Research system co-management means we share the operational responsibility for your lab systems with you.
This means we take care of OS installation, patching, managing some important system configuration settings, etc. while you still maintain administrative access to the machine to give you the flexibility you need to get your work done.
Our default setup configures the things you might expect, with some variation depending on OS capabilities.
Installation of campus standard antivirus and vulnerability management software.
Regular patch installation working around your schedule.
Firewall rules
Use of UCSD Active Directory for login, governed by group membership. (You can manage the groups if desired.)
Use of 'sudo' for privileged access.
Sending a copy of security logs to a separate secure server.
Encryption of local storage devices.
Machines with strict reboot schedules due to lab or performance dependencies.
Custom firewall rules for campus-facing or Internet-facing services.
Custom networking setup for lab or performance environments that have a private/isolated backend network.
Batch compute systems with access restricted to only members of your lab.
Campus security policy exceptions and mitigations for systems that require older operating system revisions, etc.
Our goal is to let you have the flexibility you need to get your work done with you having to spend as little of your time as possible worrying about the day-to-day management of your lab systems.