NetApp AltaVault AVA400 - Configuring security settings; Configuring general security settings

NetApp AltaVault Cloud Integrated Storage Administration Guide 79
Beta Draft
CHAPTER 7 Configuring security settings
This chapter includes the following sections:
 “Configuring general security settings” on page 79
 “Managing user permissions” on page 81
 “Configuring management login from Active Directory domain” on page 86
 “Setting RADIUS servers” on page 87
 “Configuring TACACS+ access” on page 88
 “Unlocking the secure vault” on page 89
 “Configuring Web settings” on page 90
 “Configuring KMIP” on page 93
 “Configuring appliance monitoring” on page 97
 “Configuring a management ACL” on page 99
 “Configuring SSH Access” on page 100
Configuring general security settings
You can prioritize local, RADIUS, and TACACS+ authentication methods for the system and set the authorization
policy and default user for RADIUS and TACACS+ authorization systems in the Configure > General Settings page.
Make sure to put the authentication methods in the order in which you want authentication to occur. If authorization
fails on the first method, the next method is attempted until all of the methods have been attempted.
To set TACACS+ authorization levels (admin or read-only) to allow certain members of a group to log in, add the
following attribute to users on the TACACS+ server:
service = rbt-exec {
local-user-name = “monitor”
}
Replace monitor with admin for write access.
To set general security settings
1. Choose Configure > General Settings.