Workflow For Edit Encryption Environmental Settings - Hitachi G1000 User Manual

1 In Hitachi Command Suite:
.
a
.
b
.
In Device Manager - Storage Navigator :
a
.
b
.
2 Click Edit Encryption Environmental Settings.
.
3 Upload the certificates in the Edit Encryption Environmental Settings
.
window.

Workflow for edit encryption environmental settings

To use a key management server, you must configure the connection and
network settings. You can also set the encryption settings such as disabling
the local key generations and storing key encryption key to DKC.
For more information about the appropriate connection settings, contact the
key management server administrator. For more information about the
network settings, contact your network administrator.
Caution: Encryption keys backed up on the key management server are
managed with the client certificate. If the client certificate is lost, and the SVP
is replaced due to a failure, you cannot restore the encryption keys that were
backed up before the replacement.
When the connection settings are backed up to the key management server,
the system does not back up the client certificate. Make sure that you back
up a copy of the connection settings to the key management server and save
a copy of the client certificate separately. Refer to your corporate security
policy for procedures related to backups.
1 Ensure the client and root certificates are uploaded to the key
.
management server. If the certificates are not uploaded:
¢
¢
2 Configure the connection settings to the key management server.
.
For details, see
management server on page
3 Confirm that you can connect to the key management server.
.
4 Check with the key management server administrator, then save a back
.
up copy of the client certificate.
5 Back up the connection settings to the key management server.
.
For instructions, see the Hitachi Virtual Storage Platform G1000 System
Administrator Guide.
3-4
Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide
On the Resources tab, click Storage Systems, and then expand All
Storage Systems.
Expand the target storage system, and then select Encryption Keys.
Display the Device Manager - Storage Navigator main window.
Select Administration in Explorer, and select Encryption Keys.
Contact the key management server administrator.
See Converting the client certificate to the PKCS#12 format on page
3-3 and Uploading the root and client certificate on page
Configuring the connection settings to the key
Key Management Server Connections
3-5.
3-3.