Converting The Kac Certificate Format; Adding A Device To The Device Group - Brocade Communications Systems Brocade 8/12c User Manual

18
Steps for connecting to a TKLM appliance
1. Select a switch from the Encryption Center Devices table, then select Switch > Export
2. Select Signed switch certificate, then click OK.
3. Make a note of this location.

Converting the KAC certificate format

The KAC certificate exported from the encryption switch is in .pem format. It is automatically
converted to a .der format during the export process; however, if you need to manually convert the
file before importing it to the TKLM server, you can do so by completing the following steps:
1. Go to openssl utility.
2. Run
Establishing a default key store and device group on TKLM
To establish a default key store and Fabric OS device group on TKLM, complete the following steps:
1. Obtain the necessary user credentials, then log in to the TKLM user interface.
2. Select Advanced Configuration > Keystore.
3. Click OK to accept the default keystore settings.

Adding a device to the device group

After you have established a default key store and Fabric OS device group on TKLM, add a
Fabric OS device to the device group.
1. Select Tivoli Key Lifecycle Manager > Welcome.
2. Click Go.
3. Click Add on the Devices table menu task bar.
4. Under Device Serial Number, enter the serial number that is displayed for each node that you
470
Certificate from the menu task bar, or right-click the switch and select Export Certificate.
The Export Signed Certificate dialog box displays.
A dialog box displays allowing you to save the signed certificate in .pem format in My
Documents on your work station.
openssl x509 -outform der -in KAC_Certificate_Name.pem -out
KAC_Certificate_Name.der
The Keystore page displays.
The device group BRCD_ENCRYPTOR you just created is displayed in the Administration panel.
The Configure Keys page displays. This page identifies this step as Step Two: Identify Drives.
An entry is added to the table.
are adding to the device group.
.
Brocade Network Advisor SAN User Manual
53-1002167-01