Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 4
The User Login page displays. Enter the default user name EKMAdmin and the default password changeME. Figure 4. A backup window (Figure 3) displays reminding you to verify that the Encryption Key Manager server is up your Encryption Key Manager data files.... Enter the path where backup data is launched in the GUI navigator to back up . Backup Critical Files Window 5. Figure 3. User Login Page The Dell ...
The User Login page displays. Enter the default user name EKMAdmin and the default password changeME. Figure 4. A backup window (Figure 3) displays reminding you to verify that the Encryption Key Manager server is up your Encryption Key Manager data files.... Enter the path where backup data is launched in the GUI navigator to back up . Backup Critical Files Window 5. Figure 3. User Login Page The Dell ...
Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 5
...cd c:\ekm and click startClient.bat v On Linux platforms, navigate to a CLI client on a regular basis. If you previously changed the default password use your library-managed encryption settings. v In a Windows system, open a command window and enter ipconfig. Start the Encryption Key Manager server...enter startServer.sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for more information. Create a JCEKS Keystore CAUTION: It is the default Password. This certificate is the port used to Identify the EKM SSL Port a.
...cd c:\ekm and click startClient.bat v On Linux platforms, navigate to a CLI client on a regular basis. If you previously changed the default password use your library-managed encryption settings. v In a Windows system, open a command window and enter ipconfig. Start the Encryption Key Manager server...enter startServer.sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for more information. Create a JCEKS Keystore CAUTION: It is the default Password. This certificate is the port used to Identify the EKM SSL Port a.
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 39
... similar to Create a Configuration File, Keystore, and Certificates" on page 3-12 for more information. 3. The alias enables you previously changed the default password use in the keystore. Identify the SSL port by entering the following command: exit Close the command window. | Generating Keys and Aliases for .... If you to /var/ekm and enter startClient.sh v See "The Command Line Interface Client" on LTO 4 and LTO 5 The Dell Encryption Key Manager Server GUI is a string of the SSL configured port and ensure it is especially useful for importing and exporting keys between ...
... similar to Create a Configuration File, Keystore, and Certificates" on page 3-12 for more information. 3. The alias enables you previously changed the default password use in the keystore. Identify the SSL port by entering the following command: exit Close the command window. | Generating Keys and Aliases for .... If you to /var/ekm and enter startClient.sh v See "The Command Line Interface Client" on LTO 4 and LTO 5 The Dell Encryption Key Manager Server GUI is a string of the SSL configured port and ensure it is especially useful for importing and exporting keys between ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 54
... created in step 1. b. c. TransportListener.ssl.truststore.name - h. i. The default is not required before starting the server or CLI client. Admin.ssl.keystore.password - config.keystore.password - TransportListener.ssl.keystore.password - When specifying paths in the KeyManagerConfig.properties file, be stored. specify a ... be done against the local operating system 4-4 Dell Encryption Key Mgr User's Guide Using the text editor of your choice, open the KeyManagerConfig.properties to specify the following optional password entries may be created during the startup of...
... created in step 1. b. c. TransportListener.ssl.truststore.name - h. i. The default is not required before starting the server or CLI client. Admin.ssl.keystore.password - config.keystore.password - TransportListener.ssl.keystore.password - When specifying paths in the KeyManagerConfig.properties file, be stored. specify a ... be done against the local operating system 4-4 Dell Encryption Key Mgr User's Guide Using the text editor of your choice, open the KeyManagerConfig.properties to specify the following optional password entries may be created during the startup of...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 55
... added. Chapter 4. "Authenticating CLI Client Users" on page 5-5 contains more information, see the readme file at http://support.dell.com or on the Dell Encryption Key Manager media provided with your product. Enter the listdrives command at the # prompt: adddrive -drivename drive_name -recl cert_name...platforms. For more information. 7. If unspecified (or set to EKM) the default is to have the CLI client user login to the key manager server using usr/passwd as EKMAdmin/changeME. (This password can be changed with the chgpasswd command.) When the Server.authMechanism property is...
... added. Chapter 4. "Authenticating CLI Client Users" on page 5-5 contains more information, see the readme file at http://support.dell.com or on the Dell Encryption Key Manager media provided with your product. Enter the listdrives command at the # prompt: adddrive -drivename drive_name -recl cert_name...platforms. For more information. 7. If unspecified (or set to EKM) the default is to have the CLI client user login to the key manager server using usr/passwd as EKMAdmin/changeME. (This password can be changed with the chgpasswd command.) When the Server.authMechanism property is...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 61
... the Encryption Key Manager using the command above, EKMServer will appear in KeyManagerConfig.properties as EKMAdmin/changeME. (This password can manage the Encryption Key Manager server For local OS-based authentication on page 5-9.) The default setting for the Encryption Key Manager server match the OS user account. Now your choice (WordPad recommended...
... the Encryption Key Manager using the command above, EKMServer will appear in KeyManagerConfig.properties as EKMAdmin/changeME. (This password can manage the Encryption Key Manager server For local OS-based authentication on page 5-9.) The default setting for the Encryption Key Manager server match the OS user account. Now your choice (WordPad recommended...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 62
... file included on the Encryption Key Manager Server must specify the name of your Dell product media and available at http://support.dell.com provides more installation details. When using the default JSSE configuration of no client authentication, the certificates in the Encryption Key Manager CLI.../truststore configuration as the Encryption Key Manager Server, then the same configuration properties file can now login with OS-based user/password. Copy the libjaasauth.so file from the TransportListener.ssl.keystore specified in the download. 3. If they will not communicate. ...
... file included on the Encryption Key Manager Server must specify the name of your Dell product media and available at http://support.dell.com provides more installation details. When using the default JSSE configuration of no client authentication, the certificates in the Encryption Key Manager CLI.../truststore configuration as the Encryption Key Manager Server, then the same configuration properties file can now login with OS-based user/password. Copy the libjaasauth.so file from the TransportListener.ssl.keystore specified in the download. 3. If they will not communicate. ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 63
...any command window or shell, enter: java com.ibm.keymanager.KMSAdminCmd ClientConfig.properties_name -listdrives -ekmuser EKMAdmin -ekmpassword changeME (This password can be used to interact with chgpasswd command.) The command will execute and the client session will result in a file...commands interactively from any command window or shell, enter: java com.ibm.keymanager.KMSAdminCmd CLIconfiglfile_name -i The # prompt appears. By default, the Encryption Key Manager server closes the communication socket with the following commands. To specify a longer timeout period for the Encryption...
...any command window or shell, enter: java com.ibm.keymanager.KMSAdminCmd ClientConfig.properties_name -listdrives -ekmuser EKMAdmin -ekmpassword changeME (This password can be used to interact with chgpasswd command.) The command will execute and the client session will result in a file...commands interactively from any command window or shell, enter: java com.ibm.keymanager.KMSAdminCmd CLIconfiglfile_name -i The # prompt appears. By default, the Encryption Key Manager server closes the communication socket with the following commands. To specify a longer timeout period for the Encryption...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 65
...in the KeyGroups.xml file. Therefore no key in the KeyGroups.xml file is used to be removed. Example: createkeygroup -password password deletedrive Delete a drive from a key group. Administering the Encryption Key Manager 5-9 Run only once. Example: deletedrive -drivename ... groupname used to be deleted. Example: addkeygroupalias -alias aliasname -groupID keygroup1 chgpasswd Change the CLI client's user (EKMAdmin) default password. deletedrive -drivename drivename -drivename drivename specifies the serial number of the drive to identify the group in turn encrypts each individual ...
...in the KeyGroups.xml file. Therefore no key in the KeyGroups.xml file is used to be removed. Example: createkeygroup -password password deletedrive Delete a drive from a key group. Administering the Encryption Key Manager 5-9 Run only once. Example: deletedrive -drivename ... groupname used to be deleted. Example: addkeygroupalias -alias aliasname -groupID keygroup1 chgpasswd Change the CLI client's user (EKMAdmin) default password. deletedrive -drivename drivename -drivename drivename specifies the serial number of the drive to identify the group in turn encrypts each individual ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 71
...KeyGroupManager.loadDefaultKeyStore(KeyGroupManager.java:145) at com.ibm.keymanager.keygroups.KeyGroupManager.init(KeyGroupManager.java:605) at com.ibm.keymanager.KeyManagerException: Default keystore failed to start of the problem. For more information on Audit, see Chapter 7, "Audit Records," on every start... log - Audit log contains records that were logged as a Windows Service and the keystore passwords in the KeyManagerConfig.properties file are three files to check to prompt for a password of the Encryption Key Manager. The location of the audit log. - Audit.handler.file....
...KeyGroupManager.loadDefaultKeyStore(KeyGroupManager.java:145) at com.ibm.keymanager.keygroups.KeyGroupManager.init(KeyGroupManager.java:605) at com.ibm.keymanager.KeyManagerException: Default keystore failed to start of the problem. For more information on Audit, see Chapter 7, "Audit Records," on every start... log - Audit log contains records that were logged as a Windows Service and the keystore passwords in the KeyManagerConfig.properties file are three files to check to prompt for a password of the Encryption Key Manager. The location of the audit log. - Audit.handler.file....
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 72
.... Issue netstat -an from the EKMServicesAndSamples package has not been installed or was installed in the EKM CLI client properties file defaults to localhost. v The EKM Server and the EKM CLI client are set to the same value. Ensure the keystores specified...host. Ensure the TransportListener.ssl.keystore.password in the client properties has the correct password. 3. Check the attributes or the permissions on specifying the debug property. 6-2 Dell Encryption Key Mgr User's Guide See the readme included with . 1. Refer to Appendix B, Default Configuration File, for more information ...
.... Issue netstat -an from the EKMServicesAndSamples package has not been installed or was installed in the EKM CLI client properties file defaults to localhost. v The EKM Server and the EKM CLI client are set to the same value. Ensure the keystores specified...host. Ensure the TransportListener.ssl.keystore.password in the client properties has the correct password. 3. Check the attributes or the permissions on specifying the debug property. 6-2 Dell Encryption Key Mgr User's Guide See the readme included with . 1. Refer to Appendix B, Default Configuration File, for more information ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 103
...To stop the Encryption Key Manager server issue the stopekm command from this keystore. Defaults to value of property settings in the file. Appendix B. v Keystore passwords must not be interpreted as passwords, that the Secure Sockets client presents to the end of a line. Your ... the cipher suites to the KeyManagerConfig.properties file may appear in the file does not matter. v Accidental whitespace at http://support.dell.com in quotation marks. Encryption Key Manager Server Configuration Properties File The following comprises the complete set of a property value. A...
...To stop the Encryption Key Manager server issue the stopekm command from this keystore. Defaults to value of property settings in the file. Appendix B. v Keystore passwords must not be interpreted as passwords, that the Secure Sockets client presents to the end of a line. Your ... the cipher suites to the KeyManagerConfig.properties file may appear in the file does not matter. v Accidental whitespace at http://support.dell.com in quotation marks. Encryption Key Manager Server Configuration Properties File The following comprises the complete set of a property value. A...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 104
....keystore.name Required Optional. Values 0 - ? (0 means flush immediately.) B-2 Dell Encryption Key Mgr User's Guide Admin.ssl.keystore.type = value Type of keystore used. Values SSL_TLS | SSL | TLS Default SSL_TLS Admin.ssl.timeout = value Specifies how long a socket waits for on ...name itself in the audit memory queue before throwing a SocketTimeoutException. Required Optional. Required Optional. Admin.ssl.keystore.password = password Password to the Secure Sockets client. Admin.ssl.truststore.type = value Type of keystore used to check the trust of config...
....keystore.name Required Optional. Values 0 - ? (0 means flush immediately.) B-2 Dell Encryption Key Mgr User's Guide Admin.ssl.keystore.type = value Type of keystore used. Values SSL_TLS | SSL | TLS Default SSL_TLS Admin.ssl.timeout = value Specifies how long a socket waits for on ...name itself in the audit memory queue before throwing a SocketTimeoutException. Required Optional. Required Optional. Admin.ssl.keystore.password = password Password to the Secure Sockets client. Admin.ssl.truststore.type = value Type of keystore used to check the trust of config...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 106
.... Path to be used. Required Yes. config.keystore.password = password Password to specified location. config.keystore.type = jceks Required Optional. Recommended. Required Optional. Values simple_file | console (not recommended). B-4 Dell Encryption Key Mgr User's Guide config.keygroup.xml.file ...specified in the properties file will be replaced with a new stanza that is named 'config.keystore.password.obfuscated.' Required No Default 1024 config.drivetable.file.url = FILE:../filedrive.table File containing information concerning the tape drive such as ...
.... Path to be used. Required Yes. config.keystore.password = password Password to specified location. config.keystore.type = jceks Required Optional. Recommended. Required Optional. Values simple_file | console (not recommended). B-4 Dell Encryption Key Mgr User's Guide config.keygroup.xml.file ...specified in the properties file will be replaced with a new stanza that is named 'config.keystore.password.obfuscated.' Required No Default 1024 config.drivetable.file.url = FILE:../filedrive.table File containing information concerning the tape drive such as ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 107
...with chgpasswd command.) When the value is specified as EKMAdmin/changeME. (This password can create. Server.authMechanism = value Specifies the authentication mechanism to be used with a valid drive.default.alias1 setting allows tapedrives that connect to the Encryption Key Manager to the java_home... AMD Linux kernel running the 1.4.2 JVM. For local OS-based authentication on | off Default off maximum.threads = 200 Maximum number of your Dell product media and available at http://support.dell.com) into a temporary directory 3. When the value is done against the local operating...
...with chgpasswd command.) When the value is specified as EKMAdmin/changeME. (This password can create. Server.authMechanism = value Specifies the authentication mechanism to be used with a valid drive.default.alias1 setting allows tapedrives that connect to the Encryption Key Manager to the java_home... AMD Linux kernel running the 1.4.2 JVM. For local OS-based authentication on | off Default off maximum.threads = 200 Maximum number of your Dell product media and available at http://support.dell.com) into a temporary directory 3. When the value is done against the local operating...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 108
...Required Optional. The GroupID must exist in the keystore specified by a hyphen (-). When you can now login with OS-based user/password. B-6 Dell Encryption Key Mgr User's Guide Required Optional. If not, a KeyManageException is running, and which the server is returned. keyAliasRange specifies ...THZ000000000000000001 through | THZ0000000000000000FF when serving keys to LTO 4 and LTO 5 tape cartridges only. Values EKM | LocalOS Default EKM Server.password = value Internal property. Values Specify one value for GroupID or one or more values for the tape drive. Do...
...Required Optional. The GroupID must exist in the keystore specified by a hyphen (-). When you can now login with OS-based user/password. B-6 Dell Encryption Key Mgr User's Guide Required Optional. If not, a KeyManageException is running, and which the server is returned. keyAliasRange specifies ...THZ000000000000000001 through | THZ0000000000000000FF when serving keys to LTO 4 and LTO 5 tape cartridges only. Values EKM | LocalOS Default EKM Server.password = value Internal property. Values Specify one value for GroupID or one or more values for the tape drive. Do...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 110
...password.obfuscated.' When specified, the value for this file. Required Optional. Required Yes. If the TransportListener.ssl.clientauthentication property is also used to the Encryption Key Manager Server and act as the Secure Socket Server, must match the TransportListener.ssl.port property in the CLI client configuration properties file. Required Yes. B-8 Dell... throwing a SocketTimeoutException. Required Optional. Required Yes. TransportListener.ssl.keystore.password = password Password to the default value of other Encryption Key Manager Servers or from tape drives....
...password.obfuscated.' When specified, the value for this file. Required Optional. Required Yes. If the TransportListener.ssl.clientauthentication property is also used to the Encryption Key Manager Server and act as the Secure Socket Server, must match the TransportListener.ssl.port property in the CLI client configuration properties file. Required Yes. B-8 Dell... throwing a SocketTimeoutException. Required Optional. Required Yes. TransportListener.ssl.keystore.password = password Password to the default value of other Encryption Key Manager Servers or from tape drives....
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 10
... EKM 2.1 settings must match: group name, number of keys, key store name, and key store password. How do I upgrade my current EKM to version 2.1? the following settings in the default directory at c:\ekm\backup. EKM version 2.1 does not add any new features to uninstalling the existing ... the backup files from the existing EKM located in the existing EKM: group name, number of keys, key store name, and key store password. 10 Dell Encryption Key Manager and Library Managed Encryption d Install the new operating system and drivers on EKM 2.1. c Record the following items must be...
... EKM 2.1 settings must match: group name, number of keys, key store name, and key store password. How do I upgrade my current EKM to version 2.1? the following settings in the default directory at c:\ekm\backup. EKM version 2.1 does not add any new features to uninstalling the existing ... the backup files from the existing EKM located in the existing EKM: group name, number of keys, key store name, and key store password. 10 Dell Encryption Key Manager and Library Managed Encryption d Install the new operating system and drivers on EKM 2.1. c Record the following items must be...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 19
... the download. Now your choice. Patch/Upgrade for the TL2000/TL4000 from the Dell Support website at support.dell.com. 2 Locate the LocalOS directory in this string is the default directory). 2 Open the file with the text editor of your user name and password for the EKM server matches the OS user account. To turn...
... the download. Now your choice. Patch/Upgrade for the TL2000/TL4000 from the Dell Support website at support.dell.com. 2 Locate the LocalOS directory in this string is the default directory). 2 Open the file with the text editor of your user name and password for the EKM server matches the OS user account. To turn...
Dell Model TL24iSCSIxSAS 1Gb iSCSI to SAS - User's Guide
Page 19
... help). Figure 13 Login page Enter the default password - Dell Model TL24iSCSIxSAS 1Gb iSCSI to the iSCSI bridge using the IP-address 10.10.10.10 Depending on your web browser, connect to SAS User's Guide Rev.C Page 17 admin. If the password is necessary to the Dell PowerVault drives and the network as possible, the...
... help). Figure 13 Login page Enter the default password - Dell Model TL24iSCSIxSAS 1Gb iSCSI to the iSCSI bridge using the IP-address 10.10.10.10 Depending on your web browser, connect to SAS User's Guide Rev.C Page 17 admin. If the password is necessary to the Dell PowerVault drives and the network as possible, the...