HP Integrity rx2800 Smart Setup Scripting Toolkit Administrator's Guide 4.0 - Page 38

Increasing security in SSTK, Encrypting the repository password

Get HP Integrity rx2800 - i2 PDF manuals and user guides View all HP Integrity rx2800 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 38 highlights

You can obtain the BootDeviceWWID and BootDeviceLUN information from the hpacuscripting output, as follows: ; Controller Specifications ; Controller HP MSA1500 CS Controller Controller= WWN 500508B30090F5B1 1 . . . SSPState= Disabled ; Unassigned Parallel SCSI Drives ; 1:5 (36.4 GB),1:6 (36.4 GB) ; Array Specifications Array= A ; Array Drive Type is Parallel SCSI ; 1:1 (72.8 GB),1:2 (72.8 GB),1:3 (72.8 GB) Drive= 1:1,1:2,1:3 OnlineSpare= No ; Logical Drive Specifications LogicalDrive= 1 2 RAID= 5 Size= 138927 Sectors= 32 StripeSize= 64 ArrayAccelerator= Enabled ; Available SSP Adapters 10000000C969628A (Local,Online), 10000000C969628B (Local,Offline), 10000000C9696304 (Unknown,Offline) SSPAdaptersWithAccess= None 1 The BootDeviceWWID information 2 The LUN number. After the applyhwconf action executes, the HBA configuration file is loaded; the device must be available for booting. To automatically set the boot device, see "sethbabootdevice action" (page 24). Increasing security in SSTK You can increase security in the SSTK by performing the following tasks: • Encrypting the repository password • Setting permissions for repository access Encrypting the repository password The sstkencrypt utility encrypts the repository password. It is a 32-bit command-line tool designed to run on the repository system. To set the repository_encrypted_pass variable, run the following command: y:\>utilities\win32\sstkencrypt.exe Type the repository password: sstkserver Set the encrypted password in SSTKStart.cmd script to: a89ea897a9aa9ea298 In this case, set the following variables in the SSTKStart script: repository_name=192.168.0.220 share_name=sstk_repository repository_user=Administrator rem repository_password= repository_encrypted_pass=a89ea897a9aa9ea298 38 Advanced topics

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
You can obtain the
BootDeviceWWID
and
BootDeviceLUN
information from the
hpacuscripting
output, as follows:
; Controller Specifications
; Controller HP MSA1500 CS Controller
Controller= WWN 500508B30090F5B1
1
.
.
.
SSPState= Disabled
; Unassigned Parallel SCSI Drives
; 1:5 (36.4 GB),1:6 (36.4 GB)
; Array Specifications
Array= A
; Array Drive Type is Parallel SCSI
; 1:1 (72.8 GB),1:2 (72.8 GB),1:3 (72.8 GB)
Drive= 1:1,1:2,1:3
OnlineSpare= No
; Logical Drive Specifications
LogicalDrive= 1
2
RAID= 5
Size= 138927
Sectors= 32
StripeSize= 64
ArrayAccelerator= Enabled
; Available SSP Adapters 10000000C969628A (Local,Online),
10000000C969628B (Local,Offline), 10000000C9696304 (Unknown,Offline)
SSPAdaptersWithAccess= None
1
The BootDeviceWWID information
2
The LUN number.
After the
applyhwconf
action executes, the HBA configuration file is loaded; the device must
be available for booting.
To automatically set the boot device, see
“sethbabootdevice action” (page 24)
.
Increasing security in SSTK
You can increase security in the SSTK by performing the following tasks:
•
Encrypting the repository password
•
Setting permissions for repository access
Encrypting the repository password
The
sstkencrypt
utility encrypts the repository password. It is a 32-bit command-line tool
designed to run on the repository system. To set the
repository_encrypted_pass
variable,
run the following command:
y:\>
utilities\win32\sstkencrypt.exe
Type the repository password:
sstkserver
Set the encrypted password in SSTKStart.cmd script to:
a89ea897a9aa9ea298
In this case, set the following variables in the SSTKStart script:
repository_name=192.168.0.220
share_name=sstk_repository
repository_user=Administrator
rem repository_password=
repository_encrypted_pass=a89ea897a9aa9ea298
38
Advanced topics