Fujitsu ETERNUS DX100 S3 Setup Manual page 108

Chapter 7 System Environment Settings
7.1 Required Settings for the Key Management Function
(2) Create self-signed SSL certificate
To establish communication between the ETERNUS DX S3 series and the key server, create a self-signed SSL
certificate as the SSL certificate of the ETERNUS DX S3 series.
Refer to "Create Self-signed SSL Certificate" in "ETERNUS Web GUI User's Guide (Settings)".
• Even if a self-signed SSL certificate has already been created and registered, perform the [Create Self-
signed SSL Certificate] function again. Since the self-signed SSL certificate has changed, reregistration
to the ETERNUS DX S3 series is required. Refer to
111)
• A "self-signed SSL certificate" or an "SSL server certificate" can be used as the SSL certificate of the
ETERNUS DX S3 series. Refer to "Create Key/CSR" and "Register SSL Certificate" in "ETERNUS Web GUI
User's Guide (Settings)" for details.
(3) Setup key management device name
Set the name (Key Management Machine Name) for the device that communicates with the key server.
Refer to "Setup Key Management Machine Name" in "ETERNUS Web GUI User's Guide (Settings)".
(4) Add key server
Register the IP address or the domain name of the key server that manages the key. Up to two key servers
can be registered in the ETERNUS DX S3 series.
Refer to "Add Key Server" in "ETERNUS Web GUI User's Guide (Settings)".
Select a network port (MNT or RMT) that is specified in the [Setup Network Environment] function for the
LAN port that is used to communicate with the key server.
(5) Create key group
Create a key group. The key group combines all of the RAID groups that use the same key. Only one key
group can be created in the ETERNUS DX S3 series.
Refer to "Create Key Group" in "ETERNUS Web GUI User's Guide (Settings)".
(6) Import SSL/KMIP certificate
Register the SSL/KMIP certificate that is exported from the key server in the ETERNUS DX S3 series.
Refer to "Import SSL/KMIP Certificate" in "ETERNUS Web GUI User's Guide (Settings)".
For details on how to export the SSL/KMIP certificate, refer to the manuals of the key management soft-
ware "ETERNUS SF KM".
for details.
FUJITSU Storage ETERNUS DX Configuration Guide (Web GUI)
Copyright 2014 FUJITSU LIMITED
"Appendix A Installing the Security Certificate" (page
108
P2X0-1250-06ENZ0