Edit on GitHub Download PDF

Qumulo On-Premises Administrator Guide
- Documentation Home
- Guide Table of Contents
- Contacting the Qumulo Care Team
Getting Started
- Installing the Qumulo Core Product Package
- Supported Configurations and Known Limits
System Upgrades
- Feature Log
- Upgrade Modes
- Performing Upgrades
- Replication Version Requirements and Upgrade Recommendations
Authentication
- Installing a Signed SSL Certificate
- Installing a Custom Root CA Certificate
- Installing VPN Keys
- Configuring Active Directory
- Configuring LDAP
- Configuring SAML Single Sign-On (SSO)
- Configuring Search Trusted Domains
- Creating and Using Bearer Tokens
Connecting to External Services
- Creating and Using Access Tokens
- Connecting a Kubernetes Cluster
Authorization
- Managing Role-Based Access Control (RBAC)
- Managing Cross-Protocol Permissions
- Using SMB Host Restrictions
- Using Active Directory for POSIX Attributes
- Managing File Locks
Encryption at Rest
- Managing Encryption at Rest
Encryption in Transit
- Managing SMB3 Encryption in Transit
- How NFSv4.1 Works with Kerberos
- Host Access Rules for NFS Exports
Cryptographic Key Management
- Generating and Storing ECDSA Keys
- Managing Security Keys
Storage Management
- Creating and Managing Directory Quotas
Network Configuration
- Required Networking Ports
- Configuring IPv6
- Connecting to Multiple Virtual Networks
- Configuring Round-Robin DNS on Windows Server
- Configuring Qumulo Authoritative DNS (QDNS)
Network Multitenancy
- Partitioning a Cluster into Tenants
- Configuring Management Protocols
- Configuring File System Protocols
Cloud Data Fabric
- Enabling Cloud Data Fabric
- Known Limits for Cloud Data Fabric
- Configuring a Portal Relationship
- Configuring Cache Management
Web UI
- Setting the Web UI Login Banner
- Setting the Web UI Inactivity Timeout
qq CLI
- Getting Started with the qq CLI
- Enabling Autocomplete for the qq CLI
Metadata
- Managing User-Defined Metadata
Snapshots
- How Snapshots Work
- Managing Snapshots
- Locking and Unlocking Snapshots
- Recovering Files by Using Snapshots
Node Addition and Replacement
- How Drive and Node Failure Protection Works
- Adding Nodes to an Existing Cluster
- Increasing the Node Fault Tolerance Level during Node-Add Operations
- Adding Nodes with Adaptive Data Protection
- Replacing Nodes by Performing a Transparent Platform Refresh
- Improving Performance by Migrating a Cluster to a Different License Class
- Understanding Offline Nodes
Data Replication
- Creating and Managing a Continuous Replication Relationship
- Shift-To Amazon S3
- Shift-From Amazon S3
File System Changes
- How File System Change Notifications Work
- Watching for Changes with SMB2 CHANGE_NOTIFY
- Watching for Changes with REST
NFS
- Creating and Managing an NFS Export
- Enabling and Using NFSv4.1
- Managing File Access Permissions with ACLs
- Host Access Rules for NFS Exports
NFSv4.1 with Kerberos
- How NFSv4.1 Works with Kerberos
- Prerequisites for Joining to Active Directory
- Configuring Active Directory
- Performing Additional Cluster Configuration
- Using Kerberos Permissions
- Configuring a Linux Client
- Configuring Cross-Domain Active Directory Trusts
- Troubleshooting NFSv4.1 with Kerberos
SMB
- Creating and Managing an SMB Share
- Managing File Shares by Using the Shared Folders MMC Snap-In
S3 API
- Configuring and Using the S3 API
- Creating and Managing S3 Access Keys
- Creating and Managing S3 Buckets
- Managing Access to S3 Buckets
- Managing Access Policies for S3 Buckets
- Managing Multipart S3 Uploads
- Managing S3 Bucket Versioning
- Managing Object Lock for S3 Buckets
- Supported Functionality and Limits
Monitoring and Metrics
- Enabling Nexus Remote Support
- Enabling Cloud-Based Monitoring and VPN Remote Support
- Connecting to Cloud-Based Monitoring and S3 with a Custom Proxy
- Restoring the Default Values for Cloud-Based and Nexus Monitoring
- How Audit Logging Works
- OpenMetrics API Specification

Enabling Nexus Remote Support for Qumulo Core

This section explains how to enable Nexus Remote Support for your Qumulo cluster.

How Nexus Remote Support Works

Nexus Remote Support lets the Qumulo Care Team access your Qumulo cluster solely to assist you with running a software update, performing diagnostics, or troubleshooting your cluster. All connections are encrypted with TLS.

When you register your Qumulo cluster with Nexus, the system creates a public-private key pair (your cluster holds the public key and Nexus holds the private key). Qumulo Core uses the public key to establish an encrypted outgoing connection that authenticates REST API operations from Nexus securely.

Note

When the Qumulo REST API is unavailable (for example, if your Qumulo cluster is out of quorum), the Qumulo Care Team can't use Nexus Remote Support to troubleshoot issues with your cluster. In this type of scenario, contact the Qumulo Care Team for assistance.
Nexus Remote isn't compatible with HTTP proxies.

Enabling Nexus Remote Support

To enable Nexus Remote Support for your Qumulo cluster, you must create a registration key in Nexus and then register the key by using the qq CLI.