Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 4
... the Encryption Key Manager server is launched in the GUI navigator to be saved. User Login Page The Dell Encryption Key Manager server is up your Encryption Key Manager data files. Figure 4. Figure 3. Enter the default user name EKMAdmin and the default password changeME. Select Server Health Monitor in the background. 6. A backup window (Figure 3) displays reminding...
... the Encryption Key Manager server is launched in the GUI navigator to be saved. User Login Page The Dell Encryption Key Manager server is up your Encryption Key Manager data files. Figure 4. Figure 3. Enter the default user name EKMAdmin and the default password changeME. Select Server Health Monitor in the background. 6. A backup window (Figure 3) displays reminding...
Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 5
...Windows, navigate to cd c:\ekm and click startClient.bat v On Linux platforms, navigate to this 5 If you previously changed the default password use your library-managed encryption settings. Logout from displaying the Encryption Key Manager host IP address in the Server Health Monitor: v ....sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for 5 years. Login to configure your new password.) Once login is successful User successfully logged in is highly recommended that a copy of recovering the encrypted data. v...
...Windows, navigate to cd c:\ekm and click startClient.bat v On Linux platforms, navigate to this 5 If you previously changed the default password use your library-managed encryption settings. Logout from displaying the Encryption Key Manager host IP address in the Server Health Monitor: v ....sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for 5 years. Login to configure your new password.) Once login is successful User successfully logged in is highly recommended that a copy of recovering the encrypted data. v...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 39
v On Windows, navigate to cd c:\ekm and click startClient.bat v On Linux platforms, navigate to this: server is successful User successfully logged in a keystore. TCP port: 3801, SSL port: 443. You can also use in writing and reading | encrypted data on page 5-1 ...Create a Configuration File, Keystore, and Certificates" on page 3-12 for Encryption on LTO 4 and LTO 5 The Dell Encryption Key Manager Server GUI is displayed. 4. If you previously changed the default password use the keytool -genseckey command to generate a data key, you use your encryption data keys and store them in...
v On Windows, navigate to cd c:\ekm and click startClient.bat v On Linux platforms, navigate to this: server is successful User successfully logged in a keystore. TCP port: 3801, SSL port: 443. You can also use in writing and reading | encrypted data on page 5-1 ...Create a Configuration File, Keystore, and Certificates" on page 3-12 for Encryption on LTO 4 and LTO 5 The Dell Encryption Key Manager Server GUI is displayed. 4. If you previously changed the default password use the keytool -genseckey command to generate a data key, you use your encryption data keys and store them in...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 54
...be done against the local operating system 4-4 Dell Encryption Key Mgr User's Guide Note to the Encryption Key Manager. Audit.Handler.File.Directory - TransportListener.ssl.keystore.name - f. g. If these passwords for additional security. 6. specify the password of the keystore created in step 1. ...truststore.name - specify the path and filename of the keystore created in step 1. The default is not required before starting the server or CLI client. specify the password of the keystore created in step 1. This information will be used in later steps. ...
...be done against the local operating system 4-4 Dell Encryption Key Mgr User's Guide Note to the Encryption Key Manager. Audit.Handler.File.Directory - TransportListener.ssl.keystore.name - f. g. If these passwords for additional security. 6. specify the password of the keystore created in step 1. ...truststore.name - specify the path and filename of the keystore created in step 1. The default is not required before starting the server or CLI client. specify the password of the keystore created in step 1. This information will be used in later steps. ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 55
... prompt to KeyManagerConfig.properties. 8. Chapter 4. "Authenticating CLI Client Users" on page 5-5 contains more information, see the readme file at http://support.dell.com or on the Dell Encryption Key Manager media provided with the chgpasswd command.) When the... required for Linux platforms. For more information. 7. If unspecified (or set to EKM) the default is to have the CLI client user login to /var/ekm/ekmserver and enter . ./startServer.sh See "Starting, Refreshing, and Stopping... using usr/passwd as EKMAdmin/changeME. (This password can be changed with your product. registry.
... prompt to KeyManagerConfig.properties. 8. Chapter 4. "Authenticating CLI Client Users" on page 5-5 contains more information, see the readme file at http://support.dell.com or on the Dell Encryption Key Manager media provided with the chgpasswd command.) When the... required for Linux platforms. For more information. 7. If unspecified (or set to EKM) the default is to have the CLI client user login to /var/ekm/ekmserver and enter . ./startServer.sh See "Starting, Refreshing, and Stopping... using usr/passwd as EKMAdmin/changeME. (This password can be changed with your product. registry.
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 61
... is not present, add it is uninstalled. To issue CLI commands you may still be used by using user/password as follows: 1. The CLI client user must first start and stop the Encryption Key Manager using the command above, EKMServer will appear in the configuration...=LocalOS in KeyManagerConfig.properties as EKMAdmin/changeME. (This password can manage the Encryption Key Manager server For local OS-based authentication on page 5-9.) The default setting for the Encryption Key Manager server match the OS user account. The Command Line Interface Client Once the Encryption...
... is not present, add it is uninstalled. To issue CLI commands you may still be used by using user/password as follows: 1. The CLI client user must first start and stop the Encryption Key Manager using the command above, EKMServer will appear in the configuration...=LocalOS in KeyManagerConfig.properties as EKMAdmin/changeME. (This password can manage the Encryption Key Manager server For local OS-based authentication on page 5-9.) The default setting for the Encryption Key Manager server match the OS user account. The Command Line Interface Client Once the Encryption...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 62
... the Encryption Key Manager Server configuration properties file. When using the default JSSE configuration of a CLI configuration file. If they will not communicate. If the Encryption Key Manager CLI client is the user ID under which you choose, you must specify the name of no... Manager CLI Client to use SSL to your Dell product media and available at http://support.dell.com provides more installation details. For Windows platforms this way the client knows it can now login with OS-based user/password. See "Debugging Communication Problems Between the CLI ...
... the Encryption Key Manager Server configuration properties file. When using the default JSSE configuration of a CLI configuration file. If they will not communicate. If the Encryption Key Manager CLI client is the user ID under which you choose, you must specify the name of no... Manager CLI Client to use SSL to your Dell product media and available at http://support.dell.com provides more installation details. For Windows platforms this way the client knows it can now login with OS-based user/password. See "Debugging Communication Problems Between the CLI ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 65
... The unique groupname used to be deleted. createkeygroup -password password -password The password that replaces the previous password. The keystore encrypts the key group's key, which in the clear. -alias The new aliasname for later retrieval. Example: addkeygroupalias -alias aliasname -groupID keygroup1 chgpasswd Change the CLI client's user (EKMAdmin) default password. Example: deletedrive -drivename 000123456789 delgroupalias Delete a key...
... The unique groupname used to be deleted. createkeygroup -password password -password The password that replaces the previous password. The keystore encrypts the key group's key, which in the clear. -alias The new aliasname for later retrieval. Example: addkeygroupalias -alias aliasname -groupID keygroup1 chgpasswd Change the CLI client's user (EKMAdmin) default password. Example: deletedrive -drivename 000123456789 delgroupalias Delete a key...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 72
...are set to the same value. Ensure the TransportListener.ssl.keystore.password in the server properties. 2. Ensure none of the TransportListener.ssl.host property in the EKM CLI client properties file defaults to localhost. The value of the certificates in these keystores have... configuration or starting the key manager server. Refer to Appendix B, Default Configuration File, for more information about authentication. If the ports are not talking on specifying the debug property. 6-2 Dell Encryption Key Mgr User's Guide v The EKM Server properties file has Server.authMechanism = ...
...are set to the same value. Ensure the TransportListener.ssl.keystore.password in the server properties. 2. Ensure none of the TransportListener.ssl.host property in the EKM CLI client properties file defaults to localhost. The value of the certificates in these keystores have... configuration or starting the key manager server. Refer to Appendix B, Default Configuration File, for more information about authentication. If the ports are not talking on specifying the debug property. 6-2 Dell Encryption Key Mgr User's Guide v The EKM Server properties file has Server.authMechanism = ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 104
... access Admin.ssl.keystore.name Required Optional. Values 0 - ? (0 means flush immediately.) B-2 Dell Encryption Key Mgr User's Guide Required Optional. Required Optional. Default success Audit.event.Queue.max = 0 The maximum number of event objects in the audit memory queue ...be prompted for additional security and the stanza name itself in the specified outcome are recorded Required Yes. Admin.ssl.keystore.password = password Password to value of config.keystore.file property. When specified, the value for this property is obfuscated for on start of...
... access Admin.ssl.keystore.name Required Optional. Values 0 - ? (0 means flush immediately.) B-2 Dell Encryption Key Mgr User's Guide Required Optional. Required Optional. Default success Audit.event.Queue.max = 0 The maximum number of event objects in the audit memory queue ...be prompted for additional security and the stanza name itself in the specified outcome are recorded Required Yes. Admin.ssl.keystore.password = password Password to value of config.keystore.file property. When specified, the value for this property is obfuscated for on start of...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 106
...serial number, certificates, etc. config.keystore.file = value Specifies the keystore to specified location. Default jceks debug = value Enables debug for on start of the file is saved. Required Optional... stanza that is named 'config.keystore.password.obfuscated.' Only a current and previous version of the Encryption Key Manager. Required Yes. Required Yes. config.keystore.password = password Password to access config.keystore.file. When...| keystore | console | none. Required Optional. Required when debug.output = simple_file. B-4 Dell Encryption Key Mgr User's Guide
...serial number, certificates, etc. config.keystore.file = value Specifies the keystore to specified location. Default jceks debug = value Enables debug for on start of the file is saved. Required Optional... stanza that is named 'config.keystore.password.obfuscated.' Only a current and previous version of the Encryption Key Manager. Required Yes. Required Yes. config.keystore.password = password Password to access config.keystore.file. When...| keystore | console | none. Required Optional. Required when debug.output = simple_file. B-4 Dell Encryption Key Mgr User's Guide
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 107
...the Encryption Key Manager server down before changing the KeyManagerConfig.properties file.) The CLI client user must login to the server with a valid drive.default.alias1 setting allows tapedrives that connect to the Encryption Key Manager to a directory of ...password can create. drive.acceptUnknownDrives = value Automatically adds new drive contacting the Encryption Key Manager to be used with local/remote clients. This setting in Chapter 2 for more information. Values on Linux platforms, additional steps are required: 1. Copy the libjaasauth.so file from http://support.dell...
...the Encryption Key Manager server down before changing the KeyManagerConfig.properties file.) The CLI client user must login to the server with a valid drive.default.alias1 setting allows tapedrives that connect to the Encryption Key Manager to a directory of ...password can create. drive.acceptUnknownDrives = value Automatically adds new drive contacting the Encryption Key Manager to be used with local/remote clients. This setting in Chapter 2 for more information. Values on Linux platforms, additional steps are required: 1. Copy the libjaasauth.so file from http://support.dell...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 108
... a key group name to prime the list of symmetric keys and serve as default when no cr-lf. When you can now login with OS-based user/password. Values EKM | LocalOS Default EKM Server.password = value Internal property. Do not edit. Values Specify one value for GroupID or... Encryption Key Manager to use aliases KMA0238ab34, KMB0000034acd2345678a and the range of aliases. If not, a KeyManageException is returned. B-6 Dell Encryption Key Mgr User's Guide If more installation details. keyAliasRange specifies a sequentialKeyID and hexadecimal digits up to be specified on your...
... a key group name to prime the list of symmetric keys and serve as default when no cr-lf. When you can now login with OS-based user/password. Values EKM | LocalOS Default EKM Server.password = value Internal property. Do not edit. Values Specify one value for GroupID or... Encryption Key Manager to use aliases KMA0238ab34, KMB0000034acd2345678a and the range of aliases. If not, a KeyManageException is returned. B-6 Dell Encryption Key Mgr User's Guide If more installation details. keyAliasRange specifies a sequentialKeyID and hexadecimal digits up to be specified on your...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 110
... be replaced with a new stanza that is also used to access TransportListener.ssl.keystore.name. TransportListener.ssl.keystore.password = password Password to verify the identities of public keys and signed certificates used by using this property is 3801. TransportListener.ssl....Key Manager Servers or from tape drives. Recommended. B-8 Dell Encryption Key Mgr User's Guide Required Optional. Value Specified in the properties file will listen on a read() before throwing a SocketTimeoutException. The default TCP port number is obfuscated for requests from the Encryption...
... be replaced with a new stanza that is also used to access TransportListener.ssl.keystore.name. TransportListener.ssl.keystore.password = password Password to verify the identities of public keys and signed certificates used by using this property is 3801. TransportListener.ssl....Key Manager Servers or from tape drives. Recommended. B-8 Dell Encryption Key Mgr User's Guide Required Optional. Value Specified in the properties file will listen on a read() before throwing a SocketTimeoutException. The default TCP port number is obfuscated for requests from the Encryption...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 18
...Alternatively, uninstall and re-install the EKM service (if installed) and EKM Server. This returns the user to C:\ekm\gui directory. The default backup file directory on page 17. 18 Dell Encryption Key Manager and Library Managed Encryption For more information, see "How do I attempt to log...time stamp, example: 2008_11_26_10_59_41_EKMKeys.jck. 8 Login to the EKM client by typing login ekmuser: EKMAdmin ekmpassword: changeMe. 9 Change the password by typing chgpasswd -new changeME2 where changeME2 is configured to start as a Windows service?" EKM Server is the desired new...
...Alternatively, uninstall and re-install the EKM service (if installed) and EKM Server. This returns the user to C:\ekm\gui directory. The default backup file directory on page 17. 18 Dell Encryption Key Manager and Library Managed Encryption For more information, see "How do I attempt to log...time stamp, example: 2008_11_26_10_59_41_EKMKeys.jck. 8 Login to the EKM client by typing login ekmuser: EKMAdmin ekmpassword: changeMe. 9 Change the password by typing chgpasswd -new changeME2 where changeME2 is configured to start as a Windows service?" EKM Server is the desired new...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 19
... the EKM Server as user EKMAdmin and a default password located in Windows: 1 Locate the KeyManagerConfig.properties file. (C:\ekm\gui is the default directory). 2 Open the file with the text editor of your user name and password for the ML6000 or the Dell - By default, the EKM CLI client... the EKM CLI client for the TL2000/TL4000 from the Dell Support website at support.dell.com. 2 Locate the LocalOS directory in a Linux-based system: 1 Download Dell - Dell Encryption Key Manager and Library Managed Encryption 19 Note that only users allowed to login and submit commands to...
... the EKM Server as user EKMAdmin and a default password located in Windows: 1 Locate the KeyManagerConfig.properties file. (C:\ekm\gui is the default directory). 2 Open the file with the text editor of your user name and password for the ML6000 or the Dell - By default, the EKM CLI client... the EKM CLI client for the TL2000/TL4000 from the Dell Support website at support.dell.com. 2 Locate the LocalOS directory in a Linux-based system: 1 Download Dell - Dell Encryption Key Manager and Library Managed Encryption 19 Note that only users allowed to login and submit commands to...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 22
...section shows Not Encrypted. How do I recover from a forgotten EKM GUI login password? 1 Go to the Windows Task Manager and locate the javaw.exe. 2... files (this is un-encrypted can be un-encrypted. instructions if the user needs to preserve the previously created keys. 8 If applicable, restore the...file directory without the date and time stamp prefix. It is the default directory). 7 Reinstall the application and use the redundant EKM installation....for the TL2000/4000. 2 Navigate to Monitor Library, and then to Inventory. 3 Click the drop down menu for restoration: 22 Dell Encryption Key ...
...section shows Not Encrypted. How do I recover from a forgotten EKM GUI login password? 1 Go to the Windows Task Manager and locate the javaw.exe. 2... files (this is un-encrypted can be un-encrypted. instructions if the user needs to preserve the previously created keys. 8 If applicable, restore the...file directory without the date and time stamp prefix. It is the default directory). 7 Reinstall the application and use the redundant EKM installation....for the TL2000/4000. 2 Navigate to Monitor Library, and then to Inventory. 3 Click the drop down menu for restoration: 22 Dell Encryption Key ...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 41
...the 0.0.0.0 format (four octets). This inactive mode can only be enabled by default. The user can initiate from those restricted to Service only.The Admin account has access to all menus. v The Admin user has access to monitor, configure and run unit diagnostics (only exception is ...Assigned IP Address using the IPv4 address or a known Chapter 2. To login, select the Role type and enter the correct password. The TL4000/TL2000 RMU screen shows Welcome : User, superuser, admin, or service after a successful login. The Superuser has access to Monitor → Library → Network on...
...the 0.0.0.0 format (four octets). This inactive mode can only be enabled by default. The user can initiate from those restricted to Service only.The Admin account has access to all menus. v The Admin user has access to monitor, configure and run unit diagnostics (only exception is ...Assigned IP Address using the IPv4 address or a known Chapter 2. To login, select the Role type and enter the correct password. The TL4000/TL2000 RMU screen shows Welcome : User, superuser, admin, or service after a successful login. The Superuser has access to Monitor → Library → Network on...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 122
... (refer to 8 Host SNMP Disabled Email Notifications None User Access Restore from Operator Control Panel or Web User Interface Admin secure (default) 5-28 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Note: Ensure the USB device is formatted for the library to...does not use the up and down keys to a USB device. This menu item restores the factory default RMU Admin user access password. Important: Restoring factory defaults will wipe out all - Table 5-4. Ethernet Setting Auto DHCP Enabled Note: DNS server addresses, if ...
... (refer to 8 Host SNMP Disabled Email Notifications None User Access Restore from Operator Control Panel or Web User Interface Admin secure (default) 5-28 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Note: Ensure the USB device is formatted for the library to...does not use the up and down keys to a USB device. This menu item restores the factory default RMU Admin user access password. Important: Restoring factory defaults will wipe out all - Table 5-4. Ethernet Setting Auto DHCP Enabled Note: DNS server addresses, if ...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 150
...the Remote Management Unit (RMU) and/or the Operator Control Panel (OCP). to cancel the changes made to the factory defaults. Enter SNMP settings. Saving and restoring configuration data can be sent. The feature has been implemented on the RMU and...password to be sent, or leave as "public". Configure Library: SNMP Page 2. Check this box to have SNMP traps sent to "SNMP Messaging" on page 1-7 and Appendix F, "SNMP Status MIB Variables and Traps," on the OCP, but with slightly different functionality. 5-56 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User...
...the Remote Management Unit (RMU) and/or the Operator Control Panel (OCP). to cancel the changes made to the factory defaults. Enter SNMP settings. Saving and restoring configuration data can be sent. The feature has been implemented on the RMU and...password to be sent, or leave as "public". Configure Library: SNMP Page 2. Check this box to have SNMP traps sent to "SNMP Messaging" on page 1-7 and Appendix F, "SNMP Status MIB Variables and Traps," on the OCP, but with slightly different functionality. 5-56 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User...