Configure SSL/TLS communications

SSL (Secure Socket Layer) / TLS (Transport Layer Security) is a protocol for the secure transfer of data over the internet. The two SSL/TLS-enabled devices use the private and public keys to establish a secure communication session. Both devices utilize randomly generated symmetric keys to encrypt the data they transfer.

When you use the management PC, you use a server certificate to tie the public and private keys. With the server certificate, the storage system proves to the management PC that it is the server and that it owns the key. This allows the management PC and the storage system to communicate using SSL/TLS.

There are two types of server certificates:

• Generate a certificate for yourself. In this case, the subject of the certification is the same as the issuer of the certificate. If communication is taking place between the management PC and the storage system on an internal LAN protected by a firewall, this certificate can also improve security.
• After you generate a certificate issuance request for a certificate authority, send it to a trusted certificate authority to have it signed. Utilizing this certificate increases cost and requirements, but increases reliability. An example of a certificate authority is Verisign.