Enabling or disabling security settings

The following topics describe how to enable or disable security related settings in IBM Storage Scale System.

Firewall ports
The essrun command opens required ports for IBM Storage Scale System components during deployment. For security, close any unused, duplicate, or legacy ports that are not required by your deployment.
Enabling or disabling the firewall
You can enable firewall in an IBM Storage Scale System environment for management server, I/O server nodes, and protocol nodes by using the firewall subcommand of the essrun command.
Enabling or disabling SELinux
Enabling SELinux in an IBM Storage Scale System environment is a two-step process and it can be enabled for management server and I/O server nodes using the selinux sub-command of the essrun command.
Enabling or disabling sudo
Enabling sudo requires a sudo-capable user (gpfsadmin) to be added to all nodes which are a part of or which are going to be a part of an IBM Storage Scale System cluster. Sudo must be enabled for management server and I/O server nodes by using the sudo sub-command of the essrun command.
Enabling or disabling FIPS
IBM Storage Scale System 7.0.1.x supports Federal Information Processing Standards (FIPS)-compliant operations on IBM Storage Scale System nodes. You can enable or disable FIPS on all nodes in cluster by using the essrun command.
Security Technical Implementation Guide
Security Technical Implementation Guide (STIG) standards are developed by the Defense Information Systems Agency (DISA) to secure information systems. STIG defines specific security requirements that reduce vulnerabilities and help organizations meet federal security compliance standards.
Federal Information Processing mode
Learn about Federal Information Processing standards (FIPS) mode capabilities and limitations for IBM Storage Scale System to make informed security configuration decisions.

Parent topic: Software Deployment Guide