EMC® VNX® Series Security Configuration Guide for VNX

Certificate Authority (CA) certificates

When a VNX for file based client application requires a network connection with a server (such as FileMover’s connection with its secondary storage), the server provides a certificate as part of the negotiation for a secure connection. The client application confirms the server’s identity by validating the certificate. It does this by verifying the server certificate’s signature with the public key from the CA certificate.

Obtaining the required CA certificates is a manual task. Typically, before actual operation, you must identify the appropriate CA. Then you must check the list of CA certificates that are available. If a new CA certificate is required and an external CA is being used, you can obtain the CA certificate from the company’s website or from the person responsible for security. If the CA is local (enterprise-level or inhouse), obtain the CA certificate from the person who manages the CA.

To make the CA certificate known to system, you must import it. You can provide a path and import a file, or cut and paste the text. A file can be in either DER or PEM format. You can cut and paste text only in PEM format.