ZStack Cloud Platform
Single Server, Free Trial for One Year
-
Documentation&Tools
Comprehensive product documentation and tools
-
Support & Services
Upholding the value of Customer First and the mission of Serving Customer, ZStack is dedicated to providing secure and stable services for customers.
-
Training & Certification
To educate ZStack partners and interested individuals about cloud computing and to cultivate cloud computing talent.
-
Content
ZStack provides innovative cloud infrastructure for ten major industries
VMware-to-ZStack Case Collection
The report provides three major
solutions and customer case studies for transitioning from VMware to ZStack.
ZStack ZSphere Documentation>ZStack ZSphere User Guide(v4.10.20)>System Management>Security Access Settings
Security Access Settings
ZStack ZSphere helps you improve access control security through IP blocklists and allowlists, certificate management, and security settings.
This chapter mainly covers the following topics:
IP Blocklist and Allowlist Management
IP blocklist and allowlist: By identifying and filtering visitor IPs, it intercepts access from specific IPs or allows access from specific IPs, further enhancing the access control security of ZStack ZSphere.
Basic Information
- If no IP blocklists or allowlists have been added, requests from all IP addresses are allowed by default.
- If only an IP blocklist is added, IPs in the blocklist are denied access to the platform, while other IPs are allowed.
- If the same IP is added to both lists, the allowlist takes precedence over the blocklist, allowing requests from that IP.
- You cannot use the IP allowlist alone. Make sure to add at least one IP blocklist before you use IP allowlist. Otherwise, the IP allowlist does not take effect.
Add IP Blocklist or Allowlist
You can follow these steps to add an IP blocklist or allowlist:
- Navigate to .
- Click Add IP Blocklist and Allowlist.
You can use the following example to complete the configuration:
- Name: The name of the IP blocklist or allowlist
- Description: The description of the IP blocklist or allowlist
- Type: Select blocklist or allowlist
- IP Address: You can enter IP addresses, IP address ranges, or IP/mask format. Separate multiple IP addresses with commas. You can add up to 100 entries.
Manage IP Blocklist and Allowlist
You can manage IP blocklists and allowlists, including editing names and descriptions, modifying configurations, and deleting them.
- Navigate to .
- Select a list and then click Action.
- To modify the name and description of the list, select Edit Name and Description.
- To modify the IP addresses in the list, select Modify Configuration.
- To remove IP access restrictions for a particular list from the platform, select Delete.
Certificate Management
ZStack ZSphere supports configuration and management of SSL certificates.
Import Third-Party Certificate
Prerequisites
- You have deployed the latest ZStack ZSphere environment. For a dual-management node environment, ensure that each management node is working properly.
- You need admin permissions to configure the certificates.
- You hold a valid commercial CA-issued certificate.
- Certificate files and certificate chains are supported in CTR or PEM format only. Private keys for certificates must be in KEY or PEM format.
Note: If your certificate does not meet these format requirements, convert it accordingly.
Procedure
- In the navigation pane, choose .
- On the Certificate Management page, click Import Certificate.
- In the Certificate Import dialog, set the following parameters:
- Import Mode: Select Third-party Certificate.
- Certificate File: Import or enter the certificate public key.Note:
- Only CTR and PEM formats are supported.
- The certificate content must begin with
----BEGIN CERTIFICATE----and end with----END CERTIFICATE----.
- Certificate Private Key: Import or enter the certificate private key.Note:
- Only KEY and PEM formats are supported.
- The private key content must begin with
----BEGIN (RSA/EC) PRIVATE KEY----and end with----END (RSA/EC) PRIVATE KEY----.
- Certificate Chain: Import or enter the certificate chain.Note:
- Only CTR and PEM formats are supported.
- The certificate chain content must begin with
----BEGIN CERTIFICATE----and end with----END CERTIFICATE----.
- HTTP Redirection: Optional, enabled by default. When enabled, the system automatically redirects requests from port 80 of the HTTP address to port 443 of the HTTPS address.
- Review the certificate information and click OK.
Results
After successfully importing the third-party certificate, the system will re-establish the session and reconnect to the UI management interface through port 443 of the HTTPS protocol.Next Chapter: System Settings