SecureAdmin is set up automatically on storage systems shipped with Data ONTAP 8.0 or later. For these systems, Secure protocols (including SSH, SSL, and HTTPS) are enabled by default, and nonsecure protocols (including RSH, Telnet, FTP, and HTTP) are disabled by default.
To enhance security, starting with Data ONTAP 8.0.2, Data ONTAP uses the SHA256 message-digest algorithm to generate digital certificates (including CSRs and root certificates) on the storage system.
Data ONTAP 8.0 and 8.0.1 use the MD5 message-digest algorithm to generate digital certificates. Due to the CVE-2004-2761-IETF X.509 certificate MD5 signature collision vulnerability, and to minimize security risks when using a certificate signed with MD5, you should have the certificate signing requests (CSRs) further signed by a certificate authority (CA) using SHA256 or SHA1.