Administrator Guide

To be able to perform management operations using VDS and VSS, you must rst allow these services to access your PS series
group. You use the same access control methods (access policies, access policy groups, and basic access points) to dene VDS/VSS
access.
Display and Congure Windows Service Access to a Group
To be able to perform management operations using VDS and VSS, you must rst allow these services to access your PS series
group. You use the same access control methods (access policies, access policy groups, and basic access points) to dene VDS/VSS
access.
To allow VDS and VSS access to the group, you must create at least one VDS/VSS access control policy that matches the access
control credentials you congure on the computer by using Remote Setup Wizard or Auto-Snapshot Manager/Microsoft Edition.
NOTE: Auto-Snapshot Manager/Microsoft Edition requires you to congure Windows service access to a group.
VDS/VSS access control policies use the same criteria for restricting access as iSCSI target access control policies: CHAP user
name, iSCSI initiator name, or iSCSI initiator IP address.
1. Click Group → Group Conguration.
2. Click the VDS/VSS tab.
Add a VDS/VSS Access Control Policy
To congure VDS/VSS access, add a new access control policy:
1. Click Group → Group Conguration.
2. Click the VDS/VSS tab.
3. In the VDS/VSS Access Control List panel, click the appropriate Add button to add an access policy group, an access policy, or
a basic access point:
• In the Add Access Policy or Add Access Policy Group dialog box, select the checkbox next to the policy names you want to
add, or click New to create a new access policy or policy group.
• In the New Basic Access Point dialog box, enter a new access point (any combination of CHAP account name, iSCSI
initiator name, or IP address), then click OK.
4. Click OK.
Modify a VDS/VSS Access Control Policy
1. Click Group → Group Conguration.
2. Click the VDS/VSS tab.
3. To modify a policy, select the policy from the appropriate subpanel (Access policy groups, Access policies, or Basic access
points) and click the corresponding Modify command:
• In the Modify Access Policy Group dialog box, change the name or description of the policy group. You can also select an
individual policy for the group and click Modify.
• In the Modify Access Policy dialog box, change the name or description of the policy. You can also select an individual
access point for the policy and click Modify.
• In the Modify Basic Access Point dialog box, change the CHAP user name, iSCSI initiator name, or IP address, then click
OK.
4. Click OK.
Delete a VDS/VSS Access Control Policy
1. Click Group → Group Conguration.
2. Click the VDS/VSS tab.
3. Select the policy from the appropriate subpanel (Access policy groups, Access policies, or Basic access points) and click the
corresponding Delete command.
72
About Group-Level Security