Additional Security Capabilities - Cisco MDS 9120 Manual

Chapter 1 Storage Media Encryption Overview
SME Security Overview

Additional Security Capabilities

Additional security capabilities offered by Cisco NX-OS complete the SME solution. For example,
RADIUS and TACACS+ servers can be used to authenticate, authorize, and provide accounting (AAA)
for SME administrators. Management of SME can be limited to authorized administrators using
role-based access controls (RBACs). When communication occurs from the DCNM-SAN to cluster
nodes, the secure shell (SSHv2) protocol provides message integrity and privacy. PKI certificates can be
configured in the CKMC and cluster nodes to enable trustpoint (SSL-protected transport).
Cisco MDS 9000 Family NX-OS Storage Media Encryption Configuration Guide
1-15
OL-29289-01