● Configuration Procedure
Audit log transmission
Perform the following settings with the ETERNUS DX:
•
Audit log setup
Use ETERNUS Web GUI to specify the message format of audit logs that are sent and specify the domain
name or the IP address for the Syslog server that receives these logs.
For details on the settings for a Syslog server that receives audit logs, refer to the manuals of the Syslog
management software.
Key management server linkage
•
Settings for the ETERNUS DX
Register the following information with ETERNUS Web GUI.
-
SED authentication key registration
Register the key that is managed in the ETERNUS DX (common key).
-
Self-signed SSL certificate creation
Create a self-signed SSL certificate as the SSL certificate of the ETERNUS DX to establish communication
between the ETERNUS DX and the key server.
-
Key management device name setup
Specify the name (machine ID) of the ETERNUS DX that is used for key management.
-
Key server setup
Specify the FQDN or the IP address of the key server that is linked.
-
Key group creation
Create a key group to register the RAID groups that use the same key.
-
SSL/KMIP server certificate import
Register the SSL/KMIP server-side certificate that is exported from the key server in the ETERNUS DX.
-
SED authentication key update
Obtain the key that is set to the key group from the server.
-
Creating the key group
Register the RAID groups that use the same key in the key group.
•
Settings for ETERNUS SF KM
Register the following information in the key server (ETERNUS SF KM):
-
SSL certification registration
Perform the setting to use the self-signed SSL certificate of the ETERNUS DX in order to provide the key.
-
Network setting
Add the IP address and the host name of the ETERNUS DX in the hosts file.
-
Specifying the ETERNUS DX that is the target for management
Specify the group name that is registered in the ETERNUS DX and the name (machine ID) of the ETERNUS
DX that is set for key management.
To complete the settings for the ETERNUS DX and ETERNUS SF KM, the certificate for the ETERNUS DX must be
registered in ETERNUS SF KM. The certificate for ETERNUS SF KM must also be registered in the ETERNUS DX.
For details on the setting procedures and setting items, refer to "ETERNUS SF KM Installation Guide".
Chapter 9
Solution Configuration
9.5 Security
149
FUJITSU Storage ETERNUS DX500 S3/DX600 S3 Disk storage system Configuration Guide (Basic)
Copyright 2014 FUJITSU LIMITED
P3AM-7732-05ENZ0
To Next Page
Loading...
