Chapter 9: Configuration
System
Quantum DXi4700 User’s Guide
317
1. Select an Encryption option in
OST and Accent Data Transfer Encryption
:
None
Data is not encrypted.
Default AES 128
OST and Accent data is encrypted using AES 128-bit encryption.
Default AES 256
OST and Accent is encrypted using AES 256-bit encryption.
TLS with AES 256
OST, Accent, and Replication data is encrypted using AES 256-bit encryption
with Transport Layer Security (TLS).
For replication, you must specify encryption settings when configuring the
replication or failback targets (see
).
Note:
AES encryption options are available only if the Data-in-Flight license is installed (see
).
2. If you selected the
TLS with AES 256
encryption option, install the required
TLS Certificate
and key
files on the DXi:
l
Certificate File
l
Private Key File
l
Certificate Authority File
l
Certificate Revocation List (Optional)
OST Media Server with TLS Encryption
The certificate and key files installed on the DXi system must match the files on the OST media
server. For more information on certificate and key files, see the
OST Plug-in Installation
Instructions
.
Replication with TLS Encryption
To successfully use replication with TLS encryption, you must do the following:
l
Configure target DXi with TLS Encryption.
l
Configure source DXi with TLS Encryption (system reboot required).
l
Select
TLS with AES 256
when configuring the target DXi (see
Adding a Replication Target on
).
The source DXi key and target DXi key do not need to match, but must meet the following criteria:
l
The target key must be signed by a certificate in the source key.
l
The source key must be signed by a certificate in the target key.
