FAQ

When logging in to T Cloud Public for the first time, a tenant is assigned to the login email address. This tenant comes in the form of a long string of characters, and forms the basis of the business relationship between the user and Deutsche Telekom. In addition, it is required for invoicing processes.

The Virtual Private Cloud (VPC) is a basic functionality of T Cloud Public. In order to work in the cloud environment, users are assigned a dedicated work area within a unique internal IP range. This serves to isolate the individual user networks from one another. The VPC is a basic security function within the public cloud.

When setting up a tenant, a basic limit or maximum value for using T Cloud Public resources is defined in the system. These limits or maximum values are also referred to as quotas. Quotas are a simple and basic tool for limiting the costs incurred when using T Cloud Public. The quotas can be adjusted at any time by contacting our Service Desk by phone or email.

Roles regulate the rights on T Cloud Public. The commercial and technical administrators have the most extensive rights. These roles are mandatory.

Commercial administrator
The commercial administrator is the contract holder and can initiate contractual changes in his role. Furthermore, the commercial administrator has access to the Financial Dashboard. This role does not have access to T Cloud Public Console as standard.

Technical Administrator
The technical administrator is the enterprise administrator and has the right to authorise further users to a tenant via Identity and Access Management (IAM) and to define granular rights management. The technical administrator does not have access to financial data, such as the financial dashboard or the billing history.

Projects enable users to “share” a tenant, making it possible to clearly distinguish between the resources of various teams working on different projects within a company. Up to 50 projects can be created within each tenant.

Our services need to be distributed across several Availability Zones (AZs) in order to ensure maximum reliability. T Cloud Public currently offers two regions with a total of six AZs (as of July 2021): three AZs in Magdeburg and Biere in Germany, and three AZs in Amsterdam in the Netherlands. This allows us to meet the geo-redundancy requirements of the Federal Office for Information Security (BSI).

MyWorkplace is a higher-level user portal for managing all cloud services offered by Deutsche Telekom. T Cloud Public is one of these services. Among other things, you can use MyWorkplace to view your invoices and your Financial Dashboard, or to create support tickets.

If you wish to make a service publicly available on the internet, you need to release your resources within T Cloud Public. To do this, use the Elastic IP (EIP) service to assign a public IP address. This EIP is used to forward users to various resources, e.g. to an Elastic Cloud Server (ECS) in the simplest case, but also to an Elastic Load Balancer (ELB) or a NAT Gateway for accessing several resources at the same time.

The public cloud version of T Cloud Public can be accessed via the internet. To this end, you can use a Virtual Private Network (VPN) to establish an encrypted connection between your own data center and a Virtual Private Cloud (VPC) in T Cloud Public. For professional use, T Cloud Public also allows users to establish dedicated network connections. For internal connections to T Cloud Public, you need to use the Direct Connect (DC) service.

As a general rule, there are three options for logging in to T Cloud Public.

1. For logging in manually, click “T Cloud Public Console“ in the footer of T Cloud Public website. You are directed to a page where you need to enter your user name and password. The login can also be configured to use two-factor authentication.
2. Also in the footer of the website there is a link to MyWorkplace: This is the recommended method for the initial login of the tenant admin. However, it is only available to a limited number of users.
3. You can also set up automated access options via API.

A broad range of services offer encryption capabilities, e.g. Object Storage Service (OBS), Elastic Volume Service (EVS), Image Management Service (IMS), Scalable File Service (SFS) and Relational Database Service (RDS).. Encrypted Elastic Cloud Server (ECS) can only be created by choosing a private image previously created/shared/migrated by customer. The customer master keys are stored in the Key Management Service (KMS)  of T Cloud Public.  The KMS also includes the option of configuring your own key (bring your own key). T Cloud Public uses a hardware security module that creates high-entropy keys. Using third-party tools, keys can also be stored on local hard drives.

T Cloud Public is operated in certified high-security data centers located in Germany. Basic security measures include setting up a Virtual Private Cloud (VPC) for different users, establishing Security Groups, ensuring the availability of Web Application Firewalls (WAF) and providing Anti-DDoS in the cloud. In addition, the data in the various storage services can be encrypted. Deutsche Telekom has also implemented comprehensive technical and organizational measures to protect T Cloud Public. These measures are described in detail in “Ergänzende Bedingungen Auftragsverarbeitung (ErgB-AV) für T Cloud Public” (only available in German).

T Cloud Public offers various certifications  that cover IT operations in general and cloud environments. Here you will find an overview of all recent certifications.

As a general rule, all applications can be used in T Cloud Public. The ideal option would be to use cloud-native applications. Such applications are capable of unlocking the full potential of cloud environments, such as automatic scaling. But conventional applications can also be operated on cloud servers. This works in a similar manner as with physical servers: Select a flavor with the appropriate size and install an image of your application on the server. The running application can then be stored as a private image in your Virtual Private Cloud (VPC). Please observe any licensing issues. T Cloud Public also offers dedicated hardware solutions such as Bare Metal Server (BMS), which can be used for high-performance computing and other scenarios.

Contact the software (or database) provider to clarify the rights of use you have acquired. Many providers allow the software to be used in various infrastructures. However, licensing fees may change, for example when using the software on several virtual servers. The type of server on which the software runs can also influence licensing fees. Dedicated Hosts (DeH), Bare Metal Server (BMS) and other solutions can help to resolve some licensing issues. Make sure that your licensing model covers the intended scope of the application (including any potential scaling). Open-source software can generally be used without any problems.

T Cloud Public includes various disaster recovery and backup functions. The Volume Backup Service (VBS) allows you to create manual or automatic backups of individual Elastic Volume Services (EVS) – complete backups or snapshots – in intervals of up to one hour. The Cloud Server Backup Service (CSBS) enables you to create full backups of several EVS used by one server. Backup software from third parties can also be used with T Cloud Public.

All backup software solutions that allow the use of cloud storage can also be run on T Cloud Public. In most cases, software providers certify or approve their use in cloud environments. We specifically recommend the offers by Commvault, IBM, Rubrik and Veeam, which have already been tested with T Cloud Public. If you wish to use a different software solution, please contact the corresponding provider in case you have any doubts. 

The OBS Browser is a convenient solution for copying even larger quantities of data into the Object Storage Service (OBS) of T Cloud Public. 

Yes. The Cloud Container Engine (CCE) in T Cloud Public is a state-of-the-art Kubernetes variant with a GUI that enables the use of containers. In addition, the platform supports the Infrastructure-as-Code approach. Users can choose between several Infrastructure-as-Code (IaC) tools, such as Ansible and Terraform – the latter is officially verified for use with T Cloud Public.

Yes. If you want to run your own mail server in T Cloud Public, you need certain open ports to send through the firewall. Mail BGP makes these available to you. In addition, you can protect yourself from blacklisting with the Secure Mail Gateway.

Furthermore, there is the E-Mail Protect Pro mailing service from T-Systems, which can also be used as part of T Cloud Public.
T Cloud Public service Simple Message Notification (SMN) also allows you to send mails.

The NAT Gateway with its source/destination NAT (SNAT/DNAT) allows you to map multiple virtual servers to a single IP address.

The best way to order services is via the eShop. Please bear in mind that T Cloud Public is only offered to business users in Europe. If you have a personal sales contact, you can also order services through them.

You can change your contract data in the eShop. This includes all invoicing arrangements such as method of payment, invoice address and sending of invoices. You can also subsequently change the modalities of your tenant and switch to a reserved package, for example.

Yes. Simply use the voucher code 4UT Cloud Public250 and claim a starting credit of €250, enabling you to try all functions of T Cloud Public for two months.

Public cloud resources are usually offered as part of pay-as-you-use models. T Cloud Public also offers such models, as well as “reserved” packages with considerable discounts for the continuous use of resources. An overview of these discounts can be found in the Price calculator. Reserved packages are available for 12, 24, or 36 months, and can be paid via a monthly partial fee or settled in full in advance (additional discount). The booked resources can be used for various application scenarios.

Like all T Cloud Public services, reserved packages can be ordered from the eShop or via direct sales.

No. Reserved Packages are not renewed automatically. If you do not place a follow-up order and continue to use the resources after the contract term has expired, the resources are billed in accordance with the pay-as-you-use model.

The reserved packages are tied to a specific type of flavor. While you can use several different flavors at the same time, this also means that the available quota will be exhausted more quickly. You can also opt for larger flavors, but this must be coordinated with customer support.

Using the basic functions of Cloud Eye (CES) and Price Online Display (POD), financial managers can gain easily understandable insights into usage and budget consumption for cloud usage. Quotas can be used to set a cost limit. Cloud Trace (CTS) serves as a monitoring tool and provides an overview of who has accessed which resources and when. Comprehensive information on resource usage and a detailed cost overview is provided by the Financial Dashboard.

Tags are used to mark and identify individual resources in T Cloud Public with the help of the Tag Management Service (TMS). Up to 10 of these tags can be assigned to nearly all services, enabling you to allocate resources internally. The tags can also be displayed in the Financial Dashboard, which allows you to both identify the used resources and assign them to internal cost centers, for example.

You can contact our Service Desk 24/7 at 0800 3304477 (Germany) or +800 33044770 (International). Alternatively, you can contact us via the contact sheet or ask your question directly in the T Cloud Public Community.

Visit our support page to find videos, screencasts and tutorials with detailed and informative descriptions of the functions of T Cloud Public. Helpful user guides and technical specifications for all services can be found in the Help Center. Another great source of information is our content in T Cloud Public Community like the blog.

We are happy to support you and respond to your specific requirements and questions. Cloud architects, IT specialists and service delivery managers are available for this purpose. You can find out more about our expert support and Enterprise Agreements here.

We offer training courses for individual users and teams. Split into four modules, the course can be held online or directly on site and offers practical insights into T Cloud Public. Participants can be certified after completing the training course.

We have summarized all information about switching cloud providers in accordance with the Data Act on the following page. You will also find the application form there: Switch of cloud provider