6 Securing a cloud in an IBM z/VM  environment Today’s security requires consistent protection against threats and malware. Enterprises must  be flexible while having a secure infrastructure to protect effectively the most valued asset of  a company (the data), and their access through the cloud. Running many distributed servers involves much effort to install, manage, maintain, and  provide security for them. To contain this effort, many enterprises are consolidating these  servers on IBM LinuxONE by using z/VM as the hypervisor, which takes advantage of the  virtualization technologies to use the hardware effectively and to simplify administration tasks. Implementing the enterprise security policy and following the least privilege principle  increases the strength of security in your enterprise cloud. This chapter describes the security of a Cloud on z/VM environment with its building blocks:  z/VM Directory Manager (DirMaint), SMAPI, Extreme Cloud Administration Toolkit (xCAT),  and Cloud Manager Appliance. This chapter includes the following topics:  GLYPH<SM590000> 6.1, “Cloud on z/VM components” on page 158 GLYPH<SM590000> 6.2, “DirMaint” on page 159 GLYPH<SM590000> 6.3, “Systems Management API” on page 167 GLYPH<SM590000> 6.4, “z/VM Cloud Manager Appliance” on page 174 GLYPH<SM590000> 6.5, “CMA Controller node” on page 178 GLYPH<SM590000> 6.6, “CMA compute node” on page 182 GLYPH<SM590000> 6.7, “CMA installation” on page 184 GLYPH<SM590000> 6.8, “Securing your cloud components” on page 190 ' Copyright IBM Corp. 2 019. All rights reserved. 157