HP Brocade 8/12c Fabric OS Encryption Administrator's Guide - Page 49

Steps for connecting to an SKM or ESKM appliance 2 Setting up the local Certificate Authority (CA) on SKM or ESKM To create and install a local CA, complete the following steps: 1. Log in to the SKM/ESKM management web console using the admin password. 2. Select the Security tab. 3. Under Certificates & CAs, click Local CAs. 4. Enter information required by the Create Local Certificate Authority section of the window to create your local CA. - Enter a Certificate Authority Name and Common Name. These may be the same value. - Enter your organizational information. - Enter the Email Address to receive messages for the Security Officer. - Enter the Key Size. HP recommends using 2048 for maximum security. - Select Self-signed Root CA. - Enter the CA Certification Duration and Maximum User Certificate Duration. These values determine when the certificate must be renewed and should be set in accordance with your company's security policies. The default value for both is 3650 days or 10 years. 5. Click Create. The new local CA displays under Local Certificate Authority List. . FIGURE 16 Creating an HP SKM/ESKM local CA Fabric OS Encryption Administrator's Guide 29 53-1002159-03