Using SSH key for device configuration
For some storage systems, such as FS840, FS900, V840, and V9000, there are two options when configuring a device to IBM Spectrum Control:
Username and Password
SSH Key:
 – Upload new key
 – Upload an existing SSH key
You can either use the keys that are provided with IBM Spectrum Control in ...IBMTPCdeviceconf, or create your own keys using a key generator such as PuTTYgen. Creating your own keys is safer and therefore preferred.
If you use multiple IBM Spectrum Control servers consider to generate SSH Key pairs for each IBM Spectrum Control server, which will allow you to see which IBM Spectrum Control server is performing which operation on a device eg. to disable /enable access for each IBM Spectrum Control Server.
In this paragraph we will describe how to generate SSH keys using PuTTYgen and how to configure a FS840 to IBM Spectrum Control in using the previously created SSH keys.
Configuring a device using an SSH key
Before generating key pairs, the number of bits in a generated key can be adjusted (1), then the key pair generation can be started by using the Generate key pair function (2), as shown in Figure A-1.
Figure A-1 Generate key pair
While the progress bar proceeds, move the mouse over the blank area (1), as shown in Figure A-2.
Figure A-2 Key generation
After the keys have been created, save the public key as .pub and the private key as .ppk (1). A passphrase (2) can be specified to increase security, as shown in Figure A-3.
Figure A-3 Save keys
If the storage system does not accept the .ppk key, convert it to an OpenSSH (.pem) key, as shown in Figure A-4.
Figure A-4 Convert private key to OpenSSH key
To upload the public key to the storage system create a user on the storage system and upload the public key, as shown in Figure A-5.
Figure A-5 Upload public key to storage system
To configure the storage device to IBM Spectrum Control, change the Authentication mechanism to Secure Shell, select Use an existing SSH key, and upload the appropriate private key, as shown in Figure A-6.
Figure A-6 Configure FS840 with SSH key
 
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset