Because of security vulnerabilities, you can't add DS8000 storage systems that use SSLv3 or MD5 certificates to IBM Storage
Insights unless you choose to disable the security settings that prevent such storage systems from being added.
About this task
To ensure the security of the HMC, the best practice is to ensure that all DS8000 storage systems are patched or updated to a
firmware level that is documented in the security bulletin at
http://www.ibm.com/support/docview.wss?uid=ssg1S1005137.
Procedure
To add DS8000 storage systems
that are at a firmware level that use the SSLv3 protocol or that use MD5 to sign certificates,
complete these steps:
-
Log on to the server where the data collector service is installed.
-
Open the setup.properties file in the data collector
conf directory.
The default path for this file is DataCollector_windows\conf on Windows operating systems,
DataCollector_aix/conf on AIX® operating
systems, and DataCollector_linux_ix86/conf on Linux® operating systems.
-
To disable the security settings, add one or both of the following lines to the
setup.properties file:
-
To disable the security setting for SSLv3, type
EnableSSLv3=true
on a separate
line.
-
To disable the security setting for MD5, type
EnableMD5=true
on a separate
line.
-
Stop and start the data collector service.
On Windows operating systems, you must have
Administrator rights to stop or start the data collector service. On AIX or Linux operating systems, you must
have root privileges to stop or start the data collector service.
Operating system |
Options |
Windows |
- Click the menu, type services.msc, and then press Enter.
- On the Services page, select the service name that begins with
IBM Spectrum Control Storage Insights data collector and stop and start
it.
Alternatively, run the dataCollector.bat script with the
stop parameter, and then with the start parameter.
|
AIX or Linux |
Run the dataCollector.sh script with the stop
parameter, and then with the start parameter.
|