Articles in this section

See more

Dell ECS and ObjectScale | Scan Requirements

Avatar
Peter
  • Updated

[ Applies to ] StorageGuard 9.x and later   /   Dell Elastic Cloud Storage (ECS) systems   /   ObjectScale

StorageGuard collects configuration data from Dell ECS and ObjectScale systems by opening an HTTPS connection to the portal and running read-only REST API calls. Optionally, you can also grant SSH access for several additional checks. This article describes the requirements and how to create the scan account.

Requirements

Requirement Details
Portal address The network name or IP address of the portal. If you have multiple VDCs, configure each VDC separately.
Credentials A user name and password for each portal.
Role and permissions The account must be able to run all GET (read-only) REST API requests, such as GET vdc/data-services/varrays, GET config-admin/security, GET object/namespaces, and GET vdc/data-stores.
Network access HTTPS connectivity (port 4443) from the StorageGuard server to each system.
SSH access (optional) SSH connectivity from the StorageGuard server to each system, if you want StorageGuard to run additional checks or custom collection through the CLI. See Optional: Grant SSH access.

Create a scan account

The following procedure is a suggested way to create the scan account in the portal.

  1. Sign in to the portal, and go to the User Management page.
  2. Create a new Management user.
  3. Enable both the System Monitor and Security Administrator roles for the user, and save.

Optional: Grant SSH access

SSH access lets StorageGuard run a few additional configuration checks that the REST API doesn't currently support, such as NTP and SNMP settings. It also lets you extend the built-in collection with custom collection through the CLI.

Note: ECS currently grants SSH access only with administrative rights, so consider this carefully before you enable it. Even with elevated rights, StorageGuard runs only read-only API calls and CLI commands.

Install the ECS certificate tool

If you grant SSH access, consider installing Dell's ECS certificate tool (ecs_certificate_tool.py), which lets StorageGuard run certificate checks.

  1. Download the tool. See Dell article 000181006 for instructions.
  2. Copy it to the /home/admin/ecs_certificate_tool-1.x directory on the ECS system.

[ Still need help? ]

Our support team is here for you. Submit a request

Related articles

Comments

0 comments

Please sign in to leave a comment.