Key Management Server Linkage Function - Fujitsu Eternus DX100 S3 User Manual

Chapter 5 System Settings and Display
5.3 System Settings
5.3.9

Key Management Server Linkage Function

The key management server linkage function manages the authentication keys that are used for SED
encryption in the key server.
This section explains the commands to set up the key management server linkage function.
• Setting of the key management machine name
• Display of the key management machine name
• Setting of the key server
• Display of the key server
• Registration of the SSL/KMIP server certificate
• Registration of the key group
• Modification of the key group
• Deletion of the key group
• Display of the key group
• Key update of the key group
• Recovery from key group blockage
The commands described in this section are not supported in the ETERNUS DX200F.
■ Summary of using CLI to perform key management server linkage function settings
The steps involved in setting the key management server linkage function are provided below.
Procedure
1
Register the SED authentication key.
Use the "set sed-authentication" command to register the SED authentication key. After executing this
command, use the "show sed-authentication" command to check if the SED authentication key is
registered.
2
Create an SSL self-signed certificate.
Use the "create ssl-certificate" command to create a Secure Socket Layer (SSL) server key and an SSL
server certificate.
3
Set the key management machine name.
Use the "set sed-key-machine-name" command to set the key management machine name. After
executing this command, use the "show sed-key-machine-name" command to check if the key
management machine name is set.
4
Add the key servers.
Use the "set sed-key-server" command to set up the key servers.
635
ETERNUS CLI User's Guide
Copyright 2014 FUJITSU LIMITED P2X0-1210-05ENZ0