EMC® VNX® Series Security Configuration Guide for VNX

ESRS Device Client on Storage Processor

The ESRS device client on Storage Processor feature is included only in VNX operating environment (OE) for Block versions 5.32 that are later than version 05.32.000.5.209 or versions 05.33 that are later than version 05.33.000.5.051. This software monitors the operation of your VNX for Block systems for error events and automatically sends ConnectEMC notifications to your service provider. It also provides a path for your service provider to use to securely connect to your specified VNX for Block system (through the associated storage processor).

This solution offers a secure architecture from end to end, including the following features:

• EMC issues X.509 digital certificates to authenticate the ESRS device client on Storage Processor to EMC.
• EMC professionals are authenticated using two unique factors.
• All EMC service professionals have a unique username that is logged with all their actions.
• All communication originates from the Storage Processor. The ESRS device client on Storage Processor does not accept unsolicited connections from EMC or the Internet.
• All communications between EMC and the ESRS device client on Storage Processor includes the latest security practices and encryption technologies, including certificate libraries based on RSA Lockbox technology, and Advanced Encryption Standard (AES) 256-bit encryption.
• Those who implement the ESRS device client on Storage Processor solution can further control remote access by using the Policy Manager. The Policy Manager gives full control of how EMC interacts with VNX systems. SSL is available between the ESRS device client on Storage Processor and the Policy Manager.

For more information about the ESRS device client on Storage Processor feature for VNX for Block systems, refer to the EMC Secure Remote Support for VNX technical module on the EMC Online Support website at http://Support.EMC.com.