Security Management

Security Management

The Cisco UCS Manager 4.3(5a) release introduces the Security Management tab in the Admin section. This section aims to offer multiple security management options to protect sensitive data and ensure network integrity. The tab currently includes Encryption Management and assists administrators in effectively managing security settings.

Encryption Management

Complementing the Security Management enhancements, Cisco introduces Encryption Management. Encryption Management allows you configure the primary encryption key that Cisco UCS Manager uses to protect sensitive data. It is supported on Cisco UCS 6400, 6500, and 6600 Series Fabric Interconnects and Cisco UCS X-Series Direct Fabric Interconnects. You must configure the key before you create or run a backup or configuration export operation on these Fabric Interconnects.

Configuring Encryption Management

Configure or update the primary encryption key to secure sensitive data within Cisco UCS Manager. The encryption tab allows you to establish a master key for the system. This key is essential for protecting sensitive data and ensuring secure communication across the network infrastructure.

Before you begin

  • Ensure you have the necessary administrative privileges to modify security settings.

  • Have the new primary key string ready, ensuring it meets the character and length requirements.


Note

If you upgrade from Cisco UCS Manager Release 6.0(1b) or earlier to Release 6.0(2b), reconfigure the primary encryption key to continue using encryption. You must complete this step before you create or run a backup or configuration export operation, even if a key was previously configured.

Procedure

Step 1

In the Navigation pane, click Admin.

Step 2

Navigate to Security Management > Encryption Management.

Step 3

In the Properties area, update the following fields:

  1. Primary Key field: Enter the primary key for encryption.

    Note

     

    • The primary key length must be between 16 to 64 characters.

    • The primary key cannot have a combination of double quote ("), single quote ('), and space ( ).

    • The first and second characters of the primary key cannot be a combination of single quote (') and double quote (").

    • For more information, see Creating a MACsec Key section in the Cisco UCS Manager Network Management Guide.

  2. Confirm Primary Key field: Re-enter the same sequence of characters as the Primary Key to confirm its accuracy.

    Note

     

    The system validates the key. If the key meets all requirements and matches the confirmation field, the red validation borders will disappear and the Save Changes button will become active.

Step 4

Click Save Changes.

The Primary Key Set field displays Yes, indicating that the primary key is successfully configured and active.

Note

 

You can modify the primary key, but you cannot delete the key.

Example

For example, if you enter a 16-character alphanumeric string in both the Primary Key and Confirm Primary Key fields and click Save Changes, the Primary Key Set status will update from No to Yes.

What to do next

After configuring the encryption key, you may need to:

  • Document the key in a secure location, as it cannot be retrieved from the user interface once set.

  • Verify that dependent security services are functioning correctly with the new key.