Dell Unisphere for PowerMax 10.0.1.0 Installation Guide

Authentication and security

Unisphere for PowerMax supports the following types of authentication:

Windows (local and domain-based)

Users log in by specifying the Windows domain, username, and password (if they have a Windows account on the SMAS server).

LDAP

Users log in with their LDAP-SSL username and password (if they have a user account that is stored on an LDAP-SSL server). To use this method, a Unisphere Administrator or SecurityAdmin sets up LDAP-SSL authentication in Unisphere for PowerMax. The Unisphere for PowerMax Online Help contains instructions on performing these tasks.

Local Unisphere users

Users log in with their Unisphere username and password (if they have a local Unisphere user account). To use this method, a Unisphere Initial Setup User, Administrator, or SecurityAdmin creates a local Unisphere user account for the user. Local user accounts are stored locally on the SMAS server host and work in a similar way as the other methods used to validate user credentials. The Unisphere for PowerMax Online Help contains instructions on performing these tasks.

X.509 certificate-based user authentication

Certificate-based user authentication using X.509 certificates is supported on fresh installations on Windows and Linux servers. You can use a certificate, issued by a trusted public third-party certificate authority (CA), to authenticate your identity when using the Unisphere for PowerMax web client. Also, you can use digital identity smartcards, such as Common Access Card (CAC) and Personal Identity Verification (PIV), as part of a multifactor authentication process. You can enable certificate-based user authentication as part of the installation and after you have confirmed your intentions, the choice becomes irreversible. If you select X.509 at installation time, that authentication method and the source of user identity that you configure are irrevocable. You must import the CA certificates before certificate-based user authentication can be used.

PowerMax arrays are listed on the U.S. Department of Defense Information Network (DoDIN) Approved Products List (APL). See the Military Unique Deployment Guide (MUDG) for deployment and configuration. The MUDG can be downloaded from the Defense Information Systems Agency (DISA) APL site.

For more information about authentication, authorization, and other issues that are related to security, see the Dell PowerMax Family Security Configuration Guide.