Creating resource groups and managing storage system resources.....................167
When to use resource groups ....................................................................167
System configuration using resource groups................................................167
Resource group examples.......................................................................... 168
Meta_resource.......................................................................................... 171
Resource lock............................................................................................171
User groups.............................................................................................. 171
Resource group assignments......................................................................172
Operations in a resource group for NAS modules......................................... 172
Resource group rules, restrictions, and guidelines........................................172
Managing resource groups......................................................................... 173
Resource access requirements for Device Manager - Storage Navigator
operations.................................................................................................176
Creating configuration files.............................................................................. 187
Creating an LDAP configuration file.............................................................187
Creating a RADIUS configuration file...........................................................190
Creating a Kerberos configuration file..........................................................193
User Administration for NAS Manager.................................................................... 197
Administrator types and responsibilities............................................................ 197
Adding an SMU user (an administrator)............................................................ 198
Changing user passwords................................................................................ 202
Changing your own password.....................................................................202
Changing another user's password..............................................................203
Changing an SMU user profile..........................................................................206
5 Setting up security............................................................................. 211
Setting up TCP/IP for a firewall..............................................................................212
Working with certificates.......................................................................................212
Managing HCS certificates............................................................................... 212
Registering HCS certificates........................................................................212
Deleting HCS certificates............................................................................213
Managing SSL certificates................................................................................ 213
Flow of SSL communication settings........................................................... 214
Creating a keypair..................................................................................... 214
Obtaining a signed certificate..................................................................... 216
Verifying and releasing an SSL certificate passphrase................................... 217
Converting SSL certificates to PKCS#12 format............................................218
Updating a signed certificate...................................................................... 219
Notes on updating a signed certificate for the service processor....................219
Returning the certificate to default..............................................................220
Selecting a cipher suite.............................................................................. 221
Problems with website security certificates.................................................. 221
Updating the certificate files............................................................................ 222
Releasing HTTP communication blocking.......................................................... 223
Blocking HTTP communication to the SVP ........................................................224
Setting up authentication and authorization............................................................224
Authentication server protocols........................................................................225
Authorization server requirements....................................................................226
Connecting two authentication servers............................................................. 226
Connecting authentication and authorization servers......................................... 227
Naming a user group in Device Manager - Storage Navigator............................. 228
6
System Administrator Guide for VSP Gx00 models and VSP Fx00 models