Dell PowerEdge MX7000 EMC OpenManage Enterprise-Modular Edition Version 1.20.0 - Page 51

Enabling FIPS mode, Managing certificates, Generating certificate signing request, Configuring alerts

Page 51 highlights

Enabling FIPS mode The United States government agencies and contractors use the FIPS standards. FIPS Mode is intended to meet the requirements of FIPS 140-2 level 1. To enable FIPS mode, click Application Settings > Security > Federal Information Processing Standards (FIPS) NOTE: After enabling the FIPS mode or reset configuration operation, wait for sometime for the application to become stable. Managing certificates You can view details of the SSL certificates on the Certificates page. The information includes the details of: ● The organization the certificate is issued to ● The issuing authority of the certificate ● The validity of the certificate If you have the security setup privilege, you can perform the following tasks: ● View the SSL certificate that is deployed. ● Generate a new certificate signing request (CSR) ● Upload the server certificate, based on the CSR generated, to replace the default or currently deployed certificate. Uploading certificates To upload the certificate: 1. Click Application Settings > Security > Certificates. 2. Click Upload to browse and upload the certificate. Generating certificate signing request 1. Click Application Settings > Security > Certificates. 2. At the bottom-right of the page, click Generate Certificate Signing Request. 3. Enter the required details and click Generate. ● OME-Modular does not create an SSL certificate on time change or on every boot or time change and boot simultaneously. ● OME-Modular generates a new SSL certificate with validity from build_time till (build_time +10 years) only during first boot scenarios such as firmware update, racresetcfg, and FIPS mode changes. NOTE: Only the users with the chassis administrator privileges can generate certificate signing requests. Configuring alerts This section allows you to configure the email, SNMP, and the syslog settings to trigger alerts. Configuring email alerts 1. Click Application Settings > Alerts. 2. Click Email Configuration 3. Enter the SMTP Server Network Address. NOTE: The SMTP server network address can have a maximum length of 255 characters. 4. If the server requires authentication, select Enable Authentication. Logging in to OME-Modular 51

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122

Enabling FIPS mode
The United States government agencies and contractors use the FIPS standards. FIPS Mode is intended to meet the
requirements of FIPS 140-2 level 1.
To enable FIPS mode, click
Application Settings
>
Security
>
Federal Information Processing Standards (FIPS)
NOTE:
After enabling the FIPS mode or reset configuration operation, wait for sometime for the application to become
stable.
Managing certificates
You can view details of the SSL certificates on the
Certificates
page. The information includes the details of:
The organization the certificate is issued to
The issuing authority of the certificate
The validity of the certificate
If you have the security setup privilege, you can perform the following tasks:
View the SSL certificate that is deployed.
Generate a new certificate signing request (CSR)
Upload the server certificate, based on the CSR generated, to replace the default or currently deployed certificate.
Uploading certificates
To upload the certificate:
1.
Click
Application Settings
>
Security
>
Certificates
.
2.
Click
Upload
to browse and upload the certificate.
Generating certificate signing request
1.
Click
Application Settings
>
Security
>
Certificates
.
2.
At the bottom-right of the page, click
Generate Certificate Signing Request
.
3.
Enter the required details and click
Generate
.
OME–Modular does not create an SSL certificate on time change or on every boot or time change and boot
simultaneously.
OME–Modular generates a new SSL certificate with validity from build_time till (build_time +10 years) only during first
boot scenarios such as firmware update,
racresetcfg
, and FIPS mode changes.
NOTE:
Only the users with the chassis administrator privileges can generate certificate signing requests.
Configuring alerts
This section allows you to configure the email, SNMP, and the syslog settings to trigger alerts.
Configuring email alerts
1.
Click
Application Settings
>
Alerts
.
2.
Click
Email Configuration
3.
Enter the
SMTP Server Network Address
.
NOTE:
The SMTP server network address can have a maximum length of 255 characters.
4.
If the server requires authentication, select
Enable Authentication
.
Logging in to OME-Modular
51