Cisco MDS 9000 Family Storage Media Encryption Configuration Guide - Release 4.x (OL-18091-01, February 2009)

Send documentation comments to mdsfeedback-doc@cisco.com
C-6
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
OL-18091-01, Cisco MDS NX-OS Release 4.x
Appendix C Provisioning Self-Sign Certificates
Editing SSL Settings in Cisco Fabric Manager Web Client
Run ./Encrypter.sh ssl
Edit <FMInstall>/conf/server.properties; set useSSL=true
Step 4 Run the following commands for KMC (whether KMC is standalone or integrated with Fabric Manager
server):
Copy sme_kmc_server.jks to <FMINSTALL>/conf/cert/sme_kmc_server.jks
Copy sme_kmc_trust.jks to <FMINSTALL>/conf/cert/sme_kmc_trust.jks
Copy sme_kmc_server.jks to <FMINSTALL>/jboss/server/default/conf/fmserver.jks
Copy fmtrust.jks to <FMINSTALL>/jboss/server/default/conf/fmtrust.jks
Go to <FMInstall>/bin
Run ./Encrypter.sh ssl
Edit <FMInstall>/conf/server.properties; set useSSL=true
Go to Key Manager settings tab in SME tab on web client. In KMC SSL settings select
sme_kmc_trust.jks as KMC trust and sme_kmc_server.jks as KMC server certificate
Editing SSL Settings in Cisco Fabric Manager Web Client
You can edit the SSL settings if you chose the Cisco Key Manager.
To edit the SSL settings in the Cisco SME wizard, follow these steps:
Step 1 Log into the Fabric Manager.
Step 2 Click the SME tab and select the Key Manager Settings. The Key Manager Settings window displays.