Brocade Communications Systems Brocade 8/12c User Manual page 494

18
Steps for connecting to an LKM appliance
2. Add the group leader to the LKM key sharing group. Enter lkmserver add
3. On the NetApp LKM appliance terminal, enter sys cert getcert-v2 to display the LKM certificate
4. Copy and paste the LKM certificate content from the NetApp LKM appliance terminal into an
5. If you are using the Management application, the path to the file must be specified on the
Exporting and registering the switch KAC certificates on LKM
The encryption switch signed KAC certificates must be exported and registered on the LKM
appliance.
1. Select Configure > Encryption from the menu task bar.
2. The Encryption Center dialog box displays.
3. Select a switch from the Encryption Center Devices table, then select Switch > Export
FIGURE 165
4. Select Signed switch certificate (X.509), then click OK.
5. Register the signed KAC certificate you exported from the member node with the NetApp
450
key-sharing-group "/" followed by the group leader IP address.
--
lkm-1>lkmserver add --type third-party --key-sharing-group \
"/" 10.32.244.71
NOTICE: LKM Server third-party 10.32.244.71 added.
Cleartext connections not allowed.
content.
lkm-1> sys cert getcert-v2
-----BEGIN CERTIFICATE-----
[content removed]
-----END CERTIFICATE-----
editor buffer. Save the file as lkmcert.pem on the SCP-capable host. Save the entire certificate,
including the lines
-----BEGIN CERTIFICATE-----
Select Key Vault dialog box when creating a group leader. If the proper path is entered, the file
is imported.
Certificate from the menu task bar, or right-click a switch and select Export Certificate.
The Export Switch Certificate dialog box displays
Export switch certificate dialog box
You are prompted to save the CSR, which can be saved to your SAN Management Program
client PC, or an external host of your choosing.
LKM appliance.
--
and
-----END CERTIFICATE-----.
(Figure 165).
Brocade Network Advisor SAN User Manual
type third-party
53-1002167-01