No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Disk Encryption User Guide

OceanStor V5 Series V500R007

This document is applicable to OceanStor 5110 V5, 5110F V5, 5300 V5, 5300F V5, 5500 V5, 5500F V5, 5600 V5, 5600F V5, 5800 V5, 5800F V5, 6800 V5, 6800F V5, 18500 V5, 18500F V5, 18800 V5, and 18800F V5. It introduces how to install and configure key management servers connected to the storage systems that use self-encrypting disks.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Upgrading a Key Management Server

Upgrading a Key Management Server

This section describes how to upgrade the software version of the two key management servers when necessary.

Process of Upgrading a Key Management Server

This section describes the process of upgrading a key management server.

Figure 3-91 Upgrade process

Table 3-27 describes the operations, descriptions, and references involved in upgrading a key management server.

Table 3-27 Key management server upgrade operations and descriptions

Operation

Description

Reference

Create system key shares.

Create system key shares to export the system key to smart cards.

Generating System Key Shares

Back up the system key.

Initialize the smart cards.

Initialize two smart cards and ensure that the cards contain no other information.

Initializing a Smart Card

Back up the system key to the smart cards.

Back up the system key to the two smart cards.

Backing Up the Source Key Management Server's System Key to the Smart Card

Manually back up the configurations of the key management server.

If the upgrade fails or the original setting information needs to be restored, you can use the backup file on the NFS server to restore.

Manually Backing Up the Configurations of a Key Management Server

Enable the maintenance mode.

The upgrade must be performed under the maintenance mode of the key management server.

Enabling the Maintenance Mode of the Key Management Servers

Configure the upgrade parameters for the key management server.

Perform the upgrade through a serial port. Go to the web interface and check whether the target version is correct after the upgrade is completed.

Configuring the Upgrade Parameters for the Key Management Servers

Disable the maintenance mode.

Disable the maintenance mode of the key management server after confirming the upgrade completion.

Disabling the Maintenance Mode of the Key Management Servers

Configuring the Upgrade Parameters for the Key Management Servers

This section describes how to upgrade the software version of the key management server.

Prerequisites
  • The system key of the current key management server has been exported to the two smart cards.
  • The configuration information of the key management server to be upgraded has been manually backed up to the NFS server.
  • An FTP server has been set up and it can communicate properly with the key management server.
  • A patch package of the key management server has been prepared and decompressed to the directory of the FTP server.
  • The two key management servers in the cluster must be upgraded to the same version.
Procedure
  1. Enable the maintenance mode of the key management server.
  2. Log in to the key management server's management interface through the serial port as user admin.
  3. Select Update and press Enter.

    The System Upgrade page is displayed, as shown in Figure 3-92.

    Figure 3-92 Setting upgrade parameters

  4. Set upgrade parameters.

    1. Set Protocol and Port to FTP and 21, respectively.
    2. Set Server and Path to the IP address of the FTP server and the path saving the upgrade file on the FTP server.
      NOTE:

      If Save as defaults is selected, the system saves the FTP server information, which will be used as default for the next upgrade.

    3. Set File to the name of the upgrade file, and set User and Password to the user name and password for logging in to the FTP server.
    4. Select OK and press Enter.
    NOTE:

    After the upgrade succeeds, the key management server restarts automatically.

  5. Verify the upgrade.

    1. After the upgrade is complete and the key management server starts, log in to its web interface as an administrator.
    2. Click the Summary tab and check whether Software version is the same as the target version.
    Figure 3-93 Viewing the upgrade result

Translation
Download
Updated: 2019-07-11

Document ID: EDOC1000181504

Views: 23110

Downloads: 181

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next