Brocade Fabric OS Encryption Administrator's Guide v6.3.0 (53-1001341-02, July 2009)

Encryption Administrator’s Guide 223
53-1001341-02
The HP Secure Key Manager
D
3. Enter the following in the Create Local Certificate Authority dialog box:
- Certificate Authority Name - HPSKM_CA1
- Common Name - HPSKM_CA1
- Organization Name - Brocade
- Organizational Unit Name - Storage Software
- Locality Name - SJC
- State or Province Name - CA
- Country Name - US
- Email Address - [e-mail]
- Key Size - 2048
- Certificate Authority Type - Select Self-Assigned Root CA. The values for CA certification
Duration and Maximum User Certificate Duration should both be 3650.
NOTE
The names shown are only examples. You may use different names. Remember the Certificate
Authority Name, or write it down. You will need later in the procedures for “Adding the local CA to the
trusted CAs list”, “Adding a server certificate for the SKM appliance”, and “Downloading the local CA
certificate file”.
4. Click Create.
Successful completion is indicated when the new Local CA appears on the Local Certificate
Authority List.
Adding the local CA to the trusted CAs list
You must now update the Trusted CAs list with the local CA name you created in “Setting up the
local certificate authority”.
1. Select the Security tab on the SKM key manager.
2. Select Trusted CA Lists under Certificates and CAs.
The Trusted CA Lists page is displayed.
3. Select Default under Profile Name.
4. Click Properties.
A properties dialog box is displayed.
5. Click Edit.
A dialog box is displayed that allows you to Add CAs to a Trusted CAs list from a list of Available
CAs, or to Remove CAs from the Trusted CAs list and place them in the list of Available CAs.
6. In the Available CAs list, select the local CA name you created and click Add to move the CA
name to the Trusted CAs list.
7. Cl ic k Save.