Dell PowerVault ML6000 User Manual page 107

Dell powervault ml6000 encryption key manager user's guide
Hide thumbs Also See for PowerVault ML6000:
Table of Contents

Advertisement

drive.acceptUnknownDrives = value
Automatically adds new drive contacting the Encryption Key Manager to
drive table
Required
Values
Default
Security note - This setting in combination with a valid drive.default.alias1
setting allows tapedrives that connect to the Encryption Key Manager to be
added and operational without a administrator validating that addition.
See "Automatically update tape drive table" in Chapter 3 for more
information.
fips = value
Federal Information Processing Standard. See "Federal Information
Processing Standard 140-2 Considerations" in Chapter 2 for more
information.
Required
Values
Default
maximum.threads = 200
Maximum number of threads the Encryption Key Manager can create.
Required
Server.authMechanism = value
Specifies the authentication mechanism to be used with local/remote
clients. When the value is set to EKM, the CLI client user must login to the
server using usr/passwd as EKMAdmin/changeME. (This password can
be changed with chgpasswd command.) When the value is specified as
LocalOS, client authentication is done against the local operating system
registry. (Be sure to shut the Encryption Key Manager server down before
changing the KeyManagerConfig.properties file.) The CLI client user must
login to the server with OS usr/passwd. For local OS-based authentication
on Linux platforms, additional steps are required:
1. Download Dell Release R175158 (EKMServicesAndSamples) from
http://support.dell.com and extract the files to a directory of your
choice.
2. Extract the contents of EKMServiceAndSamples.jar (included on your
Dell product media and available at http://support.dell.com) into a
temporary directory
3. Copy the libjaasauth.so file from the LocalOS-setup appropriate to your
platformto java_home/jre/bin.
v On 32-bit Intel Linux environments, copy the LocalOS-setup/
linux_ia32/libjaasauth.so file to the java_home/jre/bin/ directory,
where java_home is typically java_install_path/IBMJava2-i386-142 for a
32-bit Intel Linux kernel running the 1.4.2 JVM.
v On 64-bit AMD64 Linux environments, copy the
LocalOS-setup/linux-x86_64/libjaasauth.so file to the
java_home/jre/bin/ directory, where java_home is typically
java_install_path/IBMJava2-amd64-142 for a 64-bit AMD Linux kernel
running the 1.4.2 JVM.
For Windows platforms this file is not necessary.
Appendix B. Encryption Key Manager Configuration Properties Files
Yes.
true | false
false
Optional.
on | off
off
Optional.
B-5

Advertisement

Table of Contents
loading

Table of Contents