2 onward
Microsoft Windows 10 Enterprise x64 版本21h2 起。
Microsoft Office LTSC
Adobe Acrobat Reader DC
Microsoft Edge Chromium
Microsoft. NET 4.8
微软.NET4.8版本
IPV6 aware
IPV6 感知
VPN access if necessary by Microsoft DirectAccess
如果需要MicrosoftDirectAccess 的 VPN 访问,请使用DirectAccess 。
Distributed File Services (DFS)
分布式文件服务(DFS)
DNS (CNAME,FQDN)
Software needs to be installed under C:\program files not on C:\
软件需要安装在 C:/program files 下,而不是 C:/ 上。
For Java and Log4j, at least version 2.3.2 (for Java 6), 2.12.4 (for Java 7), or 2.17.1 (for Java 8 and later)
对于 Java 和 Log4j,至少需要 2.3.2 版(适用于 Java 6)、2.12.4 版(适用于 Java 7)或 2.17.1 版(适用于 Java 8 及更高版本)
Chapter | Client Environment | Approved |
Comment |
Software
软件
Software must not require local admin rights
软件必须不需要本地管理员权限。
Software that requires installation as services must either use the local system account or a domain account that starts the service. This must be documented
需要安装为服务的软件必须使用本地系统帐户或启动服务的域帐户。
No local users accounts are allowed or used in the server and client environment
不允许或在服务器和客户端环境中使用本地用户帐户
Installation and deployment of software should be possible through packaging and distribution with Microsoft SCCM and clear installation and packaging instructions must be included in the software delivery.
软件的安装和部署应通过打包和使用 Microsoft SCCM 进行分发来实现,并且必须在软件交付中包含明确的安装和打包说明。
Software must be IPv6 aware and able to connect through the FQDN using Microsoft DirectAccess
软件必须支持 IPv6,并能使用 Microsoft DirectAccess 通过 FQDN 进行连接.
As standard we are using https and encryption between client and servers.
作为标准,我们在客户端和服务器之间使用 https 和加密技术。
All drivers and DLLs must be signed.
所有驱动程序和 DLL 都必须签名。
LDAP communications must be encrypted.
LDAP 通信必须加密。
Only TLS1.2 or higher are approved (TLS 1.1 and lower are insecure)
只认可 TLS1.2 或更高版本(TLS 1.1 或更低版本不安全)
All on-prem and Cloud applications need to have an export data functionality
All on-prem 和云应用程序需要具有导出数据功能。
Chapter | Software | Approved |
Comment |
Server Environment
服务器环境
The Bulten server environment consists of a standard hardware setup where servers operate in a virtual environment using virtualization software. We strive to have as few servers as possible and follow a set standard in our server environment. The Bulten group go to great lengths to ensure that purchased applications do not required their own server. In cases where this is considered necessary, it should be made clear prior to procurement and distinct reasons why should be stated. If you wish to deviate from the minimum requirements below, you must clearly inform why and what deviations are necessary. Software need to be installed under C:\program files or D:\program files not on C:\ or D:\
Bulten 服务器环境由标准硬件设置组成,服务器在虚拟环境中使用虚拟化软件运行。我们努力减少服务器数量,并在服务器环境中遵循既定标准。布尔登 小组竭尽全力确保购买的应用程序不需要自己的服务器。如果认为有必要这样做,则应在采购前明确说明,并说明明确的原因。软件需要安装在 C:\program files 或 D:\program files 下,而不能安装在 C:\ 或 D:\ 上。
The environment consists of a minimum of:
环境至少包括:F
Microsoft Windows Server 2019 X64 or higher
Microsoft Windows Server 2019X64 或更高版本。
2 * 2GHz CPU
4GB RAM
4GB 内存
Microsoft. NET 4.8
Microsoft.Microsoft.NET 4.8
IPV4 and IPV6 aware
IPV4 和 IPV6 感知
Necessary access performed via FQDN and not the IP address
通过 FQDN 而非 IP 地址进行必要的访问
IIS 10
External access available via Microsoft DirectAccess
提供外部访问通过 Microsoft DirectAccess
The environment consists of a maximum (in the central environment. Local environment have larger restrictions)
环境包括最大值(中央环境。地方环境有更大的限制)
Microsoft Windows Server 2019 X64 or higher
Microsoft Windows Server 2019 X64 或更高版本。
4* 2GHz CPU
64GB RAM
Microsoft. NET 4.8
Microsoft.Microsoft.NET 4.8
IPV4 and IPV6 aware
IPV4 和 IPV6 感知
Necessary access performed via FQDN and not the IP address
通过 FQDN 而非 IP 地址进行必要的访问
IIS 10
External access available via Microsoft DirectAccess
可通过 Microsoft DirectAccess 进行外部访问
Chapter | Server Environment | Approved |
Comment |
Disk Storage
磁盘存储
Storage is handled centrally through the SAN. Disk usage and type of disk should be specified when ordering. The Disk Utilization is to be calculated with reasonable calculations and should not be estimated
存储通过 SAN 集中处理。订购时应指定磁盘使用量和磁盘类型。磁盘使用率应通过合理的计算得出,而不应通过估算得出。.
If you need additional disk Bulten IT provides the opportunity to expand the disk however a reasonable initial estimate should be performed and growth calculations present with initial order
如果您需要额外的磁盘,Bulten IT 可为您提供扩展磁盘的机会,但应进行合理的初步估算,并在首次订购时提供增长计算。.
Chapter | Disk Storage | Approved |
Comment |
Security
安全
When systems require security access, the Bulten group is to be consulted on appropriate security measures. The security requirements of the software should be clearly described in the underlying material for the purchase of the software and clearly documented in the manual.
当系统需要安全访问时,Bulten 小组应就适当的安全措施进行咨询。软件的安全要求应在购买软件的基础材料中明确说明,并在手册中清楚记录。
The group has a clear and preferred process with regards to security and this should be implemented where possible.
小组在安全方面有明确的首选程序,应尽可能予以实施。
Chapter | Security | Approved |
Comment |
Computers in production
生产中的计算机
The company prefers Bulten standard Hardware, Operating System and setup be used for machines in production. This enables easier manageability and support from the internal IT organization.
公司希望生产中的机器使用Bulten 标准硬件、操作系统和设置。这使内部 IT 组织更易于管理和支持。
Whenever possible, company internal setups should be used. When this is not possible, extensive information regarding why such an implementation is not possible.
应尽可能使用公司内部设置。如果不可能,则应提供大量信息,说明不可能实施的原因。
The company internal setup depicts that
公司内部结构显示
All computers have a standardized computer name defined by the naming convention
所有计算机都有一个标准化的计算机命名约定所定义的名称。
All computers have a supported operating system defined and approved by Bulten IT
所有计算机都有由Bulten IT定义和批准的支持操作系统。
No operating system defined as or near “End of mainstream support” by vendors is permitted
不允许使用定义为 或接近 "主流支持结束 "的y 供应商的操作系统。
Bulten standardizes on Microsoft Windows platform.
Bulten 将微软视窗平台标准化。
All computers are installed with standard applications from Bulten
所有计算机都安装了 Bulten 的标准应用程序.
All computers are certified Bulten by a certificate depicting these are Bulten PC:s
所有计算机都经过Bulten 认证,证书显示这些计算机是Bulten PC:s 。
All computers are joined to the Bulten domain
所有计算机都已加入Bulten 域。
All computers are maintained with automatic security updates and yearly IPU (In place upgrade).
所有计算机都有自动安全更新 和年度 IPU(到位升级)。
All computers have an active, valid and up to date antivirus approved by Bulten
所有计算机都装有经Bulten 批准的有效的最新杀毒软件。
All users are standard domain users.
所有用户都是标准域用户。
No users are administrators on their computers
没有用户是其计算机的管理员
In most areas there is a definite requirement from sites to not permit internet connection from production PC:s
在大多数地区, 网站要求不允许从生产 PC 连接互联网:
No data is stored locally on computers – important data is stored on servers
不在本地计算机上存储数据 - 重要数据存储在服务器上
A clear and concise installation instruction is required for the event of a computer crash.
在计算机崩溃时,需要有简明扼要的安装说明。
Bulten may provide a VMware Workstation for high-risk production computers. The production computer will act as a virtual computer inside a Bulten PC. An initial “snapshot” will be created as a backup. The local production staff is responsible for ensuring relevant backup procedures are in place for the virtual computer.
Bulten 可为高风险生产计算机提供 VMware 工作站。生产计算机将充当 Bulten PC 中的虚拟计算机。将创建一个初始 "快照 "作为备份。本地生产人员负责确保虚拟计算机的相关备份程序到位。
A virtual computer, regularly backed up, may be transferred to other hardware in the event of a hardware failure. It is not guaranteed that the system will work due to licensing software etc that IT has no control over, however there is a higher chance of a faster recovery to normal state with this setup.
定期备份的虚拟计算机可在硬件发生故障时转移到其他硬件上。由于许可软件等 的原因,IT 部门无法控制这些软件,因此不能保证系统一定能正常工作,但通过这种设置更有可能快速恢复到正常状态。
Chapter | Computers in production | Approved |
Comment |
Non-Bulten Standard Equipment
Non-Bulten 标准配置
PC:s or PLC equipment not delivered by Bulten are not permitted to be connected to Bultens network
PC:非由Bulten交付的 PC 或 PLC 设备不允许 连接到Bultens 网络。
Such units may, after approval from the central IT department, be permitted to connect to a firewalled and isolated environment only accessible via Internet via an Ewon Industrial VPN router.
S这些单位在获得中央信息技术部门的批准后,可以 、 允许连接 到 防火墙和隔离环境,但只能通过 n Ewon 工业 VPN 路由器。
These systems are not accessible inside Bultens Network
这些系统无法在Bultens 网络内访问。
Bulten has a central license of Talk2M, all Ewon routers that shall be connected to the Bulten environment "Must" have a Bulten suppliers account.
Bulten 拥有 Talk2M 的中央许可证、所有Ewon 路由器应连接到Bulten 环境 "必须 "拥有 Bulten 供应商帐户。
All equipment that needs access to Bultens infrastructure and/or IT support must follow the procurement guides in the company and involve central IT prior to procurement for “a tick in the box” approach to having all departments on board. If such approval is not sought and approved the hardware must not be connected to Bultens network.
所有需要访问Bultens 基础设施和/或 IT 支持的设备都必须遵循公司的采购指南,并在采购前让中央 IT 部门参与进来,以 "打勾 "的方式让所有部门都参与进来。如果没有获得批准,则不得将硬件连接到Bultens 网络。
Any supported operating system not fulfilling Bulten standards described in this document may be installed in a hosted environment within VMware Workstation if the above approval is received prior to the procurement process . It is not permitted that the virtualized computer access Bultens network, however, the host will be connected to Bultens network and updated according to corporate standards.
任何支持的操作系统不符合Bulten 标准 本文档中描述的标准可能 在托管环境中安装 在 VMware Workstation 中,前提是在采购流程 之前获得上述批准。 不允许 虚拟计算机访问Bultens 网络、 无论如何,主机将连接到Bultens 网络,并根据公司标准进行更新。
A folder may be shared between the host and virtual computer to ensure relevant data may be copied and/or backed up from the device. IT will advise on such a folder, however production is responsible for performing any backups of production equipment and/or computers. Backup instructions must be included in the procurement process.
主机和虚拟计算机之间可以共享文件夹,以确保可以从设备复制和/或备份相关数据。IT 部门将就此类文件夹提供建议,但生产部门负责执行生产设备和/或计算机的任何备份。备份说明必须包含在采购流程中。
If any procurement is required in the company for PC:s connecting to the corporate network, the above requirements alleviate cooperation into approving computers in the network.
如果公司需要采购连接到公司网络的 PC,则上述要求 可减轻 在批准网络中的计算机方面的合作。
Computers that do not comply with the above will not be permitted on the Bulten network as a security precaution.
作为安全防范措施,不符合上述规定的计算机将不允许使用Bulten 网络。
Chapter | Non-Bulten Standard Equipment | Approved |
Comment |
Backups
备份
Software should not keep files open so as to facilitate backups.
软件不应为了方便备份而保持文件打开状态。
It must be clear IF and WHAT to be considered for backup purposes.
必须明确 IF(如果)和 WHAT(什么)将被视为备份目的。
It must be clear how long backups should be kept for the system.
必须明确系统备份的保存时间。
If there is a need to deviate from the daily backup procedures (ie storage 2 weeks for non-business) this must be clearly stated, and the reason of deviation well motivated.
如果需要偏离日常备份程序(即为非业务存储 2 周),必须明确说明,并充分说明偏离的原因。
Chapter | Backups | Approved |
Comment |