Modular Server Vaulting

Many of the major server equipment manufacturers have recently been marketing the concept of a “data center in a box,” which is a shipping container filled with their IT equipment to create easily transportable data center modules.  This concept does have some advantages over traditional data center facilities, such as mobility, scalability and compact size.  However, these high-density modules are very much at risk of being damaged or destroyed by fire, intrusion or even adverse weather conditions.

To address these threats, Firelock has created the Secure Agile Vault Environment, or SAVE solution.  By using a 40-foot shipping container and installing a Class 125 data vault a much more secure environment is provided for mission critical systems.  The vault ensures that IT equipment will be kept safe even if exposed to the heat of a catastrophic fire.  Physical security is also greatly improved with the double door assembly.  The vestibule area in the front of the container allows the container to be sealed before opening the vault doors, so even the worst weather conditions are not a threat to the valuable servers.  The on-board mechanical room behind the vault contains the HVAC system, so only power and network communications need to be supplied to the SAVE unit.

Firelock has taken a vendor-neutral approach to the mobile data center module concept.  Eight standard server racks are in place and ready for any hardware manufacturer’s equipment.  To cool these racks the Vette LiquiCool Rear Door Heat Exchanger system is utilized.  This efficient and compact cooling system uses the airflow from the server units so no power needs to be supplied to these economical and maintenance-free units.

For more details about the SAVE by Firelock, click here for an illustrated presentation: http://www.youtube.com/watch?v=EFQ9bOuQub4

One of the most difficult aspects of server room design is managing the temperature inside this critical area.  As the density of server racks increases and the heat generated by the IT equipment escalates year over year it is no wonder data center designers must consider their cooling options carefully to maintain optimum server room temperatures.

One option we have found to be an excellent solution in high density data centers is the Vette Corporation line of rear door heat exchangers for server racks.  These systems cool the exhaust air from server cabinets before they enter the airspace within the server room by circulating chilled water through the unit.  Because this design utilizes the airflow from the fans in the server equipment there is no power consumption from the cooling units, resulting in significant operating cost savings.

To protect against ambient heat, especially in hotter climates, the R-33 insulation rating of Firelock vaults is a major advantage in maintaining the correct server room climate.  All cooling system penetrations in Firelock server vaults, such as for coolant lines and ducted air, are specially designed and installed to prevent the heat from a fire from damaging or destroying the most critical area of the data center.  And of course the vault structure and doors are capable of maintaining the temperature below 125-degrees F. for at least two hours (up to four hours in larger server vaults) even if the outside temperature reaches 2,000-degrees.  Heat must be held below this critical threshold to protect the IT equipment and the vital information it holds.  After all, mission critical data centers must be protected from all threats–from within and without.

When most people think about security for the data center, the focus is on firewalls that keep hackers out of the network.  These countermeasures are absolutely essential for protecting the data hosted on the network.  One issue that isn’t emphasized enough is the need for physical security–keeping unauthorized personnel and other intruders out of critical areas in the data center.  The server room is especially vulnerable and in need of extra security, due to the value of the components in the server racks and the information they contain.

Electronic equipment must also be protected from heat exposure.  Fortunately, improved physical security is a beneficial by-product of the modular fireproof server vaults by Firelock.  The wall and roof panels used in the construction of these vaults is not specifically designed to stop intruders (these vaults are capable of maintaining interior temperatures below 125-degrees F. for two to four hours, depending upon the size of the vault, even if the fire outside the vault reaches 2,000-degrees F.) but it would take a significant amount of time to breach them.  If a motion sensor or other intrusion detection system is installed outside the vault area, this extra time gives security personnel or the police a chance to arrive before the server room is compromised.

The double door system is another major improvement to physical security in the data center.  The outer door is an 1,100-pound fire door with a combination lock.  When the door closes it automatically throws 10 steel bolts into the locked position in the steel door frame.  This would be a very difficult door for an intruder to open after the combination lock is engaged.  The inner door is a steel door with a conventional door handle and lock that is often converted to a magnetic lock that can be activated by swipe cards or biometric access control systems.  These electronic lock systems are ideal for controlling access to the critical vault area during business hours and keeping track of authorized personnels’ entry and exit times.

With all the threats to IT operations that exist in the world, it’s a distinct advantage to have one integrated part of the data center that can protect against both fire and intrusion.  Vaulting the server room with a modular data chamber protects mission critical data both ways.

When  comparing the specifications for fireproof server vaults, there is a distinct difference between the ASTM E119-00a testing standards found in the U.S. market and the EN1047-2 standard that dominates Europe, Asia and South America.  For example, the American test requires a five-hour fire test, with a blast furnace heating the vault to over 2,000-degrees F. to measure how long a vault structure can maintain temperatures below the critical 125-degrees F. threshold.  The same vault structure must then be exposed to a hose stream test to ensure it still has the structural integrity to resist the pressure of fire fighting efforts around the vault.

In contrast, the EN1047-2 test procedure only requires the vault structure to be exposed to heat from the furnace for one hour, after which the furnace is turned off and only the residual heat in the test area remains as the source of elevated temperatures outside the vault.  Even more surprising is the fact that a new vault structure is then used for the hose stream test, rather than the one that was exposed to heat.  Most fire testing experts agree this is not an accurate procedure to test real world capabilities.

Because of these different test procedures, Firelock vaults are designed and constructed very differently from those that are designed to meet the EN1047-2 requirements.  Every component of Firelock vaults is capable of meeting the Class 125 rating required to protect electronic equipment and the data stored within.  The European-spec vaults have some fire protection value in the vault structure (though not as robust as the ceramic fiber-core panels utilized by Firelock) but the other components are far from meeting the Class 125 rating.  For example, the EN1047-2 spec requires a single door with an outward swing and a “crash bar” opening mechanism to speed egress from the vault area.  The door is not much different than a standard steel commercial door, and it is not unusual for them to have windows.  Needless to say, this is a far cry from the Class 125 double door assembly employed on Firelock vaults.  The same is true for the cable and air duct entry points, where light-duty units are installed to ease speed of installation.

Does this mean IT infrastructure and information in Europe, Asia and South America are less valuable than the same type of assets in the U.S. market?  Not likely.  I believe it is more a matter of U.S. testing authorities recogizing then need to apply real world conditions to encourage the development of products that will protect American assets when the worst case scenario becomes a reality.

In this era of volatile energy prices and constant pressure to reduce operating expenses, data center managers are looking for savings everywhere.  Environmentally-friendly corporate initiatives are also in style these days.  “Green” is in.  Cutting costs without compromising security can be a daunting task, but there is one way fire protection can be improved while reducing power consumption: installing a Firelock Class 125 data vault to protect server rooms and/or data tape archives. 

The fireproof modular vault panels are constructed with a core of ceramic fiber insulation to keep the interior of the vault below 125-degrees F. for two to four hours (depending upon the size of the vault), even if temperatures outside the vault reach 2,000-degrees F.  A beneficial byproduct of the ceramic fiber content in Firelock panels is the R33 insulation rating.  To put this in perspective, the typical rating offered by fiberglass insulation in homes and businesses is R14.

To maintain the optimum climate inside the vault chamber Firelock offers protected penetrations for either ducted air or coolant lines for split systems.  Data centers can also use these ducts to vent the heated air in the “hot aisle” out of the server vault.  This heated air can be circulated throughout the office space to gain even more cost savings on utilities in the winter.

Unsurpassed fire protection and improved energy efficiency is a Win/Win for those responsible for security and operating expenses.  This is one way going Green can save you some green in the long run.

Everyone knows data centers require the proper environment to maintain full operating capacity.  Without enough cooling to keep IT equipment within their specified operating temperatures the equipment will start to slow down, if not shut down completely.  It is also important to protect mission critical IT infrastructure with a data-rated fireproof vault, but how do you achieve both objectives?

Split HVAC unit inside a Class 125 modular server vault

Firelock protects the entry points for the HVAC service with specifically designed and installed components to allow the cooling capacity server rooms require while maintaining the Class 125 fire protection rating.  To qualify for a Class 125 rating all components of the vault must be able to keep the temperature inside the vault below the 125-degrees F. threshold, even if temperatures outside the server vault reach 2,000-degrees F.  This temperature threshold is critical, because this is the point where data can be lost.

For ducted air climate control systems, a three-stage damper assembly is utilized to keep the heat of a catastrophic fire from migrating into the server vault chamber.  Each of the three damper stages uses ceramic fiber insulation on the damper blades, and is held open by a fusible link that melts when exposed to heat (at around 165-degrees F.) and allows the dampers to close.  This damper assembly is encased in a steel housing that is filled with more ceramic fiber insulation to protect against heat exposure at the duct entry point.  These damper assemblies can be utilized in either under-floor applications or through the roof of the server vault, depending upon the design of the climate control system.  Overhead damper assemblies can also be used to remove hot air from the server room.

If a split HVAC system (such as the popular Liebert units) is used to cool the server room, Firelock installs another fireproof component.  The coolant lines between the heat exchanger outside the vault and the air handler inside the vault are protected by an insulated and heat-reactive barrier.  A steel box filled with ceramic fiber insulation is mounted on the outside face of the vault where the coolant lines penetrate into the vault.  The coolant flows through PVC lines (because metal pipes would conduct heat into the vault) and the outside junction of these lines is encased in a housing filled with intumescent caulking.  This fireproof caulking expands when it is heated to seal the entry point of the coolant lines outside the vault.  This is the same type of technology found in nuclear power plants.

These fireproof components can accommodate almost any data center HVAC system.  The coolant line penetrations and damper assemblies can be located wherever they are needed in the server vault, so the climate control system design is not limited by fireproofing requirements.  For optimum operation and protection of data centers, a Class 125 Firelock modular server vault offers the best of both worlds.

The federal government’s push to get all medical records converted to or originated in digital format is one initiative that makes sense.  The initial investment in the equipment and training required to make this transition will quickly be recovered with the improved efficiency electronic record systems can provide.  Once users are up to speed, the ability to quickly and efficiently transfer medical records to the appropriate healthcare providers will reduce costs and improve the quality of care.

Protecting all of these new and existing medical records is the challenge that healthcare organizations must face.  The Health Insurance Portability and Accountability Act (HIPAA) mandates that all medical records must be preserved and kept confidential.  The confidentiality aspect of HIPAA requirements must be implemented by network security specialists, policy makers and above all, the healthcare professionals authorized to access these records.  How many times have we seen headlines about the potential exposure of medical records when a laptop is stolen?

Preserving the integrity of electronic records is where Firelock comes into the picture.  The IT equipment that stores these medical records must be in a fireproof chamber to ensure the survival of these mission critical medical records.  A proper climate for the  storage arrays and servers must also be provided so there is no downtime due to overheating or other enviromental problems.  That is why Firelock has insulated assemblies for both split and ducted-air HVAC systems.  All data and power cable penetrations into the vault are also insulated for both heat and fire protection.  A chain is only as strong as its weakest link, so every component of Firelock vaults meets the stringent Class 125 rating.  In the next few years the enforcement of HIPAA requirements is sure to expand.  Is your organization ready?

A new option for acquiring data center fire protection is now available.  With the possible exception of the server racks themselves, all the components in the data center will eventually be replaced by new and more powerful equipment. That is why equipment leasing is so popular.  When an IT equipment lease term is complete, the equipment has depreciated considerably.  The leasing company picks up the old components so the lessee is not faced with the task of disposing of obsolete equipment with little or no resale value.  Firelock^® is now offering leasing options for their fireproof modular server vaults.  Unlike IT equipment, however, when the lease is complete you own the vault and it is just as valuable as when it was new.  In fact, it is likely to be even more valuable since the volume and value of the information protected within tends to increase over time. (Read more)

Given a choice, most data center designers would not want water sprinklers in their server room.  Water spraying onto server racks is a disturbing image to anyone who knows the damage this can do to sensitive IT

Water sprinklers in the server room is a disaster waiting to happen

equipment.  Obviously, a waterless fire suppression system is the natural choice for stopping fires inside the server room.  Almost every Firelock server vault has a Novec 1230 fire suppression system (or other system, such as FM-200)  installed inside the vault chamber.

The presence of fire codes requiring water sprinklers in all parts of the building often depends upon the local fire marshal’s ideas about what is the safest policy.  Life safety always takes priority over preservation of property.  One could argue that it is more dangerous to be in a server room with water cascading down than one with a waterless fire suppression system, but that argument may fall on deaf ears. 

On many occassions we have been able to make the case that with the server room inside a fireproof data vault, an internal fire suppression system is more than enough protection to address life safety concerns.  Hopefully these waterless fire suppression systems will gain acceptance by fire marshals over time, and water sprinklers in the server room will become a thing of the past.  Until then, Firelock vaults may be the best way to help data center designers circumvent this disaster waiting to happen.

Integris Tech has just opened a new data center with something no one else in the region can offer: a true data-rated fireproof server vault for managed hosting and co-location services. The FIRELOCK® modular server vault in their facility is capable of keeping the interior temperature below 125°F for at least three hours, even with temperatures up to 2,000°F outside the vault. It is critical to keep server equipment below the temperatures where data can be lost, especially for managed hosting/co-location firms with clients like Integris.  Here’s why: http://www.firelock.com/article18.htm