IBM TotalStorage SAN140M, Installation And Service Manual

Page: 78 / 428

SAN140M Installation and Service Manual 46
Configure SSL encryption
SSL is a protocol that encrypts internet communications. The protocol
uses key encryption and includes a digital certificate that enables
server authentication and SSL session initialization. To configure SSL
encryption:
1. Select SSL from the Configure menu at any view. The SSL View
displays ( Figure 25 ).
2. With web SSL enabled, all data transmitted over an authenticated
Internet connection is encrypted. Perform one of the following:
• Click Enable to activate web SSL.
• Click Disable to deactivate web SSL.
3. Software SSL enables use of an application program interface
(API) connection. With software SSL enabled, secure and
unsecure communications are acceptable, however, unsecure
communications are directed to an encrypted API connection.
Perform one of the following:
• Click Enable to activate software SSL.
• Click Disable to deactivate software SSL.
4. To define the expiration period (in days) of the digital certificate,
type a value between 30 and 3650 in the Expires in field. The
default is 365 days. Click Generate to generate a new certificate.
5. To define a renegotiation parameter (in megabytes) for the SSL
session key, type a value between 50 and 10000 in the Renegotiate
after field. The value defines the MB of data transmitted over the
connection before triggering the regeneration of a new SSL
session key. An SSL session key (not part of the digital certificate)
is valid only during the SSL connection, and is renegotiated per
the value entered.
6. Click OK to save and activate changes.