- Notes, cautions, and warnings
- Preface
- Introduction
- Access Control
- Access control settings
- Security for management access
- Authentication
- Authorization
- Component access controls
- Data security settings
- Password policy
- Physical security controls
- Login banner and message of the day
- Logging
- Communication Security
- Communication security settings
- Port usage
- Ports used by Unisphere components on VNX for block
- How VNX for file works on the network
- Network encryption
- Management support for TLS communications on VNX2 systems
- SSL certificates
- Planning considerations for Public Key Infrastructure on VNX for file
- IP packet reflect on VNX for file systems
- Effect of filtering management network
- vSphere Storage API for Storage Awareness (VASA) support
- Special configurations
- Secure Remote Procedure Call
- Other security considerations
- Data Security Settings
- Data at Rest Encryption overview
- Data at Rest Encryption feature activation
- Encryption status
- Backup keystore file
- Data in place upgrade
- Hot spare operations
- Adding a disk drive to a VNX with encryption activated
- Removing a disk drive from a VNX with encryption enabled
- Replacing a chassis and SPs from a VNX with encryption enabled
- Security Maintenance
- Advanced Management Capabilities
- Secure deployment and usage settings
- TLS cipher suites
- LDAP-based directory server configuration
- VNX for file CLI role-based access
- VNX for file CLI security configuration operations
- Configuring password policy
- Configuring session timeout
- Protect session tokens
- Configuring network encryption and authentication using the SSL protocol
- Configuring PKI
- Creating the certificate provided by the persona
- Using the Control Station as the CA
- Obtaining CA certificates
- Generate a key set and certificate request
- Send the certificate request to the CA
- Import a CA-signed certificate
- List the available CA certificates
- Acquire a CA certificate
- Import a CA certificate
- Generate a new Control Station CA certificate
- Display the certificate
- Distribute the Control Station CA certificate
- Request and Install Customer-Supplied Certificates for Control Station
- Managing PKI
- Customize a login banner
- Create a MOTD
- Restrict anonymous root login
- Locking accounts after a specific number of failed logins
- VNX for block SSL certificate import
EMC® VNX® Series Security Configuration Guide for VNX
Preface
As part of an effort to improve and enhance the performance and capabilities of its product lines, revisions of product hardware and software are periodically released. Therefore, some functions described in this document may not be supported by all versions of the software or hardware currently in use. For the most up-to-date information on product features, refer to your product release notes.
If a product does not function properly or does not function as described in this document, please contact your Customer Support representative.
Special notice conventions used in this document
NOTE:Indicates a hazardous situation which, if not avoided, will result in death or serious injury.
WARNING:Indicates a hazardous situation which, if not avoided, could result in death or serious injury.
CAUTION:Indicates a hazardous situation which, if not avoided, could result in minor or moderate injury.
NOTE:Addresses practices not related to personal injury.
NOTE:Presents information that is important, but not hazard-related.
Where to get help
Support, product, and licensing information can be obtained as follows:
- Product information—For documentation, release notes, software updates, or for information about products, licensing, and service, go to Online Support (registration required) at http://Support.EMC.com.
- Troubleshooting—Go to Online Support. After logging in, locate the applicable Support by Product page.
- Technical support—For technical support and service requests, go to Customer Service on Online Support. After logging in, locate the applicable Support by Product page, and choose either Live Chat or Create a service request. To open a service request through Online Support, you must have a valid support agreement. Contact your product's sales representative for details about obtaining a valid support agreement or with questions about your account.
NOTE:Do not request a specific support representative unless one has already been assigned to your particular system problem.
Your comments
Your suggestions will help us continue to improve the accuracy, organization, and overall quality of the user publications.
Please send your opinion of this document to:
techpubcomments@EMC.com
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\