# Security

Determine whether you will use SSL for switch-to-KMC communication. If you are using SSL, then do the following tasks:

• Identify whether a self-signed certificate is required or whether the customer will use their own certificate as the root certificate.

• List the names and IP addresses of the switches where the certificates will be installed.

• Install OpenSSL. This application could be installed on the server used for DCNM-SAN and KMC.

– For the server running Windows operating system, download and install OpenSSL from the following locations:

http://gnuwin32.sourceforge.net/packages/openssl.htm

http://www.slproweb.com/products/Win32OpenSSL.html

The SSL installed should be used to generate keys.

– Use the OpenSSL application installed at the following location:

C:\Program Files\GnuWin32\bin\openssl.exe

Note For a server running on Linux, the OpenSSL application should already be available on the server.

• Identify the authentication modes used in the SAN, that is local database, TACACS+, or RADIUS.