HP StorageWorks MSA1510i HP Storage Management Utility user guide (383075-002, - Page 56

Setting the SSL certificate, A Secure Sockets Layer SSL certi

Page 56 highlights

2. To enter an initiator-specific CHAP secret in both the SMU and in the iSCSI initiator software utility: a. On the server, open the iSCSI initiator software utility. Navigate through the iSCSI initiator software utility and either assign a CHAP secret to the initiator or record the existing CHAP secret. b. In the SMU, select Initiator > CHAP Settings. Then, enter the same CHAP secret assigned to the initiator the iSCSI initiator software utility. 3. On the server, open the iSCSI initiator software utility. Navigate through the iSCSI initiator software utility to locate and select the option to perform mutual authentication. Setting the SSL certificate A Secure Sockets Layer (SSL) certificate provides browser security, ensuring a secure connection between the array controller and an initiating server, over which any amount of data can be sent securely. SSL works by using a private key to encrypt data transferred over the internet. The array controller ships with a default certificate already installed, but until a server-specific certificate is installed, a warning message is displayed when accessing the SMU. SSL certificate implementation on the MSA1510i makes use of PEM formatted files. Microsoft Certificate Services do not directly support the PEM file format, but the publicly available OpenSSL toolset is recommended for generating required keys and certificates or for converting Microsoft private key exports into PEM format. For more information, see the HP Storageworks Modular Smart Array 1510i Advanced Planning and Configuration Guide. To upload your server-specific SSL certificate: 56 Configure

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99

2.
To enter an initiator-speci
c CHAP secret in both the SMU and in the iSCSI initiator software utility:
a.
On the server,
open the iSCSI initiator software utility. Navigate through the iSCSI initiator
software utility and either assign a CHAP secret to the initiator or record the existing CHAP
secret.
b.
In the SMU,
select
Initiator
>
CHAP Settings
. Then, enter the same CHAP secret assigned to
the initiator the iSCSI initiator software utility.
3.
On the server,
open the iSCSI initiator software utility. Navigate through the iSCSI initiator software
utility to locate and select the option to perform mutual authentication.
Setting the SSL certi
cate
A Secure Sockets Layer (SSL) certi
cate provides browser security, ensuring a secure connection between
the array controller and an initiating server, over which any amount of data can be sent securely. SSL
works by using a private key to encrypt data transferred over the internet.
The array controller ships with a default certi
cate already installed, but until a server-speci
c certi
cate is
installed, a warning message is displayed when accessing the SMU.
SSL certi
cate implementation on the MSA1510i makes use of PEM formatted
les. Microsoft Certi
cate
Services do not directly support the PEM
le format, but the publicly available OpenSSL toolset is
recommended for generating required keys and certi
cates or for converting Microsoft private key
exports into PEM format. For more information, see the HP Storageworks Modular Smart Array 1510i
Advanced Planning and Con
guration Guide.
To upload your server-speci
c SSL certi
cate:
56
Con
gure