Hp Secure Key Manager Manuale Utente Scaricare il pdf (Pagina 34)

Where

• <appliance hostname> is the hostname or IP address you provided in Starting the SKM

appliance,step4.

• <appliance port number> is 9443 by default. If you changed the port number in Starting the

SKM appliance, step 4, use that number instead.

Setting up the

local Certiﬁcate Authority (CA)

To create and i

nstall local CAs, perform the following steps:

1. Logon to the SKM management web console using the admin password you supplied in Starting

the SKM appliance.

2. Select the Se

curity tab.

3. In Certiﬁcates & CAs,clickLocal CAs.

4. Enter information required by the Create Local Certiﬁcate Authority section of the window to create

your local C

A, which will be the root for authentication of the clusters.

a. Enter a Certiﬁcate Authority Name and Common Name. These may be the same value, for

example SKM Local CA.

b. Enter your organizational information.

c. Enter the Email Address where you want messages to the Security Ofﬁcer to go.

d. Enter the Key Size. HP recommends using 2048 for maximum security.

e. Click Self-signed Root CA and enter the CA Certiﬁcation Duration and Maximum User Certiﬁcate

Duration. These values determine when the certiﬁcate must be renewed and should be set in

accordance with your company’s security policies. The default value for both is 3650 days or

10 years.

5. Click Create.

Conﬁguring the system

1 2 ... 29 30 31 32 33 34 35 36 37 38 39 ... 326 327

Nessun commento

Hp Secure Key Manager Manuale Utente Pagina 34