Configuring Encryption - HP SN3000B Administrator's Manual

3. Enter the authUtil command to set the switch policy mode to Active or On:
4. Enable the DH-CHAP authentication protocol:
5. Enable authentication with DH group 4 or "*":
For additional information about establishing DH-CHAP secrets, see
on page 149.
For additional information about configuring DH-CHAP authentication for E_Ports, see
"Authentication policy for fabric elements"

Configuring encryption

NOTE
Before performing this procedure, you must authenticate the port as described in
enabling authentication"
using the portEncCompShow command. See
configuration"
To configure encryption on a port, follow these steps:
1. Connect to the switch and log in using an account with secure admin permissions, or an
2. Disable the port on which you want to configure encryption. Use the portDisable command.
3. Enter the portCfgEncrypt
4. Enable the port with the portEnable command.
After manually enabling the port, the new configuration becomes active.
Fabric OS Administrator's Guide
53-1002446-01
authutil --policy -sw active
or:
authutil --policy -sw on
authutil --set -a dhchap
or:
authutil --set -a all
authutil --set -g 4
DH Group was set to 4.
or
authutil --set -g "*"
DH Group was set to 0,1,2,3,4.
on page 314. It is also recommended that you check for port availability
on page 313 for details.
account with OM permissions for the EncryptionConfiguration RBAC class of commands.
This example enables encryption on port 21 on a Brocade 6510 switch:
portcfgencrypt --enable 21
This example enables encryption on port 15 of an FC16-32 blade in slot 9 of an enterprise
class platform:
portcfgencrypt --enable 9/15
Configuring encryption and compression
on page 143.
"Viewing the encryption and compression
enable command.
--
"Secret key pairs for DH-CHAP"
"Configuring and
14
315