Chapter 11 System Management
11.2 Functions in the Action Area for System
ETERNUS Web GUI User’s Guide
Copyright 2013 FUJITSU LIMITED P2X0-1090-10ENZ0
851
11.2.6.10 Import SSL/KMIP Certificate
This function registers the SSL/KMIP certificate in the ETERNUS DX Disk storage system. The SSL/KMIP certifi-
cate is used for communication with the key server.
When performing management of the key in the key server, communication between the key server and the
ETERNUS DX80 S2/DX90 S2, the ETERNUS DX410 S2/DX440 S2, or the ETERNUS DX8100 S2/DX8700 S2 is
required. To establish communication, register the "SSL/KMIP certificate" (a reliable certificate of the key
server) in the ETERNUS DX Disk storage system.
The procedure to register the SSL/KMIP certificate is as follows:
Procedure
1 Click [Import SSL/KMIP Certificate] in [Action].
2 Click the [Browse...] button to specify the path to the "SSL/KMIP Certificate File".
• SSL/KMIP Certificate File
Click the [Browse...] button to specify the SSL/KMIP certificate file, or directly input the path to the
SSL/KMIP certificate file.
The SSL/KMIP certificate cannot be registered when a common key (*1) is not specified. Refer to "11.2.13.7
Register SED Authentication Key" (page 944) for details.
*1: The common key for SEDs that are managed in the ETERNUS DX Disk storage system.
• Export the SSL/KMIP certificate from the key server and register this certificate in the ETERNUS DX Disk
storage system.
• To establish communication between the key server and the ETERNUS DX Disk storage system, the SSL
certificate of the storage system is also required. Refer to "11.2.3.15 Create Self-signed SSL Certificate"
(page 787) or "11.2.3.16 Create Key/CSR" (page 790) for details.
• The SSL / KMIP certificate can be registered even when the key server is not specified.
• The SSL / KMIP certificate can be registered even when the key group is not created.