Storage System Interfaces, Services, And Features That Support Internet Protocol Version 6 - EMC Unity Family Security Configuration Manual

Communication Security
Storage system interfaces, services, and features that
support Internet Protocol version 6
EMC Unity All Flash, EMC Unity Hybrid, EMC UnityVSA 4.0 Security Configuration Guide
42
Note
When the array is in FIPS mode and a certificate is generated off-array, in addition to
the certificate being in PEM format, the private key needs to be in PKCS#1 format.
You can use an openssl command to do this conversion. Once the .cer and .pk files are
generated, this additional step is required when the certificate will be used on an array
in FIPS mode.
To increase security, some organizations use CA certificate chaining. Certificate
chaining links two or more CA certificates together. The primary CA certificate is the
root certificate at the end of the CA certificate chain. Since the system needs the
complete certificate chain to verify the authenticity of a certificate that is received,
ask the directory server administrator if certificate chaining is used. If so, you must
concatenate all the relevant certificates into a single file and upload that version. The
certificate must be in PEM/Base64 encoded format and use the suffix .cer.
You can configure the interfaces on a system and use Internet Protocol version 6
(IPv6) addresses to configure different services and features. The following list
contains features where IPv6 protocol is supported:
Interfaces (SF, iSCSI) - to statically assign an IPv4 or IPv6 address to an interface
l
Hosts - to enter a network name, an IPv4 address or an IPv6 address of a host
l
Routes - to configure a route for IPv4 or IPv6 protocol
l
Diagnostics - to initiate a diagnostic ping CLI command using either an IPv4 or
l
IPv6 destination address. In Unisphere select Settings
Ping/Trace to access the Ping/Trace screen which supports the IPv6 destination
addresses as well.
All storage system components support IPv4, and most support IPv6.
page 42 shows the availability of IPv6 support by setting type and component:
Table 12 IPv6 support by setting type and component
Setting Type
Unisphere management
settings
Unisphere host configuration
setting
Component
Management port
Domain Name Server (DNS)
NTP (network time protocol)
server
Remote logging server
LDAP server
Microsoft Exchange
VMware datastore (NFS)
VMware datastore (VMFS)
Hyper-V datastore
Access Routing
> > >
Table 12 on
IPv6 Supported
Yes
Yes
Yes
Yes
No
Yes
Yes
Yes
Yes