- Notes, cautions, and warnings
- Preface
- Introduction
- Access Control
- Access control settings
- Security for management access
- Authentication
- Authorization
- Component access controls
- Data security settings
- Password policy
- Physical security controls
- Login banner and message of the day
- Logging
- Communication Security
- Communication security settings
- Port usage
- Ports used by Unisphere components on VNX for block
- How VNX for file works on the network
- Network encryption
- Management support for TLS communications on VNX2 systems
- SSL certificates
- Planning considerations for Public Key Infrastructure on VNX for file
- IP packet reflect on VNX for file systems
- Effect of filtering management network
- vSphere Storage API for Storage Awareness (VASA) support
- Special configurations
- Secure Remote Procedure Call
- Other security considerations
- Data Security Settings
- Data at Rest Encryption overview
- Data at Rest Encryption feature activation
- Encryption status
- Backup keystore file
- Data in place upgrade
- Hot spare operations
- Adding a disk drive to a VNX with encryption activated
- Removing a disk drive from a VNX with encryption enabled
- Replacing a chassis and SPs from a VNX with encryption enabled
- Security Maintenance
- Advanced Management Capabilities
- Secure deployment and usage settings
- TLS cipher suites
- LDAP-based directory server configuration
- VNX for file CLI role-based access
- VNX for file CLI security configuration operations
- Configuring password policy
- Configuring session timeout
- Protect session tokens
- Configuring network encryption and authentication using the SSL protocol
- Configuring PKI
- Creating the certificate provided by the persona
- Using the Control Station as the CA
- Obtaining CA certificates
- Generate a key set and certificate request
- Send the certificate request to the CA
- Import a CA-signed certificate
- List the available CA certificates
- Acquire a CA certificate
- Import a CA certificate
- Generate a new Control Station CA certificate
- Display the certificate
- Distribute the Control Station CA certificate
- Request and Install Customer-Supplied Certificates for Control Station
- Managing PKI
- Customize a login banner
- Create a MOTD
- Restrict anonymous root login
- Locking accounts after a specific number of failed logins
- VNX for block SSL certificate import
EMC® VNX® Series Security Configuration Guide for VNX
ESRS IP Client
The ESRS IP Client for VNX software monitors the operation of your VNX for block systems for error events and automatically notifies your service provider of error events. EMC strongly recommends the EMC Secure Remote Gateway solution for users who require customizable security options due to federal, industry, or corporate regulations. Enhanced security features such as encryption, access controls, authentication, audit, and authorization address today's stringent compliance regulations.
The ESRS IP Client for VNX software allows specified VNX for file control stations to send ConnectHome notifications to your service provider. This software also provides a path for your service provider to use to securely connect to your specified VNX for file system (through the associated control station).
This solution offers a secure architecture from end to end, including the following features:
- EMC issues X.509 digital certificates to authenticate the ESRS IP Gateway or ESRS IP Client for VNX to EMC.
- EMC professionals are authenticated using two unique factors.
- All EMC service professionals have a unique username that is logged with all their actions.
- All communication originates from the remote site. The ESRS IP Gateway or the ESRS IP Client for VNX does not accept unsolicited connections from EMC or the Internet.
- The heartbeat uses https and SOAP to ensure a firewall-friendly solution.
- All communications between EMC and the ESRS IP Gateway or ESRS IP Client for VNX includes the latest security practices and encryption technologies, including certificate libraries based on RSA Lockbox technology, and Advanced Encryption Standard (AES) 256-bit encryption.
- Those who implement the ESRS IP Gateway or ESRS IP Client for VNX solution can further control remote access by using the Policy Manager. The Policy Manager gives full control of how EMC interacts with VNX systems. SSL is available between the ESRS IP client and the policy manager.
For more information on ESRS Support for VNX systems, refer to theEMC Secure Remote Support for VNX technical module on the EMC Online Support website at http://Support.EMC.com.
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\