Set Up Public Key Authentication for ZFS Storage Controllers

Language:

Before running the install.sh script, you must set up public key authentication on the ZFS storage controllers for every LDom where you are setting up zones on the Database Domains.

Log in to the first ZFS storage controller using the CLI.
To log in remotely using the CLI, use an ssh client. If you have not configured other users to administer the appliance, you must log in as root. When you log in, the CLI prompt consists of the hostname, followed by a colon, followed by a greater-than sign:
```
% ssh root@zfs-controller1-hostname
Password:
Last login: Mon Oct 13 15:43:05 2009 from kiowa.sf.fishpo
zfs-controller-hostname:>
```
where zfs-controller1-hostname is the host name for the first ZFS storage controller.

Set up the public key authentication on the first ZFS storage controller for the first Database Domain that contains zones:

zfs-controller1-hostname:> configuration preferences keys
zfs-controller1-hostname:configuration preferences keys> create
zfs-controller1-hostname:configuration preferences key (uncommitted)> set type=DSA
zfs-controller1-hostname:configuration preferences key (uncommitted)> set key="DSA-key-text"
                        key = DSA-key-text == (uncommitted)
zfs-controller1-hostname:configuration preferences key (uncommitted)> set comment="fw-log1"
                        comment = fw-log1 (uncommitted)
zfs-controller1-hostname:configuration preferences key (uncommitted)> commit
zfs-controller1-hostname:configuration preferences keys> show
Keys:
 
NAME     MODIFIED              TYPE   COMMENT
key-000  10/12/2009 10:54:58   DSA    fw-log1

The DSA-key-text is the key text itself (usually hundreds of characters), without spaces.

Repeat Step 2 for every Database Domain to contain zones.

Log out of the first ZFS storage controller:
```
zfs-controller1-hostname:> exit
```
Note - You do not have to repeat this procedure for the second ZFS storage controller. When you set up the public key authentication on the first ZFS storage controller, it appears when you log in to the second ZFS storage controller.

Log in to the first Database Domain in your system, if you are not logged in already.

Verify that you set up the public key authentication correctly:
```
% ssh root@zfs-controller1-hostname hostname 
```
where zfs-controller1-hostname is the host name for the first ZFS storage controller.

You should be able to log in to the ZFS storage controller successfully and see the CLI prompt.

Repeat Step 5 and Step 6 for every Database Domain in your system.