Hp Secure Key Manager Manuale Utente Pagina 175

  • Scaricare
  • Aggiungi ai miei manuali
  • Stampa
Vedere la pagina 174
the failure in the System Log and sends an SNMP trap indicating that the cluster is out of sync. Once a
device is out of sync, an administrator must synchronize it manually.
The following conguration settings are replicated within a cluster:
Keys
Local Users & Groups
KMS Server
NTP
DNS
SNMP
Log Signing Certicate
Local Certicate Authorities (CAs)
Authorization Policies
LDAP Server
SSL
Administrators and Remote Administration
IP Authorization
Logging
Service Startup
Known CAs, CRLs, and Trusted CA List Proles
The following conguration settings can not be automatically replicated within a cluster:
Network settings
Certicates (other than the Log Signing Certicate)
NOTE:
Items not replicated by the clustering feature can be replicated manually using the Backup and Restore
mechanism described in Services Conguration Page.
The Cluster Key
A cluster uses a cluster key to authenticate members during replication and synchronization. When a
cluster is created, this key is created automatically.
If a cluster member is stolen or the key is otherwise compromised, remove all devices from the cluster (this
will effectively delete the cluster). You can then create a new cluster and add members using the new key.
The Cluster Password
A cluster key is protected by a cluster password, which is provided by the administrator when creating the
cluster. This password must be provided when devices attempt to join a cluster, or when an administrator
attempts to restore a cluster backup.
You can change the password by editing Cluster Password and Conrm Cluster Password on the Cluster
Settings section of the Cluster Conguration page for every member of the cluster. You can do this if you
forget the original password, for example. However, to restore an automatic synchronization backup,
youwillneedtheclusterpasswordusedwhenthebackupwascreated.Therefore,ifyouforgetacluster
password you can still maintain the cluster, but you will lose the backups that use that password.
Local Certicate Authority Replication
The cluster feature enables you to replicate local certicate authorities (CAs) within a cluster. This includes
the CAs public and private keys, the list of signed certicates, and the list of revoked certicates.
Secure Key Manager
175
Vedere la pagina 174
1 2 ... 170 171 172 173 174 175 176 177 178 179 180 ... 326 327

Commenti su questo manuale

Nessun commento