Brocade Fabric OS Encryption Administrator's Guide v6.3.0 (53-1001341-02, July 2009)

xii Encryption Administrator’s Guide
53-1001341-02
The HP Secure Key Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .218
Obtaining a signed certificate from the
HP SKM appliance software . . . . . . . . . . . . . . . . . . . . . . . . . . .219
Importing a signed certificate . . . . . . . . . . . . . . . . . . . . . . . . . .220
Exporting the KAC certificate request . . . . . . . . . . . . . . . . . . .221
Configuring a Brocade group. . . . . . . . . . . . . . . . . . . . . . . . . . .221
Registering the Brocade user name and password in encryption
groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222
Setting up the local certificate authority . . . . . . . . . . . . . . . . .222
Adding the local CA to the trusted CAs list . . . . . . . . . . . . . . . .223
Adding a server certificate for the SKM appliance . . . . . . . . .224
Downloading the local CA certificate file . . . . . . . . . . . . . . . . .225
Creating an SKM Key vault High Availability cluster . . . . . . . .226
Copying the local CA certificate. . . . . . . . . . . . . . . . . . . . . . . . .226
Adding an HP SKM appliance to a cluster . . . . . . . . . . . . . . . .226
Signing the KAC certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . .227
Importing a signed certificate (SAN Management program) .229
SKM key vault high availability deployment . . . . . . . . . . . . . . .229
Thales Encryption Manager for Storage . . . . . . . . . . . . . . . . . . . . .232
Generating the Brocade user name and password. . . . . . . . .232
Adding a client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232
Signing the CSR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .233
Registering the certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . .235
Thales key vault high availability deployment . . . . . . . . . . . . .235
Index