Paperless Parts Managed Connector (PPMC) guide
- What is a PPMC?
- Why do I need a PPMC?
- What operating system does the PPMC run?
- Is port forwarding required for remote access?
- What security controls are in place?
- Can I install software on the PPMC?
- Who is responsible for maintenance and updates of the PPMC?
- Is the PPMC encrypted at rest?
- What happens if the PPMC hardware fails?
- How can a virtual PPMC be set up?
What is a PPMC?
The Paperless Parts Managed Connector (PPMC) is a small physical computer that gets installed on a shop’s network to enable an integration to communicate between the Paperless Parts cloud-based API and an on-premises ERP system. The integration (sometimes called a connector) is a software application designed to move data between two systems. They are often customized for each shop but created from a standard integration with basic functionality. The PPMC enables our integration team to securely access the PPMC remotely to support the integration.
Why do I need a PPMC?
An integration is a software application that moves data between Paperless Parts and a third-party tool, such as an ERP system. If the ERP system is on-premises (i.e., runs on servers physically located at a shop), then the integration has to run on a computer connected to that shop network. The PPMC is a standardized, inexpensive solution that solves two problems:
It provides a consistent environment to run our integration applications.
It enables our team to securely connect remotely, so we can deploy and support the integration.
Frequently Asked Questions:
What operating system does the PPMC run?
Linux (Ubuntu 22.04 - Server)
Is port forwarding required for remote access?
No. The PPMC establishes a connection to our cloud that enables our team to securely manage the device and integration.
What security controls are in place?
- Password protection with strong, randomized passwords.
- Reduced installed software base compared to a typical desktop computer. Intrusion Protection System (IPS).
- Remote connections are authenticated and encrypted.
Can I install software on the PPMC?
No. For the security of our own network, it’s not possible for a shop to install their own software on the PPMC.
Who is responsible for maintenance and updates of the PPMC?
The PPMC will perform regular software updates as they become available. Paperless Parts is responsible for this and maintenance of the PPMC.
Is the PPMC encrypted at rest?
No. Encryption at rest typically relies on a user typing a passphrase when a computer starts, or storing the key encryption on the same computer (either within the computer or in a peripheral device, like a USB stick). PPMCs can’t rely on a human to type a passphrase, since our team is remote. Encrypting the drive but configuring the computer to automatically decrypt on boot does not add any security. This is frequently asked in the context of NIST 800-171. That standard requires that mobile devices use disk encryption, and the PPMC does not fit the definition of a mobile device because it does not contain a battery.
What happens if the PPMC hardware fails?
We’ll send you a new one. The source code for any integrations running on your PPMC are securely archived in our cloud-based version control system. PPMCs don’t store data about your parts, quotes, and orders; that information is stored in Paperless Parts and your other applications, such as your ERP system.
How can a virtual PPMC be set up?
Customer to create Virtual Machine/Instance with the following requirements:
- Ubuntu 22.04 LTS
- 64+ GB of storage
- 4+ CPU cores
- 8+ GB of RAM/Memory
Customer to grant SSH access to Virtual Machine/Instance with root-level access.