Hp Secure Key Manager Manuale Utente Pagina 155
- Pagina / 327
- Indice
- RISOLUZIONE PROBLEMI
- SEGNALIBRI
Valutato. / 5. Basato su recensioni clienti
Using advanced security features
Advanced security features provide the highest level of secure operation on the SKM. This section
discusses the following topics:
•AdvancedSecur
ity Overview
•HighSecurityConfiguration Page
• FIPS Status Server Page
•SSLOverview
•SSLSections
Advanced Security overview
Use the Advanced Security settings on the SKM to set the highest level of security for administrative and
cryptographic operations on the device. Depending on the SKM in use, the advanced security settings
can be configured to comply with the Federal Information Processing Standard (FIPS) 140-2, Level 2
standards. If you use a non-FIPS-compliant SKM, you can still use high security settings.
Only the following models are capable of operating in accordance with FIPS standards:
• HP DL360 R05
All other SKM can be configured for high security but cannot be FIPS-compliant
Advanced Security Access Control
Altering the security settings on the High Security Configuration page can have a profound effect
on the security of your HP platform and alter your compliance with FIPS standards. For this reason,
administrators must have the Advanced Security Access Control to modify these settings.
FIPS Compliance
The FIPS standards describe hardware and software parameters that must be met for full compliance.
HP provides both FIPS-compliant hardware and software security settings to enable all SKMs to
operate with the highest software security settings described in the FIPS standards. However, since
FIPS compliance includes both hardware and software, FIPS compliance can only be fully achieved by
using a FIPS-capable SKM.
SKM Settings Required for FIPS Compliance
In order to comply with FIPS 140-2, Level 2, the following functionality must be disabled on the SKM:
• Admini
strative options on XML interface (only if SSL is not enabled)
• FTP transport for importing certificates and downloading and restoring backup files
• LDAP authentication
• LDAP ad
ministrator server
• Use of the following algorithms: RC4, DES, RSA-512, RSA-768. These algorithms are not available
when FIPS compliance is enabled.
• SSL 2.
0andSSL3.0*
• Hot-swappable drive capability
• RSA encrypt/decrypt operations**
*Were
commend running TLS over the XML interface. This requires that you generate a certificate
and enable it.
**RSA encrypt/decrypt associated with TLS handshakes and Sign and Sign Verify are permitted.
These
settings are adjusted automatically when you use the Management Console’s High Security
Confi
guration page to enable FIPS compliance on FIPS capable SKMs.
Secure Key Manager
155
- HP StorageWorks 1
- Secure Key Manager 1
- Contents 3
- 1 Installing and replacing 21
- Rack planning r 22
- Optimum environment 23
- Power requirements 24
- Unpacking 25
- Selecting a rack location 26
- Removing an exi 27
- Attaching the cables 28
- 2Configuring the system 31
- Configuring the system 32
- Setting up the 34
- Establishing a cluster 37
- Creating the cluster 38
- Copying the certificates 41
- Installing t 42
- 3Performingconfiguration and 43
- Downloading an RSA key 44
- Deleting a key 44
- User and group procedures 45
- Creating a group 46
- Adding a user to a group 46
- Removing a user from a group 46
- Deleting a user 46
- LDAP server procedures 47
- Certificate procedures 48
- Secure Key Manager 49 49
- Creating a client certificate 50
- Installing a certificate 51
- Installing a certificate chain 52
- Downloading a certificate 52
- Downloading a local CA 54
- Deleting a local CA 55
- Creating a local CA 55
- Creating 55
- Installing a CA certificate 56
- Removing a CA certificate 56
- FIPS status server procedures 57
- KMS server procedures 57
- Enabling the LDAP server 58
- Clustering procedures 59
- Setting up SSL in a cluster 60
- Date and time procedures 61
- IP authorization procedures 62
- SNMP procedures 63
- Setting up the LDAP schema 65
- Changing your password 65
- Granting cr 67
- Revoking a credential grant 67
- Log configurati 80
- Log view procedures 82
- 4. Click Display Log 83
- 5. Click Clear 83
- 4MaintainingtheSKM 85
- Backup and resto 86
- Create Backup: Device Items 87
- Components Description 88
- Restore Backup 89
- Backup Restore Information 90
- Internal Backup List 91
- Services Configuration page 92
- Restart/Halt 93
- System Informa 94
- Software Upgrade/Install 95
- System Health page 96
- Power Supp 97
- Network Diagnostics page 98
- Traceroute Info 99
- Host Information 99
- Netstat Information 99
- Reading Netsta 100
- Logging in and out 103
- Using the Home tab 103
- System Summary 104
- Search sc 105
- Filtering sections 107
- Accessing the Help system 107
- Using the Management Console 108
- Key Properties 111
- Versioned keys 112
- Group Permissions 113
- Custom Attributes 114
- RSA Public Key 115
- Create Query 116
- Modify Query 117
- Create Key 118
- Clone Key 119
- Import Key 120
- Authorization P 122
- Authorized Usage Periods 124
- Active Versions 125
- Custom Key Attributes 125
- Local Users 127
- Selected Local User 128
- Local Groups 129
- Local Group Properties 130
- User List 130
- LDAP Server Confi 131
- LDAP Sche 132
- LDAP Users 134
- LDAP Groups 135
- Certificate List 136
- Certificate Installation 139
- Self Signed Certificate 140
- Create Certificate Request 141
- The Default Profile 144
- CA Certificate 146
- Properties 146
- Sign Certificate Request 147
- Signed Certificates 148
- Signed Certificate Information 149
- Create Local CA 150
- CA Certificate List 151
- Install C 152
- ACertificate 152
- Local CAs 153
- Auto-Update 154
- Force Periodic Update 154
- Related CLI Commands 154
- Advanced Security overview 155
- FIPS Compliance 156
- High Security Settings 157
- High Security Procedures 159
- FIPS Status Server overview 160
- FIPS Status Report 161
- FIPS Status Server page 163
- SSL overview 164
- SSL Sections 165
- SSL Cipher Order 166
- Configuring the K 168
- MS Server 168
- KMS Server Settings 169
- Figure 101 Vi 171
- The followin 171
- Health Check overview 173
- Health Check sections 173
- Configuring the cluster 174
- The Cluster Key 175
- Cluster Configuration page 176
- Cluster Settings 177
- Create Cluster 178
- Join Cluster 179
- ConfiguringtheDate&Time 180
- Date and Time Settings 181
- Configuring the network 182
- Network Interf 183
- Gateways & 183
- Routing sections 183
- Static Route List 185
- Hostname & DNS sections 186
- Port Speed sections 187
- IP Authorization sections 188
- Allowed Client IP Addresses 189
- Configuring SNMP 190
- Authentication 191
- The SNMP C 192
- SNMPv1/SNMPv 193
- 2CommunityList 193
- SNMPv3 Username List 194
- SNMP Management Station List 195
- Enterprise MIB overview 199
- Administrato 201
- High Access Administrators 202
- Default Administrator 202
- Local and LDAP Administrators 202
- Administrator passwords 202
- LDAP administrative server 203
- LDAP administrators 203
- Administrator procedures 204
- Create LDAP Adm 205
- Component Description 206
- Password Management overview 207
- Password Manag 209
- Multiple Credentials overview 211
- Multiple Credentials sections 213
- Credentials Granted 214
- Grant a Credential 214
- Remote Administ 216
- LDAP Administra 218
- LDAP Schema Properties 219
- Viewinglogsandstatistics 221
- Log Configu 224
- Log Rotation Properties 225
- Syslog Se 226
- Log Signing 227
- Log Viewer page 229
- Audit Log 230
- Activity Log 231
- Client Event Log 234
- Statistics page 235
- Refresh Stati 236
- System Statistics 236
- Connection Statistics 237
- Throughput 237
- License Usage 238
- Refresh Statistics (server) 238
- KMS Statistics 239
- C Using the Command Line 241
- Interface 241
- Tab completion 242
- Command shortcuts 242
- Command modes 243
- Scripting mode 244
- CLI commands 245
- Activity log com 252
- Audit log comma 256
- Autologout commands 256
- Backup and rest 257
- CA certificate commands 257
- Certificate com 262
- CRL commands 264
- Client event lo 267
- Device reset an 268
- Diagnostic com 269
- FIPS commands 269
- Health check co 272
- Help comman 272
- History commands 272
- Log commands 273
- Mode commands 277
- Network commands 277
- Services comma 282
- SNMP commands 284
- SSL commands 288
- Statistics com 291
- System commands 291
- System informa 295
- System log comm 296
- D Troubleshooting 297
- Troubleshooting 298
- Regulatory co 299
- European Union notice 300
- Japanese not 301
- Korean notices 301
- Taiwanese notic 302
- Laser compliance 302
- Dutch laser noti 303
- French laser notice 303
- German laser notice 303
- Italian laser no 304
- Japanese laser notice 304
- Recycling notic 305
- Estonian notice 306
- Finnish notice 306
- French no 306
- German notice 306
- Greek notice 307
- Hungarian notice 307
- Latvian notice 308
- Lithuanian notice 308
- Polish notice 308
- Portuguese noti 309
- Slovakian notice 309
- Slovenian notice 309
- Spanish notice 310
- Swedish notice 310
- Avis relatif aux piles 311
- Istruzioni per la batteria 312
- Japanese batter 313
- Spanish battery notice 313
- Regulatory compliance notices 314
- FSpecifications 315
- Environmental 316
- G About this guide 317
- Rack stability 318
- HP technical support 318
- About this guide 320
- Glossary 321
Prodotti e manuali riguardandi Magazzini Hp Secure Key Manager
Magazzini Hp XP P9500 Storage Manuale Utente
(31 pagine)
(31 pagine)
Magazzini Hp SAN Manuale Utente
(38 pagine)
(38 pagine)
Magazzini Hp D6000 Disk Enclosure Manuale Utente
(53 pagine)
(53 pagine)
Magazzini Hp MSA 2040 SAN Storage Manuale Utente
(94 pagine)
(94 pagine)
© 2020, manymanuals.it. Tutti i diritti riservati | 0.029 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commenti su questo manuale