diff --git a/it-windows-base/CHANGELOG.md b/it-windows-base/CHANGELOG.md
index 07e5f43..4315820 100644
--- a/it-windows-base/CHANGELOG.md
+++ b/it-windows-base/CHANGELOG.md
@@ -5,3 +5,6 @@
   * add EnCase source 148.129.71.121 to 4445/tcp (ticket INC000002587282)
   * add Riverbed Transaction Agent (formerly appcapture) 172.24.100.107 to 27401/tcp
 
+# v1.2 -- 20210226
+  * add HPSA and HPOM
+  * ticket INC000002652291 
diff --git a/it-windows-base/main.tf b/it-windows-base/main.tf
index 62c3f03..2c45a16 100644
--- a/it-windows-base/main.tf
+++ b/it-windows-base/main.tf
@@ -114,6 +114,7 @@ resource "aws_security_group" "this_security_group" {
   tags = merge(
     map("Name", "sg-${local.name}"),
     var.tags,
+    map("boc:created_by", "terraform"),
     map("boc:tf_module_version", local._module_version),
     map("boc:vpc:info", join(" ", compact(list(var.vpc_id, var.vpc_full_name)))),
   )
diff --git a/it-windows-base/ports.tf b/it-windows-base/ports.tf
index b61bb5e..6b9aee2 100644
--- a/it-windows-base/ports.tf
+++ b/it-windows-base/ports.tf
@@ -24,6 +24,8 @@ locals {
   n_ansible     = ["172.24.12.239/32"]
   n_encase      = ["148.129.121.72/32"]
   n_riverbed    = ["172.24.100.107/32"]
+  n_hpsa        = ["172.24.100.141/32", "172.24.100.154/32", "172.24.100.165/32"]
+  n_hpom        = ["172.24.105.24/32"]
   source_groups = ["all", "external"]
   name          = var.name
   ports = [
@@ -36,6 +38,9 @@ locals {
     [4445, 4445, "tcp", "EnCase", local.n_encase, ["external"]],
     [5986, 5986, "tcp", "WinRM-https", local.n_ansible, ["external"]],
     [27401, 27401, "tcp", "TransactionAgent", local.n_riverbed, ["external"]],
+    [1002, 1002, "tcp", "HPSA", local.n_hpsa, ["external"]],
+    [383, 383, "tcp", "HPOM", local.n_hpom, ["external"]],
+    [383, 383, "udp", "HPOM", local.n_hpom, ["external"]],
   ]
 
   # these are ignored
diff --git a/it-windows-base/version.tf b/it-windows-base/version.tf
index 5190b69..1ee6619 100644
--- a/it-windows-base/version.tf
+++ b/it-windows-base/version.tf
@@ -1,3 +1,3 @@
 locals {
-  _module_version = "1.1"
+  _module_version = "1.2.0"
 }