HP 8/8 Fabric OS Administrator's Guide v6.4.0 (53-1001763-01, June 2010) - Page 192

7 Authentication policy for fabric elements [email protected]'s password: Success: exported FCAP CA certificate Import CA for FCAP Once you receive the files back from the Certificate Authority, you will need to install or import them onto the local and remote switches. 1. Log in to the switch using an account assigned to the admin role. 2. Enter the secCertUtil import -fcapswcert command and verify the CA certificates are consistent on both local and remote switches. switch:admin> seccertutil import -fcapcacert Select protocol [ftp or scp]: scp Enter IP address: 10.1.2.3 Enter remote directory: /myHome/jdoe/OPENSSL Enter certificate name (must have a ".pem" suffix):CACert.pem Enter Login Name: jdoe [email protected]'s password: Success: imported certificate [CACert.pem]. Importing the FCAP switch certificate ATTENTION The CA certificates must be installed prior to installing the switch certificate. 1. Log in to the switch using an account assigned to the admin role. 2. Enter the secCertUtil import -fcapcacert command. switch:admin> seccertutil import -fcapswcert Select protocol [ftp or scp]: scp Enter IP address: 10.1.2.3 Enter remote directory: /myHome/jdoe/OPENSSL Enter certificate name (must have ".crt" or ".cer" ".pem" or ".psk" suffix):01.pem Enter Login Name: jdoe [email protected]'s password: Success: imported certificate [01.pem]. Updating the switch database for FCAP authentication 1. Log in to the switch using an account assigned to the admin role. 2. Enter the secAuthCertificate --set - wwn -usercert thirdparty command to update the switch database for peer switches. Starting FCAP authentication 1. Log in to the switch using an account assigned to the admin role. 2. Enter the authUtil --authinit command to start the authentication using the newly imported certificates. 3. Enter the authUtil --policy -sw command and select active or on, the default is passive. This makes the changes permanent and forces the switch to request authentication. 152 Fabric OS Administrator's Guide 53-1001763-01