Skip to main content

Exam Cram Notes & Other Stuff

Search This Blog

NetApp Storage Encryption - A800 with NSE & SG6060 with FIPS

on March 20, 2024

Get link
Facebook
X
Pinterest
Email
Other Apps

An A800 and SG6060 with NSE and FIPS disks.

Item: X4019A-2-N-C

Description: Drive Pack 2X15.3TB,NVMe,SED,NSE,-C (for AFF)

Item: SG6000-CN-001-SGEX
Item: E2860HAC-001-10TB-FIPS-SG

Description: E2860HA SG,2x1.6TB SSD,58x10TB FIPS,FC 4p,Ex

How do we configure the NSE for AFF and FIPS for StorageGRID?

Some reading:

AFF and NSE

How to configure NSE in clustered Data ONTAP 8.3.1 and later - NetApp Knowledge Base
Configure NetApp hardware-based encryption overview
Configure external key management overview

Assign a data authentication key to a FIPS drive or SED (external key management)

Enable onboard key management in ONTAP 9.6 and later

Assign a data authentication key to a FIPS drive or SED (onboard key management)

Enable cluster-wide FIPS-compliant mode for KMIP server connections

StorageGRID and FIPS

Review StorageGRID encryption methods

Overview of KMS and appliance configuration

How the Drive Security feature works (
Optional: Enable node encryption (netapp.com)

Configure in the StorageGRID Appliance Installer before creating grid.

Encryption NetApp ONTAP StorageGRID

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

Mule 3 Fundamentals: Quizzes and Answers

Module 1: Mule 3 Fundamentals: Introducing API-Led Connectivity: Quiz Q1: What MuleSoft API-led connectivity layer is intended to expose part of a backend database without business logic? A1: System. Q2: What HTTP method in a RESTful web service is typically used to replace a resource completely? A2: PUT Q3: What statement is part of MuleSoft’s description of an application network? A3: Create reusable APIs and assets designed to be consumed by other business units. Q4: According to MuleSoft, what is the Center for Enablement’s role in the new IT operating model? A4: Creates and manages discoverable assets to be consumed by line of business developers. Q5: What is the format of documents exchanged in a SOAP request/response interaction? A5: WSDL Q6: What is the main purpose of Flow Designer in Design Center? A6: Design and develop fully functional Mule applications in a hosted development environment. Q7: What is the maximum number of Mule applic...

fabos not yet initialized -1

Initial advice from NetApp support (note that at the time of writing this has not been tested): As a first step please follow these steps: 1. Log into the affected Brocade switch. 2. Run following commands and share the output with us: errshow firmwarecommit firmwaredownloadstatus 3. As the secondary partition may be full, please run " supportSave -R " command to clean up the Secondary File System and re-run firmwarecommit . https://community.broadcom.com/t5/Fibre-Channel-SAN-Forums/fabos-not-yet-initialized-1/td-p/98096 It looks like that partition is corrupted. Open call to your vendor support. https://community.broadcom.com/t5/Fibre-Channel-SAN-Forums/Brocade-300-switch-fabos-not-yet-initialized-1/td-p/27230 During firmwaredownload a powerloss occurred and now cannot execute any brocade command like switchshow. Error message is always "fabos not yet initialized -1" Fabric OS has detected frequent switch reboot condition... sysmodAttach ope...

AWS Certified Solutions Architect - Associate: Questions, Answers, and True Statements

This blog post takes the questions from the AWS Practice test, and from the Linux Academy (LA) AWS CSAA course, and puts them in one post to help you with your exam cram preparation. Q = Question. A = Answer. T = True statement. E = Explanation. Image: Amazon Web Service Certified Solutions Architect - Associate Practice Exam Q: Amazon Glacier is designed for: A1: Infrequently accessed data A2: Data archive Q: You configured ELB to perform health checks on these EC2 instances. If an instance fails to pass health checks, which statement will be true? A: The ELB stops sending traffic to the instance that failed its health check. Q: You are building a system to distribute confidential training videos to employees. Using CloudFront, what method could be used to serve content that is stored in S3, but not publicly accessible from S3 directly? A: Create an Origin Access Identity (OAI) for CloudFront and grant access to the objects in your S3 bucket to that OAI....

Powered by Blogger