No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Disk Encryption User Guide

OceanStor V5 Series V500R007

This document is applicable to OceanStor 5110 V5, 5110F V5, 5300 V5, 5300F V5, 5500 V5, 5500F V5, 5600 V5, 5600F V5, 5800 V5, 5800F V5, 6800 V5, 6800F V5, 18500 V5, 18500F V5, 18800 V5, and 18800F V5. It introduces how to install and configure key management servers connected to the storage systems that use self-encrypting disks.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring the Linux NFS Server

Configuring the Linux NFS Server

You can configure a Linux NFS server to back up the configurations of the key management server.

Prerequisites

The NFS service suite has been installed on the Linux NFS server.

Procedure

  1. Log in to the Linux NFS server.
  2. Run the useradd command to create the backup user.

    For example, under the /home directory, create a user kauser, and specify the user ID of this user to 710.

    # useradd -d /home/kauser -u 710 kauser

  3. Create the backup directory and check the status of the NFS service.

    1. Create a directory for saving backup information of the keyAuthority server.
      # mkdir -p /kabackup 
      # chown kauser /kabackup 
      # chgrp kauser /kabackup # chmod 700 /kabackup
    2. Check the version of the installed NFS service suite.
      # rpm -qa | grep nfs 
      nfs-utils-1.0.9-44.el5 
      nfs-utils-lib-1.0.8-7.6.el5 #
      NOTE:

      The preceding command output is only an example.

      If no message is returned after the command is run, the NFS service suite has not been installed. Ensure that the Linux server is connected to the Internet, and run the yum command to install the NFS service suite.

      # yum install nfs-utils

      After installation, run the service command to enable the NFS service.

      # service nfs start 
      Starting NFS services: [ OK ] 
      Starting NFS quotas: [ OK ] 
      Starting NFS daemon: [ OK ] 
      Starting NFS mountd: [ OK ] 
      # service nfs status 
      rpc.mountd (pid 3003) is running... 
      nfsd (pid 3000 2999 2998 2997 2996 2995 2994 2993) is running... 
      rpc.rquotad (pid 2989) is running... #
    3. Ensure that the NFS service is running properly.
      rpcinfo -p 
      100000 4 tcp 111 portmapper 
      100000 3 tcp 111 portmapper 
      100000 4 udp 111 portmapper 
      100000 3 udp 111 portmapper 
      100000 2 udp 111 portmapper 
      100024 1 udp 12562 status 
      100024 1 tcp 12562 status 
      100005 1 udp 42760 mountd 
      100005 1 tcp 42760 mountd 
      100005 2 udp 42760 mountd 
      100005 2 tcp 42760 mountd 
      100005 3 udp 42760 mountd 
      100005 3 tcp 42760 mountd 
      100003 3 tcp 2049 nfs 
      100003 4 tcp 2049 nfs 
      100003 3 udp 2049 nfs 
      100003 4 udp 2049 nfs 
      100021 3 udp 52293 nlockmgr 
      100021 4 udp 52293 nlockmgr 
      100021 3 tcp 52293 nlockmgr 
      100021 4 tcp 52293 nlockmgr #

  4. Create an NFS share.

    1. Create a folder for exporting data.

      In the /etc/exports file, add the host IP addresses or names of the keyAuthority key management servers.

      • Add the IP addresses of the key management servers.
        /kabackup 192.168.18.226(rw,sync) /kabackup 192.168.18.228(rw,sync)     
      • Add the names of the key management servers.
        /kabackup SA-R-226.qa.sv.us.thalesesec.com(rw,sync) /kabackup SA-R-228.qa.sv.us.thalesesec.com(rw,sync)
    2. Create an export task.
      #exportfs -a
    3. Verify that the export task is successfully created.
      #exportfs -v 
      /kabackup SA-R-228.qa.sv.us.thalesesec.com(rw,wdelay,root_squash) /kabackup SA-R-228.qa.sv.us.thalesesec.com(rw,wdelay,root_squash)
    4. Restart the NFS service.
      # service nfs restart 
      Shutting down NFS mountd: [ OK ] 
      Shutting down NFS daemon: [ OK ] 
      Shutting down NFS services: [ OK ] 
      Starting NFS services: [ OK ] 
      Starting NFS daemon: [ OK ] Starting NFS mountd: [ OK ]

Translation
Download
Updated: 2019-07-11

Document ID: EDOC1000181504

Views: 22775

Downloads: 181

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next