Nonstop Volume Level Encryption Guide

k. Select and copy the NSSuser client signed certificate text from -----BEGIN CERTIFICATE-----
through -----END CERTIFICATE-----.
l. Go back to the TACL prompt and use TEDIT to create a file on the NonStop system called
SIGNCERT:
$SYSTEM ZENCRYPT 9> tedit SIGNCERT
$SYSTEM.ZENCRYPT.SIGNCERT doesn't exist. OK to create? Respond Y or N:
y
m. Paste the NSSuser signed client certificate into the SIGNCERT edit file.
Save and close the file. The NSSuser signed client certificate is now on the NonStop system.
$SYSTEM ZENCRYPT 10> fileinfo *
$SYSTEM.ZENCRYPT CODE EOF LAST MODIFIED OWNER RWEP PExt SExt
SIGNCERT 101 1514 17SEP2009 17:19 255,255 NUNU 14 14
n. In the same subvolume, use TEDIT to create a file called NSSUPASS. Type the NSSuser
passphrase that you entered in Step 3 into this file, then save and close the file. (Do not enter
the password for the NSSuser local user; it is used only in the “Register CLIMs with Key
Managers” guided procedure in “8. Register the CLIMs” (page 42).) The NSSuser passphrase
is now on the NonStop system:
$SYSTEM ZENCRYPT 12> fileinfo *
$SYSTEM.ZENCRYT CODE EOF LAST MODIFIED OWNER RWEP PExt SExt
NSSUPASS 101 2074 17SEP2009 17:21 255,255 NUNU 14 14
SIGNCERT 101 1514 17SEP2009 17:19 255,255 NUNU 14 14
o. Use the SCF INFO CLIM $ZZCIP.clim-name, DETAIL command to get the Maintenance
Interface IP address of the CLIM:
$SYSTEM ZENCRYPT 14> scf info clim $zzcip.c100231, detail
SCF - T9082H01 - (04DEC06) (15NOV06) - 09/21/2009 12:02:28 System \OSM8
(C) 1986 Tandem (C) 2006 Hewlett Packard Development Company, L.P.
CIP Detailed Info CLIM \OSM8.$ZZCIP.C100231
Mode....................... STORAGE
Configured Location........ Group 100 , Module 2 , Slot 3 , Port 1
ConnPts.................... 2
X1 Location................ Group 100 , Module 2 , Slot 3 , Port 1
38 Installation