Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

A client have a couple of racks in a shared server room facility. The racks have wheels on them and they are worried anyone could simply access the server room, unplug all cables and roll out the racks within few minutes.

Does anyone know of any standard security practices one could take in securing a rack in place? Preferably without removing the wheels.

Currently some solutions are to chain them together or chaining them to some infrastructure piece in the room, however I would think that some racks come with ways to secure them from being easily moved?

share|improve this question
1  
Talk to the operator of the facility. –  David Schwartz Sep 26 '12 at 6:28
12  
Take the fucking wheels off. –  Tom O'Connor Sep 26 '12 at 7:02
1  
Put a couple of bricks in the bottom. –  boburob Sep 26 '12 at 8:12
1  
Don't just take the wheels off, get some solid angle brackets and bolt the rack to the floor. Won't stop them but it will sure slow them down. –  John Gardeniers Sep 26 '12 at 9:54
add comment

2 Answers 2

up vote 16 down vote accepted

Sounds like quite the argument for not using a shared server room facility, but what you can/should do to fairly easily avoid this problem is:

  1. Physical access controls on the server room.
    • Could be as simple as a good lock and a key, an RFID badge, or even biometric scanners, but make it something.
    • If you prevent who has access to the room with a good door, decent lock(s), and control over who has the key/badge/biometric clearance to get in, you drastically limit who'll even be in a position to be able to steal your gear.
  2. Audio/video surveillance (AKA security cameras).
    • People are much less likely to try to steal something when there's a camera staring them down the whole time.
  3. A monitoring system.
    • Get a monitoring system for your gear, so if someone unplugs everything, all the alarms and alerts go off, and everyone starts looking for what's wrong.
      • Couple with a remotely viewable security camera or cameras, and if such a thing happens, you'll be able to know what's going on nearly instantly.
      • Something fairly easy to do, that you should be doing for other reasons anyway, honestly.
  4. Physical access controls on the rack and gear in it.
    • Generally, the locks that come on server racks or are used to lock servers into a rack aren't going to stop a determined attacker, but if you're doing the other things right, someone will notice and stop a stranger taking a crowbar to your rack to steal what's inside.
  5. Physically secure the rack.
    • Assuming you're in an actual server room or data-center environment you can get cable locks (or even use a long chain and a padlock) you attach to the rack, and run under the raised flooring to prevent the rack from being wheeled away.
      • (EDIT): If you're not in a "real" server room/data-center environment, then yes, this would mean chaining the rack to some piece of infrastructure. It's what you're effectively doing with a chain or cable lock under the floor anyhow (securing the rack to the sub-floor infrastructure your tiles sit on).
share|improve this answer
1  
In regards to the monitoring system, there are also anti-tamper alarms that can send alerts via SMS. Handy in case nobody is within earshot of the alarms. –  John Gardeniers Sep 26 '12 at 9:56
    
Also, your security should not stop at the rack. Your data may be more valuable than the equipment it runs on. Encrypt the drives of anything with valuable or sensitive data. –  Chris Nava Sep 26 '12 at 15:34
    
@JohnGardeniers Good point, though I was actually thinking of an IT monitoring system along the lines of Nagios or SolarWinds Orion, etc., that sends alerts about system events via email and/or SMS. They make it pretty easy to be informed when someone cuts power to one of your racks, whether accidentally, or for purposes of theft. –  HopelessN00b Sep 26 '12 at 15:35
    
I'd use both. Nagios or similar to detect tampering (in addition to it's normal monitoring functions) with the computer/network side and the other device to detect physical movement of the rack. Some are small enough that they can be installed virtually undetected. –  John Gardeniers Sep 26 '12 at 21:35
add comment

Speak to Rittal, they make racks that can be bolted to the tiles or floor under a rack plus lots of customisable anti-intruder electronics such as vibration detection, remote door opening/alerting and internal cameras. We have these and they're great, not even too expensive either.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.