Chapter 7 System Environment Settings
7.1 Required Settings for the Key Management Function
FUJITSU Storage ETERNUS DX Configuration Guide (Web GUI)
Copyright 2014 FUJITSU LIMITED P2X0-1250-06ENZ0
108
(2)Create self-signed SSL certificate
To establish communication between the ETERNUS DX S3 series and the key server, create a self-signed SSL
certificate as the SSL certificate of the ETERNUS DX S3 series.
Refer to "Create Self-signed SSL Certificate" in "ETERNUS Web GUI User's Guide (Settings)".
(3)Setup key management device name
Set the name (Key Management Machine Name) for the device that communicates with the key server.
Refer to "Setup Key Management Machine Name" in "ETERNUS Web GUI User's Guide (Settings)".
(4)Add key server
Register the IP address or the domain name of the key server that manages the key. Up to two key servers
can be registered in the ETERNUS DX S3 series.
Refer to "Add Key Server" in "ETERNUS Web GUI User's Guide (Settings)".
(5)Create key group
Create a key group. The key group combines all of the RAID groups that use the same key. Only one key
group can be created in the ETERNUS DX S3 series.
Refer to "Create Key Group" in "ETERNUS Web GUI User's Guide (Settings)".
(6)Import SSL/KMIP certificate
Register the SSL/KMIP certificate that is exported from the key server in the ETERNUS DX S3 series.
Refer to "Import SSL/KMIP Certificate" in "ETERNUS Web GUI User's Guide (Settings)".
• Even if a self-signed SSL certificate has already been created and registered, perform the [Create Self-
signed SSL Certificate] function again. Since the self-signed SSL certificate has changed, reregistration
to the ETERNUS DX S3 series is required. Refer to "Appendix A Installing the Security Certificate" (page
111) for details.
• A "self-signed SSL certificate" or an "SSL server certificate" can be used as the SSL certificate of the
ETERNUS DX S3 series. Refer to "Create Key/CSR" and "Register SSL Certificate" in "ETERNUS Web GUI
User's Guide (Settings)" for details.
Select a network port (MNT or RMT) that is specified in the [Setup Network Environment] function for the
LAN port that is used to communicate with the key server.
For details on how to export the SSL/KMIP certificate, refer to the manuals of the key management soft-
ware "ETERNUS SF KM".
To Next Page
Loading...
