Set Up Public Key Authentication for ZFS Storage Controllers

Language:

You must set up public key authentication on the ZFS storage appliance for the ZFS storage controllers for the first two global domains before using the quorumdiskmgr tool. You do not have to set up public key authentication from non-global zones, but it is required for its corresponding global zones.

Log in to the first ZFS storage controller using the CLI.
To log in remotely using the CLI, use an ssh client. If you have not configured other users to administer the appliance, you must log in as root. When you log in, the CLI prompt consists of the hostname, followed by a colon, followed by a greater-than sign:
```
% ssh root@zfs-controller1-hostname
Password:
Last login: Mon Oct 13 15:43:05 2009 from kiowa.sf.fishpo
zfs-controller-hostname:>
```
where zfs-controller1-hostname is the host name for the first ZFS storage controller.

Set up the public key authentication on the first ZFS storage controller for the first global zone:

zfs-controller1-hostname:> configuration preferences keys
zfs-controller1-hostname:configuration preferences keys> create
zfs-controller1-hostname:configuration preferences key (uncommitted)> set type=DSA
zfs-controller1-hostname:configuration preferences key (uncommitted)> set key="DSA-key-text"
                        key = DSA-key-text == (uncommitted)
zfs-controller1-hostname:configuration preferences key (uncommitted)> set comment="fw-log1"
                        comment = fw-log1 (uncommitted)
zfs-controller1-hostname:configuration preferences key (uncommitted)> commit
zfs-controller1-hostname:configuration preferences keys> show
Keys:
 
NAME     MODIFIED              TYPE   COMMENT
key-000  10/12/2009 10:54:58   DSA    fw-log1

The DSA-key-text is the key text itself (usually hundreds of characters), without spaces.

Repeat Step 2 for the second global zone.
Log out of the first ZFS storage controller:
```
zfs-controller1-hostname:> exit
```
Note - You do not have to repeat this procedure for the second ZFS storage controller. When you set up the public key authentication on the first ZFS storage controller, it appears when you log in to the second ZFS storage controller.

Log in to the first global zone in your system, if you are not logged in already.

Verify that you set up the public key authentication correctly:
```
% ssh root@zfs-controller1-hostname hostname 
```
where zfs-controller1-hostname is the host name for the first ZFS storage controller.

You should be able to log in to the ZFS storage controller successfully and see the CLI prompt.
Repeat Step 5 and Step 6 for the second global zone.