Security Configuration - Revision history

Qadmin: /* SSL/TLS 1.2 Key Management */

2024-06-07T18:14:29Z

SSL/TLS 1.2 Key Management

← Older revision		Revision as of 18:14, 7 June 2024
Line 240:		Line 240:

	=== [[Custom SSH Security\|Custom SSH Ciphers and Key Exchange Algorithms]] ===		=== [[Custom SSH Security\|Custom SSH Ciphers and Key Exchange Algorithms]] ===
	* Information on how to customize the ssh service to enforce strong Cipher and Key Exchange Algorithms for SSH communication.		* Information on how to customize the ssh service to enforce strong Cipher and Key Exchange Algorithms for SSH communication.

			== [[Custom S3 SSl/TLS Certificate ]] ==

	== Multi-factor Authentication ==		== Multi-factor Authentication ==

Qadmin: /* LDAP Single-Sign-On Authentication */

2024-01-15T18:38:28Z

LDAP Single-Sign-On Authentication

← Older revision		Revision as of 18:38, 15 January 2024
Line 37:		Line 37:
	* LDAP Server (FQDN): EXAMPLE		* LDAP Server (FQDN): EXAMPLE
	* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com		* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com

			Note, this integration with LDAP is for SSO access to the storage grid for administrative access via the QuantaStor WUI, CLI, and APIs. It does not provide integration with Active Directory for Network Shares and SMB protocol access. For that you'll need to join each system to your AD domain using the dialog under '''Storage Management --> Storage Systems --> Active Directory [toolbar] --> Join AD Domain'''.

	=== Audit Logging ===		=== Audit Logging ===

Qadmin: /* Security Settings Management */

2024-01-15T18:34:29Z

Security Settings Management

← Older revision		Revision as of 18:34, 15 January 2024
Line 20:		Line 20:

	Choosing the '''Suggested Defaults''' option will automatically setup the password and other policies to meet the various standards mentioned above. Further tuning of these settings can then be done to meet the specific requirements for a given deployment and environment.		Choosing the '''Suggested Defaults''' option will automatically setup the password and other policies to meet the various standards mentioned above. Further tuning of these settings can then be done to meet the specific requirements for a given deployment and environment.

Qadmin: /* LDAP Single-Sign-On Authentication */

2024-01-15T18:34:19Z

LDAP Single-Sign-On Authentication

← Older revision		Revision as of 18:34, 15 January 2024
Line 26:		Line 26:

	=== LDAP Single-Sign-On Authentication ===		=== LDAP Single-Sign-On Authentication ===

			[[File:Securitymanager_adv.PNG\|thumb\|right\|500px]]

	In the Advanced Settings page there are some options for connecting your QuantaStor Storage Grid to your LDAP/AD domain for management user authentication. To configure this you'll need to add one or more LDAP groups to your LDAP environment such as "QS-Administrator" and "QS-Monitor" and then associate one or more of your LDAP users with those groups. Next, within QuantaStor one will use the Modify Role dialog to edit an existing Role to associated it with the LDAP groups. For example, the "Administrator" role could be modified to associate it with the LDAP group "QS-Administrator" and similarly, the role for "System Monitor" may be associated with the LDAP group "QS-Monitor".		In the Advanced Settings page there are some options for connecting your QuantaStor Storage Grid to your LDAP/AD domain for management user authentication. To configure this you'll need to add one or more LDAP groups to your LDAP environment such as "QS-Administrator" and "QS-Monitor" and then associate one or more of your LDAP users with those groups. Next, within QuantaStor one will use the Modify Role dialog to edit an existing Role to associated it with the LDAP groups. For example, the "Administrator" role could be modified to associate it with the LDAP group "QS-Administrator" and similarly, the role for "System Monitor" may be associated with the LDAP group "QS-Monitor".
Line 33:		Line 35:
	* LDAP Server (FQDN): EXAMPLE		* LDAP Server (FQDN): EXAMPLE
	* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com		* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com

	~~[[File:Securitymanager_adv.PNG\|thumb\|right\|500px]]~~

	=== Audit Logging ===		=== Audit Logging ===

Qadmin: /* Security Settings Management */

2024-01-15T18:34:05Z

Security Settings Management

← Older revision		Revision as of 18:34, 15 January 2024
Line 20:		Line 20:

	Choosing the '''Suggested Defaults''' option will automatically setup the password and other policies to meet the various standards mentioned above. Further tuning of these settings can then be done to meet the specific requirements for a given deployment and environment.		Choosing the '''Suggested Defaults''' option will automatically setup the password and other policies to meet the various standards mentioned above. Further tuning of these settings can then be done to meet the specific requirements for a given deployment and environment.





	=== LDAP Single-Sign-On Authentication ===		=== LDAP Single-Sign-On Authentication ===

Qadmin: /* LDAP Single-Sign-On Authentication */

2024-01-15T18:33:36Z

LDAP Single-Sign-On Authentication

← Older revision		Revision as of 18:33, 15 January 2024
Line 30:		Line 30:
	* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com		* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com

	[[File:Securitymanager_adv.PNG\|thumb\|~~left~~\|500px]]		[[File:Securitymanager_adv.PNG\|thumb\|right\|500px]]

	=== Audit Logging ===		=== Audit Logging ===

Qadmin: /* LDAP Single-Sign-On Authentication */

2024-01-15T18:32:58Z

LDAP Single-Sign-On Authentication

← Older revision		Revision as of 18:32, 15 January 2024
Line 30:		Line 30:
	* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com		* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com

	[[File:Securitymanager_adv.PNG\|thumb\|left\|500px]]		[[File:Securitymanager_adv.PNG\|thumb\|left\|500px]]


	=== Audit Logging ===		=== Audit Logging ===

Qadmin: /* Security Settings Management */

2024-01-15T18:32:27Z

Security Settings Management

← Older revision		Revision as of 18:32, 15 January 2024
Line 20:		Line 20:

	Choosing the '''Suggested Defaults''' option will automatically setup the password and other policies to meet the various standards mentioned above. Further tuning of these settings can then be done to meet the specific requirements for a given deployment and environment.		Choosing the '''Suggested Defaults''' option will automatically setup the password and other policies to meet the various standards mentioned above. Further tuning of these settings can then be done to meet the specific requirements for a given deployment and environment.

			=== LDAP Single-Sign-On Authentication ===

			In the Advanced Settings page there are some options for connecting your QuantaStor Storage Grid to your LDAP/AD domain for management user authentication. To configure this you'll need to add one or more LDAP groups to your LDAP environment such as "QS-Administrator" and "QS-Monitor" and then associate one or more of your LDAP users with those groups. Next, within QuantaStor one will use the Modify Role dialog to edit an existing Role to associated it with the LDAP groups. For example, the "Administrator" role could be modified to associate it with the LDAP group "QS-Administrator" and similarly, the role for "System Monitor" may be associated with the LDAP group "QS-Monitor".

			After that you'll enable Single-Sign-On and provide the LDAP domain information for your LDAP environment. Note also that your DNS and NTP settings should be configured to point to your AD server for both local DNS and NTP. This can be configured in the Storage System Modify dialog and should be setup before enabling Single-Sign-On.

			* LDAP Server (FQDN): EXAMPLE
			* LDAP Server Base DN for Users: dc=ldapserver,dc=example,dc=com

			[[File:Securitymanager_adv.PNG\|thumb\|left\|500px]]


	=== Audit Logging ===		=== Audit Logging ===

Qadmin at 22:27, 19 December 2023

2023-12-19T22:27:41Z

← Older revision		Revision as of 22:27, 19 December 2023
Line 131:		Line 131:

	Login to the web management interface as the 'admin' user and then change the default password which is '''password''' to something else that is at least 10 characters in length and includes upper and lower cases letters and numbers. Navigate to the '''Users & Groups''' tab and select "Set Password" from the "User" section of the ribbon/toolbar.		Login to the web management interface as the 'admin' user and then change the default password which is '''password''' to something else that is at least 10 characters in length and includes upper and lower cases letters and numbers. Navigate to the '''Users & Groups''' tab and select "Set Password" from the "User" section of the ribbon/toolbar.





	== Firewall Configuration ==		== Firewall Configuration ==

Qadmin: /* Change Management Administrator Account 'admin' Password */

2023-12-19T22:27:04Z

Change Management Administrator Account 'admin' Password

← Older revision		Revision as of 22:27, 19 December 2023
Line 125:		Line 125:

	One of the most important steps in the configuration of a new QuantaStor system is to change the qadmin console user password for each Storage System to something other than the default password '''qadmin'''. One can login to the console using the 'qadmin' account or access the system via SSD to login as 'qadmin'. Next type 'passwd' and change the password from '''qadmin''' to a strong password which includes letters and numbers.		One of the most important steps in the configuration of a new QuantaStor system is to change the qadmin console user password for each Storage System to something other than the default password '''qadmin'''. One can login to the console using the 'qadmin' account or access the system via SSD to login as 'qadmin'. Next type 'passwd' and change the password from '''qadmin''' to a strong password which includes letters and numbers.

			[[File:Set Password - Web.jpg\|300px\|thumb]]

	====Change Management Administrator Account 'admin' Password====		====Change Management Administrator Account 'admin' Password====
	~~[[File:Set Password - Web.jpg\|300px\|thumb]]~~

	Login to the web management interface as the 'admin' user and then change the default password which is '''password''' to something else that is at least 10 characters in length and includes upper and lower cases letters and numbers. Navigate to the '''Users & Groups''' tab and select "Set Password" from the "User" section of the ribbon/toolbar.		Login to the web management interface as the 'admin' user and then change the default password which is '''password''' to something else that is at least 10 characters in length and includes upper and lower cases letters and numbers. Navigate to the '''Users & Groups''' tab and select "Set Password" from the "User" section of the ribbon/toolbar.