Preparation for Scanning HPE 3PAR, Primera and Alletra 9000 storage systems
StorageGuard collects configuration data from 3PAR / Primera / Alletra 9000 systems by running read-only InForm CLI commands either directly on the storage system or through a proxy server installed with the InForm CLI software ("InForm CLI proxy").
The following table lists the requirements for scanning 3PAR / Primera / Alletra 9000 systems:
| # | Description |
| 1 |
If an InForm CLI proxy is used:
Otherwise: Define localhost as proxy IP when scanning arrays directly. |
| 2 | Provide the network name or IP address of the HPE storage system. |
| 3 |
Provide a storage system user account profile (existing or specifically created for StorageGuard) with a read-only privilege. Examples for API/CLI calls used:
|
| 4 | Verify that IP connectivity through SSH (default is port 22) is available between the StorageGuard collector server and each storage system. |
| 5 |
If an InForm CLI proxy is used:
|
Notes:
-
You should provide StorageGuard with the encrypted password of the HPE storage system. Refer to this article for the procedure to generate encrypted passwords.
- Windows servers can also be used as InForm CLI proxies - For additional information on using Windows servers as an InForm CLI proxy, contact support.
Creating a User Account for Scanning HPE 3PAR, Primera and Alletra 9000 storage systems
The following suggested method can be used to create a user account named sguard with the appropriate privileges:
createuser -c {password} sguard {domainname} service
The service role is required to run the controlencryption status and controlsecurity fips status read-only commands, which are essential for security hardening checks. While the browse role can be used, it won't support all checks and is therefore not recommended.
Comments
0 comments
Please sign in to leave a comment.