NetApp AltaVault AVA400 - Unlocking the secure vault

NetApp AltaVault Cloud Integrated Storage Administration Guide 89
Beta Draft
Unlocking the secure vault Configuring security settings
To configure a TACACS+ server
1. Choose Configure > TACACS+.
2. Under Default TACACS+ Settings, complete the configuration as described in this table.
3. Click Apply to apply your changes to the running configuration.
4. To add or remove a TACACS+ server, complete the configuration as described in this table.
If you add a new server to your network and you do not specify these fields, the system automatically applies the
default settings.
Unlocking the secure vault
The secure vault contains sensitive information from your AltaVault configuration, including the encryption key.
These configuration settings are encrypted on the disk at all times, using 256-bit AES encryption.
You can unlock and change the password for the secure vault in the Secure Vault page.
Control Description
Set a Global Default Key Enables a global server key for the server.
Global Key Specify the global server key.
Confirm Global Key Confirms the global server key.
Timeout (seconds) Specify the time-out period in seconds (1 to 60). The default value is 3.
Retries Specify the number of times you want to allow the user to retry authentication. Valid values are 0
to 5. The default is 1.
Control Description
Add a TACACS+ Server Displays the controls for defining a new TACACS+ server.
Hostname or IP Address Specify the hostname or server IP address.
Authentication Port Specify the port for the server. The default value is 49.
Authentication Type Select either PAP or ASCII as the authentication type. The default value is PAP.
Override the Global Default
Key
Specify this option to override the global server key for the server.
Server Key Specify the override server key.
Confirm Server Key Confirm the override server key.
Timeout (seconds) Specify the time-out period in seconds (1 to 60). The default is 3.
Retries Specify the number of times you want to allow the user to retry authentication. Valid values are
0 to 5. The default is 1.
Enabled Enables the new server.
Add Adds the TACACS+ server to the list.
Remove Selected Select the check box next to the name and click Remove Selected.