Skip to main content

Create the ONTAP S3 object store server

Contributors netapp-dbagwell netapp-forry netapp-mwallis netapp-aherbin netapp-ahibbard netapp-aaron-holt netapp-lenida johnlantz netapp-manini
PDFs

The ONTAP object store server manages data as S3 objects, as opposed to file or block storage provided by ONTAP NAS and SAN servers.

Before you begin

You should be prepared to enter the S3 server name as a Fully Qualified Domain Name (FQDN), which clients will use for S3 access. The FQDN must not begin with a bucket name. When accessing buckets using virtual-hosted-style, the server name will be used as mydomain.com. For example, bucketname.mydomain.com.

You should have a self-signed CA certificate (created in previous steps) or a certificate signed by an external CA vendor. A CA certificate is not necessary for a local tiering use case, where IP traffic is going over cluster LIFs only.

About this task

When an object store server is created, a root user with UID 0 is created. No access key or secret key is generated for this root user. The ONTAP administrator must run the object-store-server users regenerate-keys command to set the access key and secret key for this user.

Note

As a NetApp best practice, do not use this root user. Any client application that uses the access key or secret key of the root user has full access to all buckets and objects in the object store.

Learn more about vserver object-store-server in the ONTAP command reference.

System Manager

Use this procedure if you are adding an S3 server to an existing storage VM. To add an S3 server to a new storage VM, see Create a storage SVM for S3.

You should be prepared to enter IP addresses for interface role Data.

  1. Enable S3 on an existing storage VM.

    1. Select the storage VM: click Storage > Storage VMs, select a storage VM, click Settings, and then click Actions icon under S3.

    2. Click Enable S3, then enter the S3 Server Name.

    3. Select the certificate type.

      Whether you select system-generated certificate or one of your own, it will be required for client access.

    4. Enter the network interfaces.

  2. If you selected the system-generated certificate, you see the certificate information when the new storage VM creation is confirmed. Click Download and save it for client access.

    • The secret key will not be displayed again.

    • If you need the certificate information again: click Storage > Storage VMs, select the storage VM, and click Settings.