Adding DS8000 storage systems that use SSLv3 and MD5 signed certificates

Because of security vulnerabilities, you can't add DS8000 storage systems that use SSLv3 or MD5 certificates to IBM Storage Insights unless you choose to disable the security settings that prevent such storage systems from being added.

About this task

To ensure the security of the HMC, the best practice is to ensure that all DS8000 storage systems are patched or updated to a firmware level that is documented in the security bulletin at External link iconhttp://www.ibm.com/support/docview.wss?uid=ssg1S1005137.

Procedure

To add DS8000 storage systems that are at a firmware level that use the SSLv3 protocol or that use MD5 to sign certificates, complete these steps:

  1. Log on to the server where the data collector service is installed.
  2. Open the setup.properties file in the data collector conf directory.

    The default path for this file is DataCollector_windows\conf on Windows operating systems, DataCollector_aix/conf on AIX® operating systems, and DataCollector_linux_ix86/conf on Linux® operating systems.

  3. To disable the security settings, add one or both of the following lines to the setup.properties file:
    1. To disable the security setting for SSLv3, type EnableSSLv3=true on a separate line.
    2. To disable the security setting for MD5, type EnableMD5=true on a separate line.
  4. Stop and start the data collector service.
    On Windows operating systems, you must have Administrator rights to stop or start the data collector service. On AIX or Linux operating systems, you must have root privileges to stop or start the data collector service.
    Operating system Options
    Windows
    1. Click the Start menu, type services.msc, and then press Enter.
    2. On the Services page, select the service name that begins with IBM Spectrum Control Storage Insights data collector and stop and start it.

    Alternatively, run the dataCollector.bat script with the stop parameter, and then with the start parameter.

    AIX or Linux

    Run the dataCollector.sh script with the stop parameter, and then with the start parameter.