Hp Secure Key Manager User Manual Page 81
- Page / 327
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
2. Change the file extension on the log file to .eml. The file will now be recognized by Windows
as an E-mail file.
3. Double-click on the file. Outlook Express will open and display a help screen with a security header
that reads: “Digitally signed - signing digital ID is not trusted.”
4. Click Continue. A security warning will appear.
5. Click View Digital ID. The Signing Digital ID Properties dialog will appear.
6. Click the Details tab and scroll down to the Thumbprint field.
7. Download the Log Signing Certificate used to sign the log file from the SKM.
8. Double-click on the Log Signing Certificate. The Certificate dialog will appear.
9. Select the Details tab.
10. Scroll down to the Thumbprint field.
11 . Compare the thumbprints of the Signing Digital ID Properties dialog and the Log Signing Certificate
dialog. If the text strings are identical, the integrity of the log file is secure.
Verifying a secure log using OpenSSL
Prior to verifying a secure log, you must have installed OpenSSL on the machine that will verify the log
file. You can use the procedure in both Windows and UNIX/Linux environments. If OpenSSL has not
been installed on your Windows machine, you can find a Windows distribution here:
http://w
ww.slproweb.com/products/Win32OpenSSL.html
To verify a secure log:
1. Log in to the Management Console as an administrator.
2. Navigate to the Log Configuration page (Device > Log Configuration) and click the Log Levels
&Signin
gtab.
3. Click View Log Signing Cert.
4. Click Download Log Signing Cert and save the Log Signer certificate to your local machine.
5. Navigate to the Audit Log page (Device>Logs&Statistics>LogViewer><select the log page> )
and click Download Entire Log.Savethelogfileinthesamedirectoryasthelogsignercert.(You
cansaveboththelogfile and the certificate anywhere you like; for the sake of simplicity, these
procedures assume that the two filesareinthesamedirectory.)
6. From
the command prompt, enter the following command:
openssl smime -verify -in <signed log file> -nointern -certfile <log
cert file> -text -noverify.
Afte
r issuing the command, the text from the log file is displayed. If the text of the log file has not
been
modified, the system displays “Verification successful” below the log text, as shown here:
2006
-07-06 09:15:02 [admin]: Logged in from 192.168.1.170 via web
200
6-07-06 11:17:30 [admin]: Logged in from 192.168.1.170 via web
2006-07-06 11:24:26 [admin]: Downloaded Cert logsigner
2006-07-06 12:30:17 [admin]: User admin login has expired.
Verification successful
You c
an test this process by modifying the text in the log file and running the command again. When
you
issue the command, the system again displays the text of the log file, but this time, it displays
“Ve
rification failure” after the text of the log file.
Secure Key Manager
81
- HP StorageWorks 1
- Secure Key Manager 1
- Contents 3
- 1 Installing and replacing 21
- Rack planning r 22
- Optimum environment 23
- Power requirements 24
- Unpacking 25
- Selecting a rack location 26
- Removing an exi 27
- Attaching the cables 28
- 2Configuring the system 31
- Configuring the system 32
- Setting up the 34
- Establishing a cluster 37
- Creating the cluster 38
- Copying the certificates 41
- Installing t 42
- 3Performingconfiguration and 43
- Downloading an RSA key 44
- Deleting a key 44
- User and group procedures 45
- Creating a group 46
- Adding a user to a group 46
- Removing a user from a group 46
- Deleting a user 46
- LDAP server procedures 47
- Certificate procedures 48
- Secure Key Manager 49 49
- Creating a client certificate 50
- Installing a certificate 51
- Installing a certificate chain 52
- Downloading a certificate 52
- Downloading a local CA 54
- Deleting a local CA 55
- Creating a local CA 55
- Creating 55
- Installing a CA certificate 56
- Removing a CA certificate 56
- FIPS status server procedures 57
- KMS server procedures 57
- Enabling the LDAP server 58
- Clustering procedures 59
- Setting up SSL in a cluster 60
- Date and time procedures 61
- IP authorization procedures 62
- SNMP procedures 63
- Setting up the LDAP schema 65
- Changing your password 65
- Granting cr 67
- Revoking a credential grant 67
- Log configurati 80
- Log view procedures 82
- 4. Click Display Log 83
- 5. Click Clear 83
- 4MaintainingtheSKM 85
- Backup and resto 86
- Create Backup: Device Items 87
- Components Description 88
- Restore Backup 89
- Backup Restore Information 90
- Internal Backup List 91
- Services Configuration page 92
- Restart/Halt 93
- System Informa 94
- Software Upgrade/Install 95
- System Health page 96
- Power Supp 97
- Network Diagnostics page 98
- Traceroute Info 99
- Host Information 99
- Netstat Information 99
- Reading Netsta 100
- Logging in and out 103
- Using the Home tab 103
- System Summary 104
- Search sc 105
- Filtering sections 107
- Accessing the Help system 107
- Using the Management Console 108
- Key Properties 111
- Versioned keys 112
- Group Permissions 113
- Custom Attributes 114
- RSA Public Key 115
- Create Query 116
- Modify Query 117
- Create Key 118
- Clone Key 119
- Import Key 120
- Authorization P 122
- Authorized Usage Periods 124
- Active Versions 125
- Custom Key Attributes 125
- Local Users 127
- Selected Local User 128
- Local Groups 129
- Local Group Properties 130
- User List 130
- LDAP Server Confi 131
- LDAP Sche 132
- LDAP Users 134
- LDAP Groups 135
- Certificate List 136
- Certificate Installation 139
- Self Signed Certificate 140
- Create Certificate Request 141
- The Default Profile 144
- CA Certificate 146
- Properties 146
- Sign Certificate Request 147
- Signed Certificates 148
- Signed Certificate Information 149
- Create Local CA 150
- CA Certificate List 151
- Install C 152
- ACertificate 152
- Local CAs 153
- Auto-Update 154
- Force Periodic Update 154
- Related CLI Commands 154
- Advanced Security overview 155
- FIPS Compliance 156
- High Security Settings 157
- High Security Procedures 159
- FIPS Status Server overview 160
- FIPS Status Report 161
- FIPS Status Server page 163
- SSL overview 164
- SSL Sections 165
- SSL Cipher Order 166
- Configuring the K 168
- MS Server 168
- KMS Server Settings 169
- Figure 101 Vi 171
- The followin 171
- Health Check overview 173
- Health Check sections 173
- Configuring the cluster 174
- The Cluster Key 175
- Cluster Configuration page 176
- Cluster Settings 177
- Create Cluster 178
- Join Cluster 179
- ConfiguringtheDate&Time 180
- Date and Time Settings 181
- Configuring the network 182
- Network Interf 183
- Gateways & 183
- Routing sections 183
- Static Route List 185
- Hostname & DNS sections 186
- Port Speed sections 187
- IP Authorization sections 188
- Allowed Client IP Addresses 189
- Configuring SNMP 190
- Authentication 191
- The SNMP C 192
- SNMPv1/SNMPv 193
- 2CommunityList 193
- SNMPv3 Username List 194
- SNMP Management Station List 195
- Enterprise MIB overview 199
- Administrato 201
- High Access Administrators 202
- Default Administrator 202
- Local and LDAP Administrators 202
- Administrator passwords 202
- LDAP administrative server 203
- LDAP administrators 203
- Administrator procedures 204
- Create LDAP Adm 205
- Component Description 206
- Password Management overview 207
- Password Manag 209
- Multiple Credentials overview 211
- Multiple Credentials sections 213
- Credentials Granted 214
- Grant a Credential 214
- Remote Administ 216
- LDAP Administra 218
- LDAP Schema Properties 219
- Viewinglogsandstatistics 221
- Log Configu 224
- Log Rotation Properties 225
- Syslog Se 226
- Log Signing 227
- Log Viewer page 229
- Audit Log 230
- Activity Log 231
- Client Event Log 234
- Statistics page 235
- Refresh Stati 236
- System Statistics 236
- Connection Statistics 237
- Throughput 237
- License Usage 238
- Refresh Statistics (server) 238
- KMS Statistics 239
- C Using the Command Line 241
- Interface 241
- Tab completion 242
- Command shortcuts 242
- Command modes 243
- Scripting mode 244
- CLI commands 245
- Activity log com 252
- Audit log comma 256
- Autologout commands 256
- Backup and rest 257
- CA certificate commands 257
- Certificate com 262
- CRL commands 264
- Client event lo 267
- Device reset an 268
- Diagnostic com 269
- FIPS commands 269
- Health check co 272
- Help comman 272
- History commands 272
- Log commands 273
- Mode commands 277
- Network commands 277
- Services comma 282
- SNMP commands 284
- SSL commands 288
- Statistics com 291
- System commands 291
- System informa 295
- System log comm 296
- D Troubleshooting 297
- Troubleshooting 298
- Regulatory co 299
- European Union notice 300
- Japanese not 301
- Korean notices 301
- Taiwanese notic 302
- Laser compliance 302
- Dutch laser noti 303
- French laser notice 303
- German laser notice 303
- Italian laser no 304
- Japanese laser notice 304
- Recycling notic 305
- Estonian notice 306
- Finnish notice 306
- French no 306
- German notice 306
- Greek notice 307
- Hungarian notice 307
- Latvian notice 308
- Lithuanian notice 308
- Polish notice 308
- Portuguese noti 309
- Slovakian notice 309
- Slovenian notice 309
- Spanish notice 310
- Swedish notice 310
- Avis relatif aux piles 311
- Istruzioni per la batteria 312
- Japanese batter 313
- Spanish battery notice 313
- Regulatory compliance notices 314
- FSpecifications 315
- Environmental 316
- G About this guide 317
- Rack stability 318
- HP technical support 318
- About this guide 320
- Glossary 321
Related products and manuals for Storage Hp Secure Key Manager
Storage Hp XP P9500 Storage User Manual
(31 pages)
(31 pages)
Storage Hp SAN User Manual
(38 pages)
(38 pages)
Storage Hp D6000 Disk Enclosure User Manual
(53 pages)
(53 pages)
Storage Hp MSA 2040 SAN Storage User Manual
(94 pages)
(94 pages)
© 2020, manymanuals.com. All rights reserved. | 1.141 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals