Using SSH key for device configuration
For some storage systems, such as FS840, FS900, V840, and V9000, there are two options when configuring a device to IBM Spectrum Control:
•Username and Password
•SSH Key:
– Upload new key
– Upload an existing SSH key
You can either use the keys that are provided with IBM Spectrum Control in ...IBMTPCdeviceconf, or create your own keys using a key generator such as PuTTYgen. Creating your own keys is safer and therefore preferred.
If you use multiple IBM Spectrum Control servers consider to generate SSH Key pairs for each IBM Spectrum Control server, which will allow you to see which IBM Spectrum Control server is performing which operation on a device eg. to disable /enable access for each IBM Spectrum Control Server.
In this paragraph we will describe how to generate SSH keys using PuTTYgen and how to configure a FS840 to IBM Spectrum Control in using the previously created SSH keys.
Configuring a device using an SSH key
Before generating key pairs, the number of bits in a generated key can be adjusted (1), then the key pair generation can be started by using the
Generate key pair function (2), as shown in
Figure A-1.
Figure A-1 Generate key pair
While the progress bar proceeds, move the mouse over the blank area (1), as shown in
Figure A-2.
Figure A-2 Key generation
After the keys have been created, save the public key as
.pub and the private key as
.ppk (1). A passphrase (2) can be specified to increase security, as shown in
Figure A-3.
Figure A-3 Save keys
If the storage system does not accept the
.ppk key, convert it to an OpenSSH (
.pem) key, as shown in
Figure A-4.
Figure A-4 Convert private key to OpenSSH key
To upload the public key to the storage system create a user on the storage system and upload the public key, as shown in
Figure A-5.
Figure A-5 Upload public key to storage system
To configure the storage device to IBM Spectrum Control, change the Authentication mechanism to Secure Shell, select
Use an existing SSH key, and upload the appropriate private key, as shown in
Figure A-6.
Figure A-6 Configure FS840 with SSH key