|
Otros manuales para este modelo:
Resumen del manual
To configure FIPS Support Mode with the wizard:
1.
Log into the RMI as the security user.
2.
Navigate to Configuration > Encryption > FIPS Support Mode.
3.
Read the information screen and then click Next.
4.
The Partition FIPS Support Mode Status screen lists all library partitions. The FIPS Support Mode
box is checked if FIPS Support Mode is enabled for a partition.
If a partition is not ready for FIPS Support Mode, its line will have a gray background and a
note explaining the issues. If you want to enable FIPS Support Mode for a partition that isn’t
ready, click Cancel to exit the wizard, and then correct the issues.
•
Verify that all tape drives in the partition are LTO-6 or later generation and that they are
running a firmware version that supports Secure Mode.
•
Verify that library-managed encryption is configured and enabled for the partition.
Check the FIPS Support Mode box for all partitions that should have FIPS Support Mode
enabled and uncheck the FIPS Support Mode box for any partitions that should NOT have
FIPS Support Mode enabled. (If a partition already has FIPS Support Mode enabled and you
want it to continue to have FIPS Support Mode enabled, leave the box checked.)
Click Next.
5.
The Finish screen lists each partition that will have a configuration change and whether FIPS
Support Mode will be enabled or disabled. To complete FIPS Support Mode configuration,
click Finish.
The wizard updates the screen as it configures each partition. When the wizard is finished,
click Exit.
Configuring OCP/RMI session locking
The library only supports one OCP or RMI user session at a time. By default, when a user logs into
the RMI or OCP, the existing user session is terminated.
When OCP/RMI Session Locking is enabled, a new session will not terminate the current session
and the new user will not be able to log in.
NOTE:
When this setting is enabled, always log out of the RMI or OCP when finished with a
session. Otherwise, no new sessions will be allowed until the current session times out.
Configuring the MSL Encryption token to remain logged in across library
reboots
By default the security user must provide the token password each time the library is powered on
or booted. When the Keep Token Logged In Across Reboots option is enabled the token password
is only required after the library has been powered off or encounters a hard shutdown. The password
is not required after a reboot. Access the Keep Token Logged In Across Reboots option from the
Configuration > Encryption > USB — MSL Encryption Kit screen.
Configuring a KMIP server that uses certificate-only authentication
Most KMIP servers use a client username and password along with the signed certificate for
authentication. Some KMIP servers only use the signed certificate. In the KMIP Wizard, the KMIP
Client Configuration screen provides options for these two types of server authentication.
•
If your KMIP server uses a client username and password for authentication, enter the username
and password that were specified on the KMIP management console for the library.
•
If your KMIP server uses only certificate passing for authentication, check Enable KMIP
Certificate-only authentication. Only select this option if you are using a KMIP server that
requires it and you do not have a client username and password.
Configuring OCP/RMI session locking
7
...Otros modelos de este manual:
datos de dispositivos de procesamiento - HP MSL2024 1 LTO-5 Ultrium 3000 SAS Tape Library (254.66 kb)
datos de dispositivos de procesamiento - HP MSL2024 1 LTO-5 Ultrium 3280 Fibre Channel Tape Library (254.66 kb)
datos de dispositivos de procesamiento - HP MSL2024 Ultrium 920 SAS Tape Library (254.66 kb)
datos de dispositivos de procesamiento - HP MSL2024 with Ultrium 1840 Fibre Channel and Media Biz Protection Bundle (254.66 kb)