Obtaining And Importing The Lkm/Sskm Certificate - Brocade Communications Systems WFT-2D User Manual

20
Steps for connecting to an LKM/SSKM appliance

Obtaining and importing the LKM/SSKM certificate

Certificates must be exchanged between the LKM/SSKM appliance and the encryption switch to
enable mutual authentication. You must obtain a certificate from the LKM/SSKM appliance and
import it into the encryption Group Leader. The encryption Group Leader exports the certificate to
other encryption group members.
To obtain and import an LKM/SSKM certificate, complete the following steps:
1. Open an SSH connection to the NetApp LKM/SSKM appliance and log in.
2. Add the Group Leader to the LKM/SSKM key sharing group. Enter lkmserver add
3. On the NetApp LKM appliance terminal, enter sys cert getcert-v2 to display the LKM certificate
4. Copy and paste the LKM/SSKM certificate content from the NetApp LKM/SSKM appliance
5. If you are using the Management application, the path to the file must be specified in the
720
host$ssh admin@10.33.54.231
admin@10.33.54.231's password:
Copyright (c) 2001-2009 NetApp, Inc.
All rights reserved
+--------------------------------+
| NetApp Appliance Management CLI |
| Authorized use only!
+--------------------------------+
Cannot read termcapdatabase;
using dumb terminal settings.
Checking system tamper status:
No physical intrusion detected.
third-party key-sharing-group "/" followed by the Group Leader IP address.
--
lkm-1>lkmserver add --type third-party --key-sharing-group \
"/" 10.32.244.71
NOTICE: LKM Server third-party 10.32.244.71 added.
Cleartext connections not allowed.
content.
lkm-1> sys cert getcert-v2
-----BEGIN CERTIFICATE-----
[content removed]
-----END CERTIFICATE-----
terminal into an editor buffer. Save the file as lkmcert.pem on the SCP-capable host. Save the
entire certificate, including the lines
CERTIFICATE-----.
Select Key Vault dialog box when creating a Group Leader. If the proper path is entered, the file
is imported.
|
-----BEGIN CERTIFICATE-----
Brocade Network Advisor SAN User Manual
type
--
and
-----END
53-1003154-01