Quantum Scalar i80 Quick Start Guide

28 Installing TLS Certificates on the SKM Server for SKM 2.4 (240Q) or Later
Quantum Scalar Key Manager 2.5 Quick Start Guide
Installing TLS Certificates on the SKM Server for SKM 2.4
(240Q) or Later
Beginning with SKM 2.4 (240Q), it is now possible to self-generate library/SKM TLS
communication certificates using SKM server with version 2.4 (240Q) or greater loaded.
This certificate-generation process generates sets of TLS certificates that can be loaded
onto the primary and secondary SKM servers and all libraries attached to the servers.
Note: The TLS certificate generation process must be run on only one of the SKM
servers, so there is no need to generate TLS Certificates on both SKM servers.
Either the Primary or Secondary SKM server can be used to generate the
certificates.
Specifically, the genSKMcerts script is loaded onto the SKM servers using one of two
ways to generate certificates:
• By executing the script using the “-d” option. Certificates are generated using a set
of default values similar to the certificates currently provided by Quantum.
• By executing the script without using the “-d” option. If the “-d” option is not used,
information used to generate the certificates must be provided.
Begin the Installation 1 SSH in to the SKM server. (If you have an SKM VM server, you can SSH in or continue
to use the vSphere console and proceed to
Step 4 below.)
2 At the skmserver login prompt, type the login ID:
akmadmin
3 At the Password prompt, type your password.
A message displays alerting you that the SKM key server will be stopped.
4 Type y to agree to stop the SKM key server and continue.
A message appears stating the SKM key server is being stopped.
5 Do one of the following:
• To execute the script using the -d option, proceed with the steps in Executing
the Script Using the -d Option on page 28.
• To execute the script without using the -d option, proceed with the steps in
Executing the Script Without Using the -d Option on page 31.
Executing the Script
Using the -d Option
Use the following procedure to generate certificates using the -d option, which uses
default values. The generated certificates are valid for ten years from the date on which
they were generated.
1 Once logged into the SKM server, execute genSKMcerts –d to generate certificates
using the defaults.

Quantum Scalar i80 Specifications

General

Power supply type	AC
Power requirements	100 – 240V, 50/60Hz
Power consumption (typical)	200 W
Dimensions (WxDxH)	445 x 793 x 264 mm
Media types supported	2x LTO-4
Maximum supported storage capacity	128 TB
Storage temperature (T-T)	-40 - 60 °C
Operating temperature (T-T)	10 - 35 °C
Operating relative humidity (H-H)	20 - 80 %
Media type	Tape Cartridge
Form factor	6U
Product type	Storage auto loader & library
Certification	IEC 60950, Class A / FCC part 15, ICES-003, CISPR 22, EN55022 Class A, VCCI, CNS 13438, KN22, AS/NZS CISPR 22, EN61000-3-2, EN61000-3-3 EN55024, KN24 CE, VCCI, GS, FCC, ICES, NRTL, GOST, BSMI, KCC
Product color	Black
Standard interfaces	Fiber Channel

Weight and Dimensions

Weight	23800 g