In this tutorial, we guide you through the process of resetting global encryption strength and clearing errors in Dell Data Domain after upgrading the Data Domain Operating System. Learn how to address the security alert indicating that the 'Default authentication mode for DD Boost clients does not provide over-the-wire encryption.' Follow our step-by-step instructions using both the CLI and the Data Domain System Manager UI to ensure your system is secure and running smoothly.
Welcome to our tutorial on how to reset global encryption strength and clear errors in Dell Data Domain. After upgrading the Data Domain Operating System, you may encounter a security alert indicating that the 'Default authentication mode for DD Boost clients does not provide over-the-wire encryption.' This alert is raised if DD Boost encryption strength was set to none in the previous DDOS release.
In this video, we'll guide you through the steps to reset the encryption strength and clear the error using the CLI and the graphical user interface of the Data Domain System Manager. Login to the DD system via SSH. First, use "alerts show current" to identify the alert you want to clear. As an example we choose the last one ID m0-905 Clear the alert manually using the command: alerts clear alert-id <alert-id-list> followed by the ID we identified.
Next, set the global encryption strength to medium or high using the following syntax: ddboost option set global-authentication-mode none global-encryption-strength {medium | high}. If you need to reset the global authentication mode and encryption strength to none, use the command: ddboost option set global-authentication-mode none global-encryption-strength none. Now, let's go through the steps using the Data Domain System Manager UI.
Log in to the Data Domain System Manager. Navigate to Protocols, then DD Boost. Click 'More Tasks' in the upper right corner and select 'Set Options'. Under Security, choose the encryption strength to medium or high, and click OK. To clear the alert, go to Health, then Alert. Select the alert and click 'Clear'. To reset the Global Authentication Mode back to 'none', go to Protocols, then DD Boost. Click 'Configure' next to Global Authentication Mode, select 'none', and click OK.
This will reset both global authentication mode and encryption strength to none. Please note, keeping the current global-encryption setting may trigger a reminder alert, but DD Boost operations will continue successfully. Setting encryption to medium or high may impact Boost I/O performance. If over-the-wire encryption is required, adjust the setting accordingly.
If you're using Avamar Integrated Data Protection Appliance with Session Security Settings enabled, you can safely disregard this alert. Avamar already encrypts the data, so there's no need to use DD Boost encryption. In this case, you can just clear the alert as described before.
Thank you for watching.
