Enabling Wire-level Security

About this task

Wire-level security encrypts data transmission between the nodes in your cluster.

Enable encryption for data on the wire at the volume level only if security is enabled at the cluster level. If necessary, refer to Determining if a Cluster is Secure Using the CLI and REST API to determine if the cluster is secure before enabling wire-level encryption on a volume. If your cluster is enabled for security, wire-level security is enabled by default on all new volumes and no additional steps are required. This section describes how to enable wire-level security on new and existing volumes (if the volume is already not enabled for wire-level security).

Enabling Wire-level Security for a Volume Using the Control System

About this task

Procedure

  1. Log in to the Control System and click Data > Volumes.
  2. Click Create Volume to display the Create New Volume page or go to the Edit Volume page.
  3. Set the value for the Data on Wire Encryption property to Yes (to enable).
    See Creating a Volume or Modifying a Volume for more information.
  4. Complete the steps to create or modify the volume.
    See Creating a Volume or Modifying a Volume for more information.

Enabling Wire-Level Security for a Volume Using the CLI and REST API

About this task

Set the value for the wiresecurityenabled parameter to true when you:
  • Create the volume. For example: 
    maprcli volume create -name <volName> -path <volMountPath> -wiresecurityenabled true
  • Modify the volume. For example:
    maprcli volume modify -name <volName> -wiresecurityenabled true
Send a request of type POST and set the value for the wiresecurityenabled parameter to true when you:
  • Create the volume. For example: 
    curl -X POST 'https://server.sj.us:8443/rest/volume/create?name=<volName>&path=<volMountPath>&wiresecurityenabled=true' --user <username>:<password>
  • Modify the volume. For example: 
    curl -X POST 'https://server.sj.us:8443/rest/volume/modify?name=<volName>&wiresecurityenabled=true' --user <username>:<password>
See volume create and volume modify for more information.