Signing The Encryption Node Kac Csr On Kmip - Brocade Communications Systems StoreFabric SN6500B User Manual

20
Steps for connecting to a KMIP appliance (SafeNet KeySecure)

Signing the encryption node KAC CSR on KMIP

The KAC certificate signing request generated when the encryption node is initialized must be
exported for each encryption node and signed by the Brocade local CA on KMIP. The signed
certificate must then be imported back into the encryption node.
1. Select Configure > Encryption from the menu task bar to display the The Encryption Center
2. Select a switch from the Encryption Center Devices table, then select Switch > Export
3. Select Public Key Certificate Request (CSR), then click OK.
4. Launch the KMIP administration console in a web browser and log in.
5. From the SSKM Management Console, select the Security tab, then select CAs & SSL
6. The Certificate and CA Configuration page displays.
7.
8. Click Sign Request.
584
dialog box (Refer to Figure 185
Certificate, from the menu task bar.
The Export Switch Certificate dialog box displays.
You are prompted to save the CSR, which can be saved to your SAN Management Program
client PC, or an external host of your choosing.
Alternatively, you may select a switch, then select Switch > Properties. Click the Export button
beside the Public Key Certificate Request, or copy the CSR for pasting into the Certificate
Request Copy area on the ESKM/SKM Sign Certificate Request page.
Certificates > Local CAs.
Under Local Certificate Authority List, select the Local CA name, and verify that the CA status is
shown as Active.
The Sign Certificate Request page displays
on page 526).
(Figure 220).
Brocade Network Advisor SAN User Manual
53-1002696-01