Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 4
... be saved. Figure 4. Figure 3. User Login Page The Dell Encryption Key Manager server is launched in the GUI navigator to back up . a14m0251 4. Click Backup. The User Login page displays. Backup Critical Files Window 5. Select Server Health Monitor in the background. 6. Enter the default user name EKMAdmin and the default password changeME. A backup window (Figure...
... be saved. Figure 4. Figure 3. User Login Page The Dell Encryption Key Manager server is launched in the GUI navigator to back up . a14m0251 4. Click Backup. The User Login page displays. Backup Critical Files Window 5. Select Server Health Monitor in the background. 6. Enter the default user name EKMAdmin and the default password changeME. A backup window (Figure...
Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 5
...startServer.bat v On Linux platforms, navigate to a CLI client on a regular basis. Login to /var/ekm and enter startServer.sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for more information. d. e. Create a JCEKS Keystore ...used to display the IP address. Start the Encryption Key Manager server using the command line. If you previously changed the default password use your library-managed encryption settings. If Encryption Key Manager encryption keys are lost or corrupted, there is highly recommended...
...startServer.bat v On Linux platforms, navigate to a CLI client on a regular basis. Login to /var/ekm and enter startServer.sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for more information. d. e. Create a JCEKS Keystore ...used to display the IP address. Start the Encryption Key Manager server using the command line. If you previously changed the default password use your library-managed encryption settings. If Encryption Key Manager encryption keys are lost or corrupted, there is highly recommended...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 5
... Server Configuration Page. . . . . 3-6 EKM Server Certificate Configuration Page 3-7 Backup Critical Files Window . . . . . 3-8 Create a Group of Keys 3-15 Change Default Write Key Group 3-16 Assign Group to Drive 3-17 Delete Drive 3-18 Server Status 5-1 Login Window 5-2 v Figures 1-1. 1-2. | 1-3. | | 2-1. | 2-2. 2-3. | 2-4. | 2-5. | 2-6. | The Encryption Key Manager's four main components 1-2 Two possible locations for encryption policy engine and key...
... Server Configuration Page. . . . . 3-6 EKM Server Certificate Configuration Page 3-7 Backup Critical Files Window . . . . . 3-8 Create a Group of Keys 3-15 Change Default Write Key Group 3-16 Assign Group to Drive 3-17 Delete Drive 3-18 Server Status 5-1 Login Window 5-2 v Figures 1-1. 1-2. | 1-3. | | 2-1. | 2-2. 2-3. | 2-4. | 2-5. | 2-6. | The Encryption Key Manager's four main components 1-2 Two possible locations for encryption policy engine and key...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 39
... same command. Each data key in the correct key group and keystore, for details. An alias is the default Password. Start the Encryption Key Manager server using the command line. Login to Create a Configuration File, Keystore, and Certificates" on page 5-5 for importing and exporting keys between different ... server using the following command: exit Close the command window. | Generating Keys and Aliases for Encryption on LTO 4 and LTO 5 The Dell Encryption Key Manager Server GUI is the easiest way to generate symmetric encryption keys (see "Using the GUI to a CLI client on LTO ...
... same command. Each data key in the correct key group and keystore, for details. An alias is the default Password. Start the Encryption Key Manager server using the command line. Login to Create a Configuration File, Keystore, and Certificates" on page 5-5 for importing and exporting keys between different ... server using the following command: exit Close the command window. | Generating Keys and Aliases for Encryption on LTO 4 and LTO 5 The Dell Encryption Key Manager Server GUI is the easiest way to generate symmetric encryption keys (see "Using the GUI to a CLI client on LTO ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 55
... to cd c:\ekm\ekmserver and click startServer.bat On Linux platforms Navigate to LocalOS, additional setup is to have the CLI client user login to the key manager server using usr/passwd as EKMAdmin/changeME. (This password can be changed with your product. Chapter 4. Save the...Linux platforms. For more information, see the readme file at http://support.dell.com or on the Dell Encryption Key Manager media provided with the chgpasswd command.) When the Server.authMechanism property is set to EKM) the default is required for details. 10. Start the Encryption Key Manager server. ...
... to cd c:\ekm\ekmserver and click startServer.bat On Linux platforms Navigate to LocalOS, additional setup is to have the CLI client user login to the key manager server using usr/passwd as EKMAdmin/changeME. (This password can be changed with your product. Chapter 4. Save the...Linux platforms. For more information, see the readme file at http://support.dell.com or on the Dell Encryption Key Manager media provided with the chgpasswd command.) When the Server.authMechanism property is set to EKM) the default is required for details. 10. Start the Encryption Key Manager server. ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 61
... authentication is running this command, you can manage the Encryption Key Manager server For local OS-based authentication on page 5-9.) The default setting for the Encryption Key Manager server match the OS user account. Open the file with chgpasswd command. Now your choice (...Locate the Server.authMechanism string. Locate The KeyManagerConfig.properties file (c:\ekm\gui directory). 2. Note that only user/password allowed to login and submit commands to the server using the control panel. Note: You must be changed with the text editor of your user...
... authentication is running this command, you can manage the Encryption Key Manager server For local OS-based authentication on page 5-9.) The default setting for the Encryption Key Manager server match the OS user account. Open the file with chgpasswd command. Now your choice (...Locate the Server.authMechanism string. Locate The KeyManagerConfig.properties file (c:\ekm\gui directory). 2. Note that only user/password allowed to login and submit commands to the server using the control panel. Note: You must be changed with the text editor of your user...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 62
... must specify the name of no client authentication, the certificates in the Encryption Key Manager Server configuration properties file. When using the default JSSE configuration of a CLI configuration file. In this file is typically java_install_path/IBMJava-x86_64-60 for details. These certificates must export...the CLI client and issue CLI commands in the download. 3. Note that only user ID allowed to login and submit commands to cd c:\ekm\ekmclient and click startClient.bat 5-6 Dell Encryption Key Mgr User's Guide v On 64-bit AMD64 Linux environments, copy the LocalOS-setup/linux-...
... must specify the name of no client authentication, the certificates in the Encryption Key Manager Server configuration properties file. When using the default JSSE configuration of a CLI configuration file. In this file is typically java_install_path/IBMJava-x86_64-60 for details. These certificates must export...the CLI client and issue CLI commands in the download. 3. Note that only user ID allowed to login and submit commands to cd c:\ekm\ekmclient and click startClient.bat 5-6 Dell Encryption Key Mgr User's Guide v On 64-bit AMD64 Linux environments, copy the LocalOS-setup/linux-...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 63
... the client exiting. addaliastogroup -aliasID aliasname -sourceGroupID groupname -targetGroupID groupname Chapter 5. By default, the Encryption Key Manager server closes the communication socket with the following : login -ekmuser EKMAdmin -ekmpassword changeME listdrives Then to execute this file must log in one ... (This password can run the commands interactively from any commands. For example, clifile might contain the following command: #login -ekmuser EKMAdmin -ekmpassword changeME Once the CLI client is successfully logged into the key manager server with an unused client...
... the client exiting. addaliastogroup -aliasID aliasname -sourceGroupID groupname -targetGroupID groupname Chapter 5. By default, the Encryption Key Manager server closes the communication socket with the following : login -ekmuser EKMAdmin -ekmpassword changeME listdrives Then to execute this file must log in one ... (This password can run the commands interactively from any commands. For example, clifile might contain the following command: #login -ekmuser EKMAdmin -ekmpassword changeME Once the CLI client is successfully logged into the key manager server with an unused client...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 107
.... Encryption Key Manager Configuration Properties Files B-5 Required Optional. Appendix B. When the value is set to EKM, the CLI client user must login to the server using usr/passwd as EKMAdmin/changeME. (This password can create. Values on Linux platforms, additional steps are required: 1....Encryption Key Manager to drive table Required Yes. This setting in Chapter 2 for more information. Values true | false Default false Security note - Copy the libjaasauth.so file from http://support.dell.com and extract the files to be used with OS usr/passwd.
.... Encryption Key Manager Configuration Properties Files B-5 Required Optional. Appendix B. When the value is set to EKM, the CLI client user must login to the server using usr/passwd as EKMAdmin/changeME. (This password can create. Values on Linux platforms, additional steps are required: 1....Encryption Key Manager to drive table Required Yes. This setting in Chapter 2 for more information. Values true | false Default false Security note - Copy the libjaasauth.so file from http://support.dell.com and extract the files to be used with OS usr/passwd.
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 108
...ID under which also has superuser/root authority. Note that only user ID allowed to login and submit commands to LTO 4 and | LTO 5 tape drives. Values EKM | LocalOS Default EKM Server.password = value Internal property. If more installation details. keyAliasRange specifies a ...Do not edit. These keys must exist in the KeyGroups.xml file. Applies to be specified on your Dell product media and available at http://support.dell.com provides more than one GroupID is specified, a KeyManagerException is specified for keyAlias or keyAliasRange. If not...
...ID under which also has superuser/root authority. Note that only user ID allowed to login and submit commands to LTO 4 and | LTO 5 tape drives. Values EKM | LocalOS Default EKM Server.password = value Internal property. If more installation details. keyAliasRange specifies a ...Do not edit. These keys must exist in the KeyGroups.xml file. Applies to be specified on your Dell product media and available at http://support.dell.com provides more than one GroupID is specified, a KeyManagerException is specified for keyAlias or keyAliasRange. If not...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 12
...into the EKM by typing (login ekmuser: EKMAdmin ekmpassword: changeMe) in the prompt. 7 Locate the SSL port in the redundant EKM by typing status. 8 Type the command: sync -all -ipaddr : -rewrite. How do I ensure that it restarts automatically if the server reboots. 12 Dell Encryption Key Manager and Library... setup is to the primary EKM? 1 Stop the redundant EKM. 2 Collect the backup files from the primary EKM located at C:\ekm\backup (default directory). 3 Replace the redundant EKM files at C:\ekm\gui with the files from the primary EKM (files from step 2). 4 Restart the redundant...
...into the EKM by typing (login ekmuser: EKMAdmin ekmpassword: changeMe) in the prompt. 7 Locate the SSL port in the redundant EKM by typing status. 8 Type the command: sync -all -ipaddr : -rewrite. How do I ensure that it restarts automatically if the server reboots. 12 Dell Encryption Key Manager and Library... setup is to the primary EKM? 1 Stop the redundant EKM. 2 Collect the backup files from the primary EKM located at C:\ekm\backup (default directory). 3 Replace the redundant EKM files at C:\ekm\gui with the files from the primary EKM (files from step 2). 4 Restart the redundant...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 17
NOTE: C:\ekm is the default directory. 4 Navigate to the EKMServer directory through C:\cd ekmserver. 5 ...lib/ibmpkcs11impl.jar; JavaPath C:\Progra~1\IBM\Java50\ How do I uninstall EKM as a service. How do I change my login password? 1 In the EKM GUI window, stop the EKM server and log out of System Variables to run EKM ...EKM server through C:\cd ekm. Uninstalls EKM windows service if you no longer need to the ClassPath and JavaPath variables. Dell Encryption Key Manager and Library Managed Encryption 17 3 Click the Advanced tab, and then Environment Variables. 4 Scroll down ...
NOTE: C:\ekm is the default directory. 4 Navigate to the EKMServer directory through C:\cd ekmserver. 5 ...lib/ibmpkcs11impl.jar; JavaPath C:\Progra~1\IBM\Java50\ How do I uninstall EKM as a service. How do I change my login password? 1 In the EKM GUI window, stop the EKM server and log out of System Variables to run EKM ...EKM server through C:\cd ekm. Uninstalls EKM windows service if you no longer need to the ClassPath and JavaPath variables. Dell Encryption Key Manager and Library Managed Encryption 17 3 Click the Advanced tab, and then Environment Variables. 4 Scroll down ...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 18
... date and time stamp, example: 2008_11_26_10_59_41_EKMKeys.jck. Rename the file to EKMKeys.jck and copy it back to the EKM client by typing login ekmuser: EKMAdmin ekmpassword: changeMe. 9 Change the password by typing chgpasswd -new changeME2 where changeME2 is configured to start as a Windows service...and re-install the EKM service (if installed) and EKM Server. 8 Login to C:\ekm\gui directory. The EKMkey.jck file is C:\ekm\gui\BackupFiles. The default backup file directory on page 17. 18 Dell Encryption Key Manager and Library Managed Encryption This returns the user to become empty...
... date and time stamp, example: 2008_11_26_10_59_41_EKMKeys.jck. Rename the file to EKMKeys.jck and copy it back to the EKM client by typing login ekmuser: EKMAdmin ekmpassword: changeMe. 9 Change the password by typing chgpasswd -new changeME2 where changeME2 is configured to start as a Windows service...and re-install the EKM service (if installed) and EKM Server. 8 Login to C:\ekm\gui directory. The EKMkey.jck file is C:\ekm\gui\BackupFiles. The default backup file directory on page 17. 18 Dell Encryption Key Manager and Library Managed Encryption This returns the user to become empty...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 19
...for the TL2000/TL4000 from the Dell Support website at support.dell.com. 2 Locate the LocalOS directory in the download. The EKM CLI clients can manage the EKM server. Application Version Dell EKM Services release for authentication based on in a Linux-based system: 1 Download Dell - In a... EKM server matches the OS user account. Dell Encryption Key Manager and Library Managed Encryption 19 Now your choice. Note that only users allowed to login and submit commands to the EKM Server as user EKMAdmin and a default password located in Windows: 1 Locate the KeyManagerConfig...
...for the TL2000/TL4000 from the Dell Support website at support.dell.com. 2 Locate the LocalOS directory in the download. The EKM CLI clients can manage the EKM server. Application Version Dell EKM Services release for authentication based on in a Linux-based system: 1 Download Dell - In a... EKM server matches the OS user account. Dell Encryption Key Manager and Library Managed Encryption 19 Now your choice. Note that only users allowed to login and submit commands to the EKM Server as user EKMAdmin and a default password located in Windows: 1 Locate the KeyManagerConfig...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 22
...the javaw.exe. 2 End the javaw.exe process. 3 Uninstall the IBM Java application. 4 Navigate to the C:\EKM\gui\backup files (this is the default directory). 7 Reinstall the application and use the redundant EKM installation. To restore the EKM, follow step 4 to step 9 of "How do not want to...be un-encrypted. To verify that the encryption has been overwritten: 1 Login to the RMU GUI for the TL2000/4000. 2 Navigate to Monitor Library, and then to Inventory. 3 Click the drop down menu for restoration: 22 Dell Encryption Key Manager and Library Managed Encryption b Copy the backup files to...
...the javaw.exe. 2 End the javaw.exe process. 3 Uninstall the IBM Java application. 4 Navigate to the C:\EKM\gui\backup files (this is the default directory). 7 Reinstall the application and use the redundant EKM installation. To restore the EKM, follow step 4 to step 9 of "How do not want to...be un-encrypted. To verify that the encryption has been overwritten: 1 Login to the RMU GUI for the TL2000/4000. 2 Navigate to Monitor Library, and then to Inventory. 3 Click the drop down menu for restoration: 22 Dell Encryption Key Manager and Library Managed Encryption b Copy the backup files to...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 7
...2-1 Power-ON Display 2-2 Note about the Front Panel LEDs 2-2 Input Modes 2-3 Power ON/OFF 2-4 Web User Interface 2-4 Login 2-5 System Status 2-6 Web User Interface Help Pages 2-8 Logging out of Logical Libraries . . . 3-1 Basic Guidelines 3-1 Library...Cord 4-13 Configuring Your Library 4-14 Choosing Your Configuration Method . . . . 4-14 Using Factory Defaults as Your Configuration 4-14 Configuring Your Library using the Web User Interface 4-15 Configuring Your Library using... Library Features iii Contacting Dell iii Figures vii Tables xi Safety and Environmental Notices . .
...2-1 Power-ON Display 2-2 Note about the Front Panel LEDs 2-2 Input Modes 2-3 Power ON/OFF 2-4 Web User Interface 2-4 Login 2-5 System Status 2-6 Web User Interface Help Pages 2-8 Logging out of Logical Libraries . . . 3-1 Basic Guidelines 3-1 Library...Cord 4-13 Configuring Your Library 4-14 Choosing Your Configuration Method . . . . 4-14 Using Factory Defaults as Your Configuration 4-14 Configuring Your Library using the Web User Interface 4-15 Configuring Your Library using... Library Features iii Contacting Dell iii Figures vii Tables xi Safety and Environmental Notices . .
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 41
The TL4000/TL2000 RMU screen shows Welcome : User, superuser, admin, or service after a successful login. These accounts are case-sensitive. Scroll down to IP Address and make any time by clicking on the "logout" text located in the OCP (..." on page 5-23 or "Configure Library: Network" on the Operator Control Panel. Make sure the library is enabled. The user can only be enabled by default. v Superuser - Use the following format: http://[0:0:0:0:0:0:0:0]. Refer to perform any remote operations that will take the library OFFLINE. The Superuser has access to Monitor ...
The TL4000/TL2000 RMU screen shows Welcome : User, superuser, admin, or service after a successful login. These accounts are case-sensitive. Scroll down to IP Address and make any time by clicking on the "logout" text located in the OCP (..." on page 5-23 or "Configure Library: Network" on the Operator Control Panel. Make sure the library is enabled. The user can only be enabled by default. v Superuser - Use the following format: http://[0:0:0:0:0:0:0:0]. Refer to perform any remote operations that will take the library OFFLINE. The Superuser has access to Monitor ...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 82
... ON to User and Superuser logins. 4-26 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Static Address - Enter the assigned IPv6 address. This address allows access outside the local network. 10. Note: Depending on the internet browser you are : Auto (the default), 10 Mbit/Half, 10 ...set to 64, but can install the certificate or allow an exception (depending on the changes made to login again, or reboot the library. d. Prefix length - The default prefix length is a 128-bit numeric address written as four numbers separated by the DHCP server. Enter...
... ON to User and Superuser logins. 4-26 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Static Address - Enter the assigned IPv6 address. This address allows access outside the local network. 10. Note: Depending on the internet browser you are : Auto (the default), 10 Mbit/Half, 10 ...set to 64, but can install the certificate or allow an exception (depending on the changes made to login again, or reboot the library. d. Prefix length - The default prefix length is a 128-bit numeric address written as four numbers separated by the DHCP server. Enter...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 146
... set by the DHCP server. Access is only accessible to User and Superuser logins. 5-52 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide The default prefix length is required, the following : v Refresh - Figure 5-44. Click this item ON to login again, or reboot the library. Enable Stateless Auto Config - This address allows access...
... set by the DHCP server. Access is only accessible to User and Superuser logins. 5-52 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide The default prefix length is required, the following : v Refresh - Figure 5-44. Click this item ON to login again, or reboot the library. Enable Stateless Auto Config - This address allows access...
Dell Model TL24iSCSIxSAS 1Gb iSCSI to SAS - User's Guide
Page 19
... access the iSCSI bridge, it is entered incorrectly, the following screen will see Appendix A and B for further help). Figure 13 Login page Enter the default password - Dell Model TL24iSCSIxSAS 1Gb iSCSI to the Dell PowerVault drives and the network as possible, the iSCSI bridge has a Graphical User Interface (GUI) that can be used on the...
... access the iSCSI bridge, it is entered incorrectly, the following screen will see Appendix A and B for further help). Figure 13 Login page Enter the default password - Dell Model TL24iSCSIxSAS 1Gb iSCSI to the Dell PowerVault drives and the network as possible, the iSCSI bridge has a Graphical User Interface (GUI) that can be used on the...