HP AE370A HP StorageWorks Fabric OS 6.x administrator guide (5697-0015, May 20 - Page 114
Managing secret key pairs
![]() |
UPC - 882780362611
View all HP AE370A manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 114 highlights
WARNING! This command may bring down the E_Port(s) if the DH-CHAP shared secrets are not installed correctly. To re-authenticate E_Ports: 1. Log in to the switch using an account assigned to the admin role. 2. On a switch running Fabric OS 5.3.0 and later, type the following command: $authutil --authinit Example $authutil --authinit 2,3,4 Example $authutil --authinit allE (all E_ports in the switch) For directors, use the slot/port format for specifying the port number. Example $authutil --authinit Managing secret key pairs 1/1, 1/2 When you configure the switches at both ends of a link to use DH-CHAP for authentication, you must also define a secret key pair-one for each end of the link. Use the secAuthSecret command to perform the following tasks: • View the WWN of switches with a secret key pair • Set the secret key pair for switches • Remove the secret key pair for one or more switches Note the following characteristics of a secret key pair: • The secret key pair must be set up locally on every switch. The secret key pair are not distributed fabric-wide. • If a secret key pair are not set up for a link, authentication fails. The "Authentication Failed" (reason code 05h) error will be reported and logged. • The minimum length of a shared secret is 8 bytes and the maximum length is 40 bytes. This section illustrates using the secAuthSecret command to display the list of switches in the current switch's shared secret database and to set the secret key pair for the current switch and a connected switch. See the for more details on the secAuthSecret command. NOTE: When setting a secret key pair, note that you are entering the shared secrets in plain text. Use a secure channel (for example, SSH or the serial console) to connect to the switch on which you are setting the secrets. To view the list of secret key pairs in the current switches database: 1. Log in to the switch using an account assigned to the admin role. 2. On a switch running Fabric OS 4.x, 5.x, or 6.0, type secAuthSecret --show; on a switch running Fabric OS 3.x, type secAuthSecret "--show". The output displays the WWN, Domain ID, and name (if known) of the switches with defined shared secrets: WWN DId Name 10:00:00:60:69:80:07:52 Unknown 10:00:00:60:69:80:07:5c 1 switchA 114 Configuring advanced security features
![](/manual_guide/products/hewlettpackard-ae370a-hp-storageworks-fabric-os-6x-administrator-guide-56970015-2009-6d92f40/114.png)