Dell PowerStore 1000T EMC PowerStore Security Configuration Guide - Page 4

Data at Rest Encryption

.....................................................................................................................................................

33

Encryption activation

..........................................................................................................................................................

33

Encryption status

.................................................................................................................................................................

33

Key management

.................................................................................................................................................................

34

Keystore backup file

............................................................................................................................................................

34

Re-purpose a drive in an appliance with encryption enabled

.........................................................................................

34

Replacing a base enclosure and nodes from a system with encryption enabled

........................................................

35

Resetting an appliance to factory settings

......................................................................................................................

35

Chapter 5: Secure serviceability settings

........................................................................................

36

Operational description of SupportAssist

™

......................................................................................................................

36

SupportAssist options

.........................................................................................................................................................

37

SupportAssist Gateway Connect options

........................................................................................................................

38

SupportAssist Direct Connect options

.............................................................................................................................

38

Requirements for SupportAssist Gateway Connect

.......................................................................................................

38

Requirements for SupportAssist Direct Connect

............................................................................................................

39

Configuring SupportAssist

.................................................................................................................................................

39

Configure SupportAssist

.....................................................................................................................................................

39

Appendix A: TLS cipher suites

.........................................................................................................

41

Supported TLS cipher suites

..............................................................................................................................................

41

4

Contents

Section	Page
Dell EMC PowerStore Security Configuration Guide	3
Additional Resources	5
Authentication and access	6
Authenticating and Managing User Accounts, Roles, and Privileges	6
Factory default management	6
Session rules	7
Username and password usage	7
ESXi passwords	7
Roles and privileges	8
Roles and privileges related to file	8
User account management based on role privileges	10
Reset admin and service account passwords	11
Reset admin and service account passwords to their default values in a PowerStore T model appliance	11
Reset admin and service account passwords to their default values in a PowerStore X model appliance	12
Certificates	13
Viewing certificates	13
Secure communication between PowerStore appliances within a cluster	13
Secure communication for replication and data import	13
vSphere Storage API for Storage Awareness support	14
CHAP authentication	15
Configuring CHAP	15
External SSH access	16
Configuring external SSH access	16
SSH sessions	16
Service account password	16
SSH authorization	17
Appliance service scripts	17
Appliance node Ethernet service port and IPMItool	17
NFS secure	17
Security on file system objects	18
File systems access in a multiprotocol environment	19
User mapping	19
Access policies for NFS, SMB, and FTP	22
Credentials for file level security	23
Understanding Common AntiVirus Agent (CAVA)	24
Code signing	25
Communication security settings	26
Port Usage	26
Appliance network ports	26
Appliance network ports related to file	27
Network ports related to PowerStore X model appliances	30
Auditing	32
Auditing	32
Data security settings	33
Data at Rest Encryption	33
Encryption activation	33
Encryption status	33
Key management	34
Keystore backup file	34
Re-purpose a drive in an appliance with encryption enabled	34
Replacing a base enclosure and nodes from a system with encryption enabled	35
Resetting an appliance to factory settings	35
Secure serviceability settings	36
Operational description of SupportAssist™	36
SupportAssist options	37
SupportAssist Gateway Connect options	38
SupportAssist Direct Connect options	38
Requirements for SupportAssist Gateway Connect	38
Requirements for SupportAssist Direct Connect	39
Configuring SupportAssist	39
Configure SupportAssist	39
TLS cipher suites	41

Dell PowerStore 1000T EMC PowerStore Security Configuration Guide - Page 4

Secure serviceability settings, Appendix A: TLS cipher suites

Page 4 highlights