Reference Guide
Table Of Contents
- Dell EMC PowerStore Security Configuration Guide
- Contents
- Additional Resources
- Authentication and access
- Hardware root of trust
- Authenticating and Managing User Accounts, Roles, and Privileges
- Certificates
- Secure communication between PowerStore appliances within a cluster
- Secure communication for replication and data import
- vSphere Storage API for Storage Awareness support
- CHAP authentication
- Configuring CHAP
- External SSH access
- Configuring external SSH access
- NFS secure
- Security on file system objects
- File systems access in a multiprotocol environment
- Understanding Common AntiVirus Agent (CAVA)
- Code signing
- Communication security settings
- Auditing
- Data security settings
- Secure serviceability settings
- Operational description of SupportAssist
- SupportAssist options
- SupportAssist Connect via Gateway option
- SupportAssist Connect Directly option
- Requirements for SupportAssist Connect via Gateway
- Requirements for SupportAssist Connect Directly
- Configuring SupportAssist
- Configure SupportAssist
- CloudIQ
- Cybersecurity
- Security Alert Settings
- TLS cipher suites
- Directory Services
7. Select Send Test Alert to send a test alert to Dell EMC Support to ensure end-to-end connectivity.
8. The Connect to CloudIQ checkbox is selected by default; if you do not want to send files to CloudIQ and be able to use the
Cybersecurity application, clear the checkbox; otherwise, leave the checkbox selected.
9. The Remote Support checkbox is selected by default; if you do not want to allow support engineers authorized by Dell
EMC to securely troubleshoot your system, clear the checkbox; otherwise, leave the checkbox selected.
10. The Remote Secure Credentials checkbox is not selected by default; if you want to allow authorized Dell EMC service
personnel to authenticate to your system, select the checkbox; otherwise, leave the checkbox unselected.
11. Select Apply to retain the SupportAssist configuration information.
12. Select Support Contacts and ensure the contact information that is entered is accurate. Correct any information that
appears incorrect or outdated.
Your SupportAssist contact information is critical for quick response to support issues and must be accurate and current.
13. Select Apply to retain the SupportAssist configuration information.
CloudIQ
NOTE: SupportAssist must be enabled on the storage system to connect and send data to CloudIQ.
CloudIQ is a Dell EMC-hosted service that uses data (logs, system configuration, alerts, performance metrics, and capacity
metrics and capacity forecast data) that is collected by SupportAssist to allow users to monitor performance in near real-time
and utilization and health time across multiple PowerStore clusters and perform basic service actions. The CloudIQ interface
is accessible through a web browser at any time and from any location. CloudIQ provides dashboard views of all connected
clusters, showing key information such as performance and capacity trending and predictions. CloudIQ also provides proactive
serviceability that informs the user about issues before they occur and provides the user with simple, guided remediation.
Users can enable CloudIQ during the configuration process for SupportAssist implementation. CloudIQ support is enabled by
default when any SupportAssist option is enabled. When SupportAssist and CloudIQ are both enabled, CloudIQ can be launched
from any PowerStore Manager page and is constantly visible. On the CloudIQ.emc.com page, users can log in with their valid
service credentials to view their PowerStore clusters in CloudIQ.
NOTE:
Once CloudIQ is enabled, it is possible to disable SupportAssist without changing the CloudIQ setting. Without
SupportAssist, data is not collected and sent to CloudIQ, but if SupportAssist is re-enabled, the system remembers the
CloudIQ setting and immediately resumes sending data to CloudIQ. Disabling CloudIQ support does not disable the transfer
of service related telemetry, that is, call-homes and data proactive collections provided by SupportAssist.
Cybersecurity
NOTE: SupportAssist and CloudIQ must be enabled on the storage system to enable use of the Cybersecurity application.
Cybersecurity is a software as a service cloud-based storage security analytics application that provides security assessment
and measures the overall cyber security risk level of storage systems using intelligent, comprehensive and predictive analytics.
Cybersecurity uses SupportAssist to collect system logs, system configurations, security configurations and settings, alerts, and
performance metrics from your PowerStore system.
Secure serviceability settings
47