Reference Guide
Table Of Contents
- Dell EMC PowerStore Security Configuration Guide
- Contents
- Additional Resources
- Authentication and access
- Hardware root of trust
- Authenticating and Managing User Accounts, Roles, and Privileges
- Certificates
- Secure communication between PowerStore appliances within a cluster
- Secure communication for replication and data import
- vSphere Storage API for Storage Awareness support
- CHAP authentication
- Configuring CHAP
- External SSH access
- Configuring external SSH access
- NFS secure
- Security on file system objects
- File systems access in a multiprotocol environment
- Understanding Common AntiVirus Agent (CAVA)
- Code signing
- Communication security settings
- Auditing
- Data security settings
- Secure serviceability settings
- Operational description of SupportAssist
- SupportAssist options
- SupportAssist Connect via Gateway option
- SupportAssist Connect Directly option
- Requirements for SupportAssist Connect via Gateway
- Requirements for SupportAssist Connect Directly
- Configuring SupportAssist
- Configure SupportAssist
- CloudIQ
- Cybersecurity
- Security Alert Settings
- TLS cipher suites
- Directory Services
Secure serviceability settings
This chapter contains the following information:
Topics:
• Operational description of SupportAssist
• SupportAssist options
• SupportAssist Connect via Gateway option
• SupportAssist Connect Directly option
• Requirements for SupportAssist Connect via Gateway
• Requirements for SupportAssist Connect Directly
• Configuring SupportAssist
• Configure SupportAssist
• CloudIQ
• Cybersecurity
Operational description of SupportAssist
SupportAssist is a secure support technology that takes the guesswork out of issue prevention and resolution through remote
monitoring and management to:
● Collect system state information and telemetry.
● Automate issue detection and support case creation.
● Resolve common issues remotely.
● Provide critical information to Dell EMC remote support to resolve complex issues.
NOTE:
It is strongly recommended that you enable the SupportAssist feature to accelerate problem diagnosis, perform
troubleshooting, and help speed time to resolution. If you do not enable the SupportAssist feature, you may need to collect
appliance information manually to assist Dell EMC Support with troubleshooting and resolving problems with your appliance.
Also, the SupportAssist feature must be enabled on the appliance for data to be sent to CloudIQ and to enable use of the
Cybersecurity application. For information about CloudIQ and the Cybersecurity application, go to https://www.dell.com/
support. After logging in, locate the CloudIQ Product Support page.
SupportAssist and security
SupportAssist employs multiple security layers throughout each step in the remote connectivity process to ensure that you and
Dell EMC can use the solution with confidence:
● All notifications to Dell EMC originate from your site – never from an outside source – and are kept secure through the use
of Advanced Encryption Standard (AES)-256 bit encryption.
● IP-based architecture integrates with your existing infrastructure and maintains the security of your environment.
● Communications between your site and Dell EMC are bilaterally authenticated using RSA
®
digital certificates.
● Supports TLS 1.2
● Only authorized Dell EMC Customer Service professionals verified through two-factor authentication can download the
digital certificates needed to view a notification from your site.
SupportAssist management
You can manage SupportAssist using the PowerStore Manager or the REST API. You can enable or disable the service and
provide the relevant information necessary for the SupportAssist options you select.
5
Secure serviceability settings 43