Brocade Communications Systems Network Advisor 12.0.0, Руководство пользователя

Страница: 620 / 1505

572 Brocade Network Advisor SAN User Manual
53-1002696-01
Steps for connecting to a TKLM appliance
20
Creating a self-signed certificate for TKLM
You must create a self-signed certificate for TKLM that can be downloaded to the Fabric OS
encryption engines to verify the authenticity of TKLM.
1. Select Tivoli Key Lifecycle Manager > Configuration.
The Configuration page displays.
2. Select Create self-signed certificate.
3. Under Certificate label in key store, enter a certificate label.
4. Under Certificate description (common name), enter a descriptive name.
5. Under Validity period of new certificate, enter the desired life time for the certificate.
6. Select Tivoli Key Lifecycle Manager > Advanced Configuration > Server Certificates to verify
that the certificate label is listed on Administer Server Certificates under Certificates.
7. Reboot the TKLM server.
Importing the Fabric OS encryption node KAC certificates to TKLM
The KAC certificates previously exported from the Fabric OS encryption nodes to an external LINUX
host must now be imported into the TKLM server file system. You must import the KAC certificate
in .der format. To do this, refer to
“Converting the KAC certificate format” on page 571.
1. Import the KAC certificate from the external host into the TKLM server file system using a
binary file transfer mechanism using FTP, USB, or SCP.
2. Select Tivoli Key Lifecycle Manager > Advanced Configuration > Client Certificates.
The Client Certificates page displays.
3. Select Import > SSL Certificate.
The Import SSL Certificates for Clients page displays.
4. Enter the Fabric OS KAC certificate name in the Certificate field.
5. Under File name and location, enter or browse to the location where the imported KAC
certificate is stored, then select Trust.
6. Click Import.
7. Verify that the imported certificate is valid and active.
Exporting the TKLM self-signed server certificate
The TKLM self-signed server certificate must be exported in preparation for importing and
registering the certificate on a Fabric OS encryption group leader node.
1. Enter the TKLM server wsadmin CLI.
For Linux (in ./wsadmin.sh):
<installed directory>/IBM/tivoli/tiptklmV2/bin/wsadmin.sh -username TKLMAdmin
-password <password> -lang jython