Managing Devices in Oracle^® Solaris 11.3

How to Configure CHAP Authentication for an iSCSI Target

You can set up either bidirectional or unidirectional CHAP authentication. This procedure assumes that you are logged in to the local system that contains the iSCSI targets.

1. Become an administrator.

   For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.3.

2. Configure the target to require that initiators identify themselves by using CHAP authentication.

   target# itadm modify-target -a chap target-iqn

3. Create an initiator context that describes the initiator with initiator's full node name and initiator's CHAP secret key.

   target# itadm create-initiator -s initiator-iqn
   Enter CHAP secret: ************
   Re-enter secret: ************

4. If the initiator uses an alternate CHAP name, then configure the initiator-context with the alternate name.

   target# itadm modify-initiator -u initiator-CHAP-name initiator-iqn

   This step completes the setup of unidirectional CHAP authentication. Continue with the remaining steps if you want to set up bidirectional CHAP authentication.

5. Set the target device secret key that identifies this target.

   target# itadm modify-target -s target-iqn
   Enter CHAP secret: ************
   Re-enter secret: ************

6. If the target uses an custom CHAP user name, set the CHAP name that identifies the target.

   By default, the target's CHAP name is set to the target node name (iqn). If the target uses a custom name, set the CHAP name that identifies the target.

   target# itadm modify-target -u target-CHAP-name target-iqn