Hp Secure Key Manager User Manual Page 170
- Page / 327
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
Table 80 KMS Server Settings section components
Component Description
IP
This field specifies the IP address(es) on which the KMS Server is enabled on the SKM.
The drop-down box consists of all IP addresses bound to the SKM.
IMPORTANT:
We strongly recommend that you select a specific IP address instead of
specifying [All]. If you have four IP addresses bound to the SKM, then the KMS
Server listens for traffic on four different IP addresses; whereas, if you specify a
single IP address, the KMS Server listens for traffic on only one IP address. This
can greatly reduce system vulnerability to outside attacks.
Port
Port on which the KMS Server is listening for client requests. The default port is 9000;
however, you can use any available port.
Use SSL
Specify whether you want to require that clients connect to the KMS Server using an
SSL connection. A check mark in the box indicates that the KMS Server only accepts
trafficonanSSLconnection.IftheUseSSLoptionisnotenabled,theKMSServer
will not accept SSL connections.
Server Certificate
If you are requiring SSL, you must provide the certificate that will be used to
authenticate the KMS Server to clients.
Connection Timeout
(sec)
TheConnectionTimeoutvaluespecifies in seconds how long client connections can
remain idle before the KMS Server begins closing them. The default value is 60; the
maximum value is 7200 (2 hours). Specifying a value of 0 means that the KMS Server
will not close client connections due to inactivity.
Allow Key and
Policy Configuration
Operations
When this feature is enabled, the KMS Server allows the following actions:
• key creation and deletion.
• key import.
• users with User Administration Permission can create, delete, and modify users and
groups (available only through the XML interface.)
When this feature is disabled, only authentication, cryptographic, and random
number generation requests are available. By default, this feature is disabled.
When using the multiple credentials feature, enabling this option allows users (and
unauthenticated sessions) to perform the actions listed without being subjected to the
multiple credentials rule.
IMPORTANT:
This feature may pose a security loophole. You might allow this access for
automated scripts, or you might disallow it to tighten security.
IMPORTANT:
Enabling this feature on a FIPS-compliant device will take the device out of FIPS
compliance - possibly in a manner that does not comply with FIPS standards.
For information on disabling FIPS compliance, see FIPS Compliance.
Allow Key Export
When this feature is enabled, the KMS Server allows key export.
IMPORTANT:
Enabling this feature on a FIPS-compliant device will take the device out of FIPS
compliance - possibly in a manner that does not comply with FIPS standards.
For information on disabling FIPS compliance, see FIPS Compliance.
Edit Click Edit to modify the KMS Server settings.
KMS Server Authentication Settings
The KMS Server Authentication Settings section, shown here, allows you to specify whether and how
clients authenticate to the KMS Server.
170
Using the Management Console
- HP StorageWorks 1
- Secure Key Manager 1
- Contents 3
- 1 Installing and replacing 21
- Rack planning r 22
- Optimum environment 23
- Power requirements 24
- Unpacking 25
- Selecting a rack location 26
- Removing an exi 27
- Attaching the cables 28
- 2Configuring the system 31
- Configuring the system 32
- Setting up the 34
- Establishing a cluster 37
- Creating the cluster 38
- Copying the certificates 41
- Installing t 42
- 3Performingconfiguration and 43
- Downloading an RSA key 44
- Deleting a key 44
- User and group procedures 45
- Creating a group 46
- Adding a user to a group 46
- Removing a user from a group 46
- Deleting a user 46
- LDAP server procedures 47
- Certificate procedures 48
- Secure Key Manager 49 49
- Creating a client certificate 50
- Installing a certificate 51
- Installing a certificate chain 52
- Downloading a certificate 52
- Downloading a local CA 54
- Deleting a local CA 55
- Creating a local CA 55
- Creating 55
- Installing a CA certificate 56
- Removing a CA certificate 56
- FIPS status server procedures 57
- KMS server procedures 57
- Enabling the LDAP server 58
- Clustering procedures 59
- Setting up SSL in a cluster 60
- Date and time procedures 61
- IP authorization procedures 62
- SNMP procedures 63
- Setting up the LDAP schema 65
- Changing your password 65
- Granting cr 67
- Revoking a credential grant 67
- Log configurati 80
- Log view procedures 82
- 4. Click Display Log 83
- 5. Click Clear 83
- 4MaintainingtheSKM 85
- Backup and resto 86
- Create Backup: Device Items 87
- Components Description 88
- Restore Backup 89
- Backup Restore Information 90
- Internal Backup List 91
- Services Configuration page 92
- Restart/Halt 93
- System Informa 94
- Software Upgrade/Install 95
- System Health page 96
- Power Supp 97
- Network Diagnostics page 98
- Traceroute Info 99
- Host Information 99
- Netstat Information 99
- Reading Netsta 100
- Logging in and out 103
- Using the Home tab 103
- System Summary 104
- Search sc 105
- Filtering sections 107
- Accessing the Help system 107
- Using the Management Console 108
- Key Properties 111
- Versioned keys 112
- Group Permissions 113
- Custom Attributes 114
- RSA Public Key 115
- Create Query 116
- Modify Query 117
- Create Key 118
- Clone Key 119
- Import Key 120
- Authorization P 122
- Authorized Usage Periods 124
- Active Versions 125
- Custom Key Attributes 125
- Local Users 127
- Selected Local User 128
- Local Groups 129
- Local Group Properties 130
- User List 130
- LDAP Server Confi 131
- LDAP Sche 132
- LDAP Users 134
- LDAP Groups 135
- Certificate List 136
- Certificate Installation 139
- Self Signed Certificate 140
- Create Certificate Request 141
- The Default Profile 144
- CA Certificate 146
- Properties 146
- Sign Certificate Request 147
- Signed Certificates 148
- Signed Certificate Information 149
- Create Local CA 150
- CA Certificate List 151
- Install C 152
- ACertificate 152
- Local CAs 153
- Auto-Update 154
- Force Periodic Update 154
- Related CLI Commands 154
- Advanced Security overview 155
- FIPS Compliance 156
- High Security Settings 157
- High Security Procedures 159
- FIPS Status Server overview 160
- FIPS Status Report 161
- FIPS Status Server page 163
- SSL overview 164
- SSL Sections 165
- SSL Cipher Order 166
- Configuring the K 168
- MS Server 168
- KMS Server Settings 169
- Figure 101 Vi 171
- The followin 171
- Health Check overview 173
- Health Check sections 173
- Configuring the cluster 174
- The Cluster Key 175
- Cluster Configuration page 176
- Cluster Settings 177
- Create Cluster 178
- Join Cluster 179
- ConfiguringtheDate&Time 180
- Date and Time Settings 181
- Configuring the network 182
- Network Interf 183
- Gateways & 183
- Routing sections 183
- Static Route List 185
- Hostname & DNS sections 186
- Port Speed sections 187
- IP Authorization sections 188
- Allowed Client IP Addresses 189
- Configuring SNMP 190
- Authentication 191
- The SNMP C 192
- SNMPv1/SNMPv 193
- 2CommunityList 193
- SNMPv3 Username List 194
- SNMP Management Station List 195
- Enterprise MIB overview 199
- Administrato 201
- High Access Administrators 202
- Default Administrator 202
- Local and LDAP Administrators 202
- Administrator passwords 202
- LDAP administrative server 203
- LDAP administrators 203
- Administrator procedures 204
- Create LDAP Adm 205
- Component Description 206
- Password Management overview 207
- Password Manag 209
- Multiple Credentials overview 211
- Multiple Credentials sections 213
- Credentials Granted 214
- Grant a Credential 214
- Remote Administ 216
- LDAP Administra 218
- LDAP Schema Properties 219
- Viewinglogsandstatistics 221
- Log Configu 224
- Log Rotation Properties 225
- Syslog Se 226
- Log Signing 227
- Log Viewer page 229
- Audit Log 230
- Activity Log 231
- Client Event Log 234
- Statistics page 235
- Refresh Stati 236
- System Statistics 236
- Connection Statistics 237
- Throughput 237
- License Usage 238
- Refresh Statistics (server) 238
- KMS Statistics 239
- C Using the Command Line 241
- Interface 241
- Tab completion 242
- Command shortcuts 242
- Command modes 243
- Scripting mode 244
- CLI commands 245
- Activity log com 252
- Audit log comma 256
- Autologout commands 256
- Backup and rest 257
- CA certificate commands 257
- Certificate com 262
- CRL commands 264
- Client event lo 267
- Device reset an 268
- Diagnostic com 269
- FIPS commands 269
- Health check co 272
- Help comman 272
- History commands 272
- Log commands 273
- Mode commands 277
- Network commands 277
- Services comma 282
- SNMP commands 284
- SSL commands 288
- Statistics com 291
- System commands 291
- System informa 295
- System log comm 296
- D Troubleshooting 297
- Troubleshooting 298
- Regulatory co 299
- European Union notice 300
- Japanese not 301
- Korean notices 301
- Taiwanese notic 302
- Laser compliance 302
- Dutch laser noti 303
- French laser notice 303
- German laser notice 303
- Italian laser no 304
- Japanese laser notice 304
- Recycling notic 305
- Estonian notice 306
- Finnish notice 306
- French no 306
- German notice 306
- Greek notice 307
- Hungarian notice 307
- Latvian notice 308
- Lithuanian notice 308
- Polish notice 308
- Portuguese noti 309
- Slovakian notice 309
- Slovenian notice 309
- Spanish notice 310
- Swedish notice 310
- Avis relatif aux piles 311
- Istruzioni per la batteria 312
- Japanese batter 313
- Spanish battery notice 313
- Regulatory compliance notices 314
- FSpecifications 315
- Environmental 316
- G About this guide 317
- Rack stability 318
- HP technical support 318
- About this guide 320
- Glossary 321
Related products and manuals for Storage Hp Secure Key Manager
Storage Hp XP P9500 Storage User Manual
(31 pages)
(31 pages)
Storage Hp SAN User Manual
(38 pages)
(38 pages)
Storage Hp D6000 Disk Enclosure User Manual
(53 pages)
(53 pages)
Storage Hp MSA 2040 SAN Storage User Manual
(94 pages)
(94 pages)
© 2020, manymanuals.com. All rights reserved. | 0.673 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals