Nonstop Volume Level Encryption Guide

Installation steps
1. Install Storage CLIMs
If the system does not have Storage CLIMs, follow the procedures in the NonStop CLuster I/O
Module (CLIM) Installation and Configuration Guide to install, connect, and configure them. The
CLIM should be in the STARTED state.
2. Install the license
Obtain the encryption license file by emailing [e-mail]. Install the file in
$SYSTEM.ZLICENSE.NSVLE and change the filecode to 407.
For details about the license, see “License” (page 53).
3. Configure SAFEGUARD
SAFEGUARD must be running. Make it a generic process:
ADD PROCESS $ZZKRN.#SAFEGUARD , &
AUTORESTART 10 , &
BACKUPCPU 1 , &
DEFAULTVOL $SYSTEM.SYSTEM , &
HIGHPIN ON , &
HOMETERM $ZHOME , &
INFILE $YMIOP.#CLCI , &
MEMPAGES 0 , &
NAME $ZSMP , &
OUTFILE $ZHOME , &
PRIMARYCPU 0 , &
PRIORITY 198 , &v
PROGRAM $SYSTEM.SYSTEM.OSMP , &
SAVEABEND ON , &
STARTMODE SYSTEM , &
STARTUPMSG "BCKP-CPU" , &
STOPMODE STANDARD , &
TYPE OTHER , &
USERID SUPER.SUPER
4. Create security group
The customer security officer creates a group to administer security whose members will be the
only users allowed to perform security tasks. The members must be in the SUPER group.
Use SAFECOM to create the SECURITY-ENCRYPTION-ADMIN group:
ADD GROUP SECURITY-ENCRYPTION-ADMIN, NUMBER 65536
ALTER GROUP NUMBER 65536, MEMBER SUPER.officer
Verify the group with the SAFECOM INFO command:
=info group number 65536,detail
GROUP NAME NUMBER OWNER LAST-MODIFIED
SECURITY-ENCRYPTION-ADMIN 65536 255,255 13MAY09, 13:02
CREATION-TIME = 24FEB09, 9:57
CREATOR-USER-NAME = SUPER.SUPER
CREATOR-USER-TYPE = USER (255,255)
CREATOR-NODENUMBER = 27
AUTO-DELETE = OFF
DESCRIPTION =
MEMBER = SUPER.ROGERP
MEMBER = SUPER.SUPER
=
You can create other members now or later. Group membership takes effect at the next logon.
Installation steps 15