Storage System Service Ssh Interface - EMC Unity Family Security Configuration Manual

Storage system service SSH interface

to Unisphere apply to specific commands depending on the role associated with the
current login account.
Saved settings
You can save the following settings on the host on which you run Unisphere CLI:
User access credentials, including your username and password, for each system
l
you access.
SSL certificates imported from the system.
l
Information about default system to access through Unisphere CLI, including the
l
system name or IP address and the system port number.
Unisphere CLI saves the settings to a secure lockbox that resides locally on the host
on which Unisphere CLI is installed. The stored data is only available on the host where
it was saved and to the user who saved it. The lockbox resides in the following
locations:
On Windows Server 2003 (XP): C:\Documents and Settings\
l
$<user_name>\Local Settings\ApplicationData\.emc\uemcli\cert
On Windows 7, Windows 8, and Windows 10: C:\Users\${user_name}
l
\AppData\Local\.emc\uemcli\cert
On UNIX/Linux: <home_directory>/.emc/uemcli/cert
l
Locate the files config.xml and config.key. If you uninstall Unisphere CLI, these
directories and files are not deleted, giving you the option of retaining them. If these
files are no longer needed, consider deleting them.
The storage system SSH service interface when enabled provides a command line
interface for performing related and overlapping functionality to that which is available
from the Unisphere Service page (under System select Service
Enable SSH).
The service account enables users to perform the following functions:
Perform specialized storage system service commands for monitoring and
l
troubleshooting storage system settings and operations.
Operate standard Linux commands as a member of a non-privileged Linux user
l
account. This account does not have access to proprietary system files,
configuration files, or user/customer data.
To learn more about using service commands, see the technical notes document,
Service Commands .
The storage system SSH service interface setting is persistent across system reboots,
failovers, and in both Service Mode and Normal Mode. Therefore, enabling the storage
system SSH service interface will keep the interface enabled until it is explicitly
disabled from the Unisphere Service page (under System select Service
Tasks Disable SSH).
>
For maximum system security, it is recommended to leave the storage system SSH
service interface disabled at all times unless it is specifically needed to perform service
operations on the storage system. After performing the necessary service operations,
disable the SSH interface to ensure that the system remains secure.
Service Tasks
>

Storage system service SSH interface

Access Control
>
Service
>
15