content_image/995238.jpg content_image/995248.jpg
The deployment model for an appliance is shown in Figure A-1. 

<img src='content_image/995238.jpg'>

SSC provides a highly secure context (see Figure A-2) for deploying appliances that include the following features: 

GLYPH<SM590000> Allows no system admin access: 

– After the appliance image is built, OS access is not possible 

– Only Remote APIs are available 

– Memory access of system admin is disabled 

GLYPH<SM590000> Data storage uses encrypted disk 

GLYPH<SM590000> Debug data (dumps) is encrypted 

GLYPH<SM590000> Strong isolation between container instances 

GLYPH<SM590000> High assurance isolation 

<img src='content_image/995248.jpg'>

