Oracle StorageTek T10000D Manual page 45

Non-proprietary security policy
Table of Contents

Advertisement

6. Enable SSH and SFTP services and disable Peek and Poke services
After pressing the "Commit" button, the ETD will reboot to normal operation.
3.1.2 Encryption Disabled Approved Mode Set-Up
The StorageTek T10000D Tape Drive is initially delivered to an Oracle customer
with the Encryption Disabled Mode configured. Upon first receiving the ETD,
the CO shall perform the following steps to ensure the module is operating in the
Encryption Disabled Mode:
1. Follow the steps outlined in Section 3.1.1 (Initial Set-Up)
2. Set the drive to an "offline" state (Drive Operations  Set Offline)
3. Using VOP, navigate to the "Encrypt" tab in the "View Drive Data" window
(Retrieve  View Drive Data)
4. Verify that the "Use OKM or DPKM" Field is set to "UNKN" and the
"Permanently encrypting" Field is set to "UNKN". If these fields are not set to
these values then follow the steps in 3.2.3 to place the module in the
Encryption Disabled Approved Mode.
3.1.3 Encryption Enabled Approved Mode Set-Up
To place the StorageTek T10000D Tape Drive into the Encryption Enabled Mode,
the CO shall perform the following steps:
1. Follow the steps outlined in Section 3.1.1 (Initial Set-Up)
2. Using OKM, the CO shall add the ETD to the OKM cluster
3. Set the drive to an "offline" state (Drive Operations  Set Offline)
4. Using VOP, navigate to the "Encrypt" tab in the "Drive Data" window
(Configure  Drive Data)
5. Set the "Use OKM or DPKM" Field to "OKM"
6. Set the "Permanently encrypting" field to "No"
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
b. RO Hardware Revision:
c. DC Hardware Revision:
d. PRML Hardware Revision:
a. Set the drive to an "offline" state
(Drive Operations  Set Offline)
b. Using VOP, navigate to the "Network" tab in the "Drive Data"
window (Configure  Drive Data)
c. Set "Telnet Enabled" and "FTP Enabled" to "No"
d. Set "SSH & SFTP Enabled" to "Yes"
e. Set "SSH FIPS Mode" to "Yes"
f. Press the "Commit" button
© Copyright 2017 Oracle Corporation
xxxx9500
xx050383
00004502
Page 45 of 51

Advertisement

Table of Contents
loading

Table of Contents