12.3. Configuring NVMe host authentication

Procedure

1. Generate an authentication secret:

   1. For the host:

      # hostkey=$(nvme gen-dhchap-key -n ${HOSTNQN})

   2. For the subsystem:

      # ctrlkey=$(nvme gen-dhchap-key -n ${SUBSYSTEM})

2. Configure the host for authentication:

   # nvme connect -t tcp -n ${SUBSYSTEM} -a ${TRADDR} -s 4420 --dhchap-secret=${hostkey} --dhchap-ctrl-secret=${ctrlkey}

   This provides the authentication secrets to the nvme-connect utility so that it can authenticate and establish a connection to the target.

   • Optional: To enable automated logins, set up persistent NVMe fabrics configuration. To do so, add the --dhchap-secret and --dhchap-ctrl-secret parameters to /etc/nvme/discovery.conf or /etc/nvme/config.json.