The deployment model for an appliance is shown in Figure A-1. SSC provides a highly secure context (see Figure A-2) for deploying appliances that include  the following features: Figure A-1 Appliance deployment in an SSC LPAR on IBM Z GLYPH<SM590000> Allows no system admin access: – After the appliance image is built, OS access is not possible – Only Remote APIs are available – Memory access of system admin is disabled GLYPH<SM590000> Data storage uses encrypted disk GLYPH<SM590000> Debug data (dumps) is encrypted GLYPH<SM590000> Strong isolation between container instances GLYPH<SM590000> High assurance isolation Figure A-2 Secure Service Container protection 412  IBM 14 Model ZR1 Technical Guide