Vermont's Lights Out Data Center: No One's Home Nights or Weekends

The IT manager for the State of Vermont saved money and improved security by moving to a "lights out" data center, where doors are locked for the graveyard shift and weekends. Here's a look at the project and five key lessons he's learned to date.

By Rob Lemos
Fri, October 09, 2009

CIO — The data center for the state of Vermont provides application and storage for the services provided by the state's government, from processing registration information for the Department of Motor Vehicles, to ensuring that enrolled citizens benefit from the state's food subsidy program.

In an effort to cut costs, Joe Ng, the information-technology manager responsible for the government's data center, embarked on a program two years ago to automate management of the facility, moving from operation around the clock to locking the doors and turning off the lights between midnight and 6 a.m. on weekdays and for the entire weekend.

[ For timely data center news and expert advice on data center strategy, see CIO.com's Data Center Drilldown section. ]

Given the critical nature of the services, going "lights out" for almost half the week was not an easy sell, Ng says.

"It took a long time to convince people, and the resistance was pretty stiff," Ng says. "But everything went well, and people are really behind it now."

After six months operating in its lights-out mode, the data center group was able to cut staff by more than 40 percent and significantly reduce costs.

Automating data center operations and allowing for remote management—the core characteristics of a lights-out facility—are a natural fit for many companies that want to save money and increase security. In 2006, Hewlett Packard heavily pushed the lights-out concept for data centers, and since then it has quietly taken off, says Gary Thome, chief architect for HP's Infrastructure and Blades group.

"Most customers are really serious about wanting to go lights-out, to fully automated data centers," Thome says. "The ideal is to just be able to sit around and wait for something to happen."

Here are five key lessons Ng learned in his Vermont lights-out project.

1. "Lights out" is not all or nothing

While some companies may aim to depopulate their data center around the clock, for most companies being lights out is not a black-and-white concept. The definition of lights out is not zero population all the time, says Ng.

"The concept extends from totally nobody there to lights out for a certain period of time," Ng says. "For the State of Vermont, we cannot go lights out 24-by-7."

Increasingly, data centers are being designed assuming that fewer, or no, people will work in them, says Joseph Pucciarelli, program director of technology, financial, and executive strategies for business intelligence firm IDC.

"You used to have a data center with a lot of office space around it filled with IT people," he says. "Now, you don't see a lot of office space because they don't want to have a lot of people in the data center."

2. Make sure you have support

Working as part of the state government means listening to a lot of constituents. Vermont's Ng had to get support from not only his supervisors, but also the labor unions that represent the state's workers.

The result: while his business groups saved money by reducing the number of workers in the data center from 17 to 10, those people were not fired, but moved to other positions.

"Nobody lost their job," he says. "They got shifted to a new department or agency."

3. Fewer people does not mean less oversight

While some people might think that having no one physically in the data center would mean a loss of oversight, just the opposite is true, says Ng.

Moving to extended periods with no one allowed in the data center gives IT departments a better handle on what is happening. With various systems in place to notify the data-center group of any incidents and better monitor operations, IT workers have more information, not less.

"By going through the exercise, we have a much better awareness of the system," Ng says. "When things go bump in the night, we have e-mail notifications. We are much more in tune with the system now."

4. Fewer people means more security

In addition, a lights-out data center removes the biggest source of errors and threat to the facility: people. While workers are need to maintain servers, removing humans from the equation helps security greatly, says HP's Thome.

"The most unreliable component in the data center is the people," Thome says. "Pull the wrong cable and, oops, something goes down that was not supposed to go down."

The State of Vermont's IT chief agrees.

"We are much more secure because people are not walking in and out during the night," Ng says. "The more people that walk into a data center, the more security is a problem."

5. It doesn't have to be expensive

The state of Vermont wanted to save money, so a plan that cost a lot to implement would not have worked. Rather than buy a state-of-the-art management system, Ng used the software provided by the manufacturers of the data center's cooling systems and uninterruptible power supplies.

"We put it together using different systems," he says. "In the end, we did not spend a lot of money upgrading things. We used what we had at our disposal."

In the end, what initially was a hard sell has become second nature.

"In about six months, people won't even remember we were ever 24-7," Ng says.

Follow everything from CIO.com on Twitter @CIOonline.

This paper covers power utilization, intelligent power management and industry best practices for energy efficiency. Extreme Networks® takes a lifecycle approach to power efficiency, management and recycling, offering savings to our customers and promoting a greener world.
With increasing data growth, comes increased need for data security.  The existing DLP model, with a focus on compliance/enforcement is not sufficient as the data discovery and classification capabilities are not granular enough.  Read this paper to find how you can efficiently and accurately manage your risk by rapidly inventorying and classifying your data and then developing remediation workflows that support business needs. 
This paper breaks down attack sources into four categories: external, malicious insiders, accidental insiders, and unknown.
The rapid growth of data and technology is creating challenges for organizations as this digital data is considered to be business communications and must be preserved according the same industry-specific regulations governing the retention and discovery of emails and more traditional forms of electronic communications. This paper examines the role that Data Loss Prevention ("DLP") technology can play in helping organizations address the challenges of locating information in response to electronic discovery.
This research, conducted by the Ponemon Institute, focuses on issues relating to the use of data protection solutions such as endpoint encryption and data loss prevention within the workplace.
This report, by Jon Oltsik from Enterprise Strategy Group, examines the need for a new business-centric approach to DLP in order to align business and security requirements.
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Virtualizing business-critical applications is an essential step in your journey to the cloud. Microsoft SQL Server, Exchange and SharePoint, and Oracle applications, are often the backbone of business IT. The benefits of virtualizing these applications extend far beyond mere consolidation. Understanding how VMware improves quality of service and agility while reducing costs will help you make the case for taking virtualization to the next level in your company.
Applications are changing - they're increasingly web-oriented, global in nature and run from multiple device types. Additionally, the volume of data is growing exponentially every year. How do you ensure your applications have fast, accurate, up-to-date information in this new world? Modern applications are data-intensive; delivering data the old way using monolithic databases isn't working. What's needed is a modern approach to data. One that scales-out as needed and delivers predictable high performance, but without sacrificing data consistency or integrity.
Real-time, global data updates have become a critical business requirement for financial-services firms. Overnight or hourly batch jobs can cause erroneous results and missed opportunities. New regulatory requirements dictate real-time reporting of liquidity; traders want access to real-time market and risk positions; and the time windows for relevancy of cross-selling and marketing opportunities are getting shorter. To deal with these issues and new requirements, firms need to be able to react quickly to changes in data. Quick reactions require near-instant access to data, risk analysis and deeper computational analysis for effective decision making. View this webcast to learn how to achieve real-time awareness by managing ever-increasing data volumes and transaction rates.
This video webcast is designed to help those with little to no virtualization experience understand why virtualization and VMware are so important to driving down both capital and operational costs. The session will start with the introduction of the key concepts and technologies of virtualization, introduce the vSphere Hypervisor, and build up to an overview of VMware vSphere® 5, the world's most robust and complete virtualization platform. This session will also discuss new solutions such as the vSphere Storage Appliance and VMware GO that are making it easier than ever before to get started with virtualization.
Big Data-it has the potential of transforming a business. In the case of Klout, a social networking analytics site, big data is the heart of the business. Klout processes and analyzes billions of user data signals every day-from Facebook, Twitter, LinkedIn, blogs and more. How do they do it? Gain valuable insights from David Mariani, vice president of engineering for Klout.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center