Skip to main content

Security Brute Squad

Search This Blog

ONTAP 9.4 Security Podcast

on May 25, 2018

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

GDPR, the dark web, and the "mafia".

All this week on the TechONTAP podcast.

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

NetApp Volume Encryption (NVE) and the Onboard Key Manager (OKM) are FIPS 140-2 Compliant

Here's an early Christmas present: NVE is now FIPS 140-2 compliant! NetApp CryptMod This is the cryptographic module that is used by both NVE and OKM. This is the module that was taken through the FIPS-140-2 level 1 validation and completed the validation. CryptoMod is FIPS 140-2 validated. Where is this module used? This module is for NVE and OKM in all flavors: AFF, FAS, ONTAP Select, and ONTAP Cloud. Is there any specific version of ONTAP that I need to run? You need to have at least ONTAP 9.2 to run FIPS validated NVE. What do I need to do to turn on FIPS for NVE/OKM? Nothing - just make sure you are running at least ONTAP 9.2. Yes, it is that easy.

ONTAP: How to Make Encrypted Volumes the Default

Return of The Blog It's been a while since the last post. And plenty has happened since, and I will need to play catch up on a lot of items. But let's get down to business ... Making Encrypted Volumes the Default Once administrators get comfortable with the idea of encryption and notice that they can enable it across the board non-disruptively, they've been asking - how can we make sure new volumes that are created are always NVE volumes? Setting a boot argument To enable NVE for new volumes by default, you have to set a bootarg. But you can set that bootarg without having to reboot - but you will need the diag account. If you're not comfortable with that, then you would have to reboot to set the boot argument at the corresponding prompt. Assuming you're ok with briefly having access to the diag account the following command will do the trick (make sure it is set on each node) - systemshell * -c sudo kenv -p bootarg.softwareencrypti

Blackhat 2017 Day 1 – The Keynote

Day one begins with the keynote speech. The night before there were a multitude of parties and luckily through my coworkers I was able to attend one thrown by Kaspersky (which I pronounced Kaspery and that confused them quite a bit). I’m a guy that gets “hangry” and the breakfast provided by the conference was muffins and a mixed berry parfait. Oh, what would I give for an egg, cheese, and some sort of meat biscuit. The keynote speaker is Alex Stamos, CSO for Facebook. I bet you he’s gotten as many Full House references as I have gotten Last of the Mohicans. The key note was in the Mandalay Bay Arena, which I had never been in before. The arena looks like a mid-sized college basketball stadium. At the time I wondered how this compared to the event (Insight) NetApp puts on in the Mandalay Bay conference center as well. Blackhat is bigger. The founder of Blackhat took the stage and framed the problem of “Secure by Default” vs. “On by Default” that everyo

Powered by Blogger