You must also install one or more root certificates in each of the storage systems that will be part of a security association among clients and storage systems.
Steps
- Download the root certificate (in PEM format, if possible) from the
certificate authority's web site.
- Copy the root certificate onto the root volume of the storage
system.
For example, mount the storage system's root volume on an NFS
client, such as your administration console, and then copy the file
containing the root certificate onto the storage system's root
volume.
- If the root certificate is not in PEM format, convert it to PEM
format.
You can convert the certificate using the openssl utility. For more information, search
the Internet for "openssl."
- Install the root certificate.
At the storage system command line, enter the following command:
keymgr install root path
path is the full path and file name of the root certificate.
