Cisco MDS 9000 Family Storage Media Encryption Configuration Guide - Release 4.x (OL-18091-01, February 2009)

Send documentation comments to [e-mail]
F-4
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
OL-18091-01, Cisco MDS NX-OS Release 4.x
Appendix F Planning For Cisco SME Installation
Preinstallation Requirements
– Ports 9333 to 9339 for TCP and UDP for Cisco SME cluster communication
– Ports 8800 and 8900 for Cisco KMC communication
– Ports HTTP (80) and HTTPS (443) for Cisco SME web-client communication
• Use either DNS or IP address (not a mix) for the SAN and KMC communication
Note If you are using IP addresses, refer to the “sme.useIP for IP Address or Name Selection” section on
page 2-9 to learn about sme.useIP.
Preinstallation Requirements
Before installing Cisco SME, ensure that you do the following tasks:
• Install Java 1.5 or 1.6 on the Fabric Manager server.
• If you are using SSL, install OpenSSL on the server to be used for SSL certificate generation.
• Ensure that essential ports are allowed through the firewall and on the management interface.
• If you are using DNS, ensure that all switches and the KMC server, are mutually reachable (through
the ping command) using their DNS names.
• Synchronize the time between all the switches, the KMC and the server used for generating SSL
certificates. Configure NTP if required.
• Ensure that the hosts and the tape drives are appropriately zoned.
• Ensure that there is CLI access to the switches.
• Install smart card reader drivers.
• Ensure that the required number of smart cards and readers are available.
• Install the MSM- 18/4 modules and Cisco SME licenses on the required set of switches.
Preconfiguration Tasks
Before configuring Cisco SME, you need to install the Fabric Manager, enable the services, assign roles
and users, create fabrics, install SSL certificates, and then provision Cisco SME. The following sections
describe the steps that you need to follow:
• Installing Fabric Manager, page F-4
• Configuring CFS Regions For FC-Redirect, page F-5
• Enabling Cisco SME Services, page F-5
• Assigning Cisco SME Roles and Users, page F-6
• Creating Cisco SME Fabrics, page F-6
• Installing SSL Certificates, page F-6
Installing Fabric Manager
While installing the Fabric Manager, do the following tasks: