Notifications

This section describes how to configure notifications. It contains the following topics:

>Overview

>Email Notifications

>Configure the SMTP Server Settings

>Add Email Recipients

Overview

Administrator users can configure notification messages for critical CCC events. You must have a valid monitoring license to access the Notifications page and to configure email notifications.

You can configure a Simple Mail Transfer Protocol (SMTP) server to send event notifications over email from CCC. You can configure notifications for the following events:

>Device is deleted

>Service is deleted

>Connection to a device is lost

>Crypto Command Center is deactivated

>Instant Fluctuations

>Persistent Fluctuations

You must enable email notifications, connect CCC to an SMTP server, add email recipients, and select notification types to configure email notifications from CCC. You can configure notifications from the Monitoring & Reports tab.

See Email Notifications for more information about enabling or disabling Email Notifications.

See Configure the SMTP Server Settingsfor detailed procedures on configuring and editing and the SMTP Server Settings.

See Add Email Recipients for Add more information on adding email recipients.

See Customize Email Notification Types for detailed procedures on selecting email notification types.

NOTE   In the event that the CCC server goes offline, and the instance becomes deactivated, the notification email will not be sent because the server is not accessible. We recommend using a server monitoring system to monitor the health of the CCC server instances.

Email Notifications

You can enable email notifications to send notification emails for critical CCC events. You can enable or disable notifications from the Notifications page on the Monitoring & Reports tab.

To enable/disable email notifications

1.Click on the Monitoring & Reports tab, and select Notifications in the navigation frame.

NOTE   The CCC Notifications feature will require a license that includes monitoring. If the monitoring license is not available, a "Monitoring license required" message displays on clicking Notifications in the left navigation frame.

2.Enable or Disable the Enable email notifications toggle switch.

Customize Email Notification Types

The CCC Administrator user can define the types of email event notifications. The event email notification is sent to all recipients on the notifications list. The Administrator can enable or disable notifications for the following events:

>Service Level Events

>Device Level Events

>Crypto Command Center Events

Configure the SMTP Server Settings

To send email notifications from CCC you must import the SMTP server settings into CCC. CCC supports all versions of SMTP server.

To configure the SMTP server settings

1.Click on the Monitoring & Reports tab, and select Notifications in the navigation frame.

2.In the email settings section enter the SMTP server information.

Mail Server Enter the address of the SMTP server. You can enter the address in IP or FQDN format.
Port

Enter the SMTP server port number that CCC will connect to. The default port value for SMTP is 25. Your SMTP server can be configured to use an alternative value.

Range: 25, 465, 587,1024 - 65535.

SMTP Username Enter a valid username that CCC can use to access the SMTP server.
SMTP Password Enter the password for the provided SMTP username.
Sender Email Set the sender email address. Ensure that email notifications from CCC are sent from a specific account.
Encryption

Use the drop down menu to select an Encryption type. The Encryption types include:

>SSL

>TLS

3.Click the Save Changes button to save the changes.

NOTE   The CCC User can click Edit Settings button to modify the changes saved during configuration of SMTP mail server.

To edit the SMTP server settings

1.Click on the Monitoring & Reports tab, and select Notifications in the navigation frame.

2.Select Edit Settings.

3.Update the SMTP server information.

4.Click Save Changes to update the SMTP configuration, or Cancel to close the editor without saving your changes.

To test the connection to the SMTP server

1.Click on the Monitoring & Reports tab, and select Notifications in the navigation frame.

NOTE   You must have a configured SMTP server to test the server connection.

2.Select Edit Settings.

3.Click the Test Connection button.

4.A dialog window displays. Click Continue to test the SMTP server configuration, or Cancel to close the dialog without testing the SMTP server configuration.

NOTE   Testing the email settings may take up to 3 minutes to complete. CCC restricts navigating away from the Notifications page during this process.

If the connection is successful a dialog window displays verifying that CCC was able to connect to the SMTP server. If the connection is not successful an error displays identifying the point of failure. The connection error can be one of the following:

Error message Cause

*Connection Failed*

 

Could not connect to mail server <host> (No such host is known)

Please verify that this information is correct and try again

The host name is incorrect. Verify you have entered the correct information

*Connection Failed*

 

Could not open connection to <host> on port <port>

Please verify that this information is correct and try again

The port number is incorrect. Verify you have entered the correct information.

*Connection Failed*

 

Incorrect username or password

Could not connect to the SMTP server. Please verify that this information is correct and try again

The SMTP username or password is incorrect. Verify you have entered the correct information.

*Connection Failed*

 

Could not connect to the SMTP server. Please verify that this information is correct and try again

No specific cause is identified.

5.Select Close to exit window.

Add Email Recipients

You must add email recipients to the CCC recipients list to send test emails and email notifications from the CCC SMTP server. The test email message is distributed to all users on the recipients list.

You can store up to 100 email addresses in the CCC recipient list. If the recipients list is full the Add button will be disabled. If you add the same email address to the list twice, the original entry will be kept and the duplicate will be ignored.

To add email recipients

1.Click on the Monitoring & Reports tab, and select Notifications in the navigation frame.

2.In the Email Settings section enter the email address of the intended email recipient in the Recipient Email Address field.

3.Press Enter or click Add.

4.Click the Save Changes button to save the changes.

NOTE   The CCC User can edit the recipients list by clicking Edit Recipients button.

NOTE   To save the SMTP changes, minimum one recipient should be added.

To send a test email message

1.Click on the Monitoring & Reports tab, and select Notifications in the navigation frame.

2.Select Send Test Email.

3.A dialog window displays. Click Continue to send the test email message, or Cancel to close the dialog without sending the test email.

NOTE   Sending the test email message may take up to 3 minutes to complete. CCC restricts navigating away from the Notifications page during this process.

NOTE   A confirmation message will display if the email message is sent successfully. If the email message fails to send a dialog will open notifying the user of a connection failure.

4.Select Close to exit the window.

Service Level Events

It consists of the events occurred at service level.

The service level settings consists of a "Moving average time period" drop down with multiple options of time periods that allows the CCC user to choose a time period for sending service alerts on crypto rate fluctuations.

NOTE   The different options available for "Moving average time period" are 30 Minutes, 1 hour, 4 hours, 8 hours, 1 day, 3 days, 7 days, 30 days, and 90 days.

NOTE   A minimum of 30 minutes data is required for a Moving average time period option to send a crypto operation fluctuation alert.

Service Level Events Notification Message
Fluctuations in crypto operations count on a partition

Thales Luna Crypto Command Center service monitoring has detected a fluctuation in the operations rate for the following service.

>Service Name: <serviceName>

>Event Time: <eventCreationTime>

>Sensitivity: <sensitivity> std

>Type: Immediate

NOTE   
1. A toggle switch is provided for setting the notification for fluctuations in crypto operations count on a partition. The CCC user can enable the toggle switch to receive notification when there is an instant fluctuation in crypto operations count on a partition.

2. A help text is provided to explain this notification setting is available with a link for service monitoring settings.

3. It includes a drop down for setting the"Fluctuations sensitivity" that can be set only when the notification is enabled.

4. The default value for "Fluctuations sensitivity" drop down box is High = (1 std).

Persistent changes in crypto operations count on a partition

Thales Luna Crypto Command Center service monitoring has detected a persistent change in the operations rate for the following service.

>Service Name: <serviceName>

>Event Time: <eventCreationTime>

>Sensitivity: <sensitivity> std

>Type: Persists for <persistTime>

NOTE   
1. A toggle switch is provided for setting the notification for persistent fluctuations in crypto operations count on a partition. The CCC user can enable the toggle switch to receive notification when there is persistent fluctuations in crypto operations count on a partition.

2. A help text is provided to explain this notification setting is available with a link for service monitoring settings.

3. It includes a drop down for setting the "Fluctuation sensitivity" and a drop down for setting the persistent change over a time period and it is labeled as "Persists for" . The CCC user can set both these settings only when the notification for persistent fluctuations in crypto operations count on a partition is enabled.

4. The default value for "Fluctuations sensitivity" in case of persistent changes is High = (1 std) and the default value for "Persists for" drop down is 10 minutes.

Service is deleted

<name_of_service> was deleted from CCC by <user>.

NOTE   A toggle switch is provided for setting the notification for service deletion. The CCC user can enable the toggle switch to receive notification when a service is deleted.

NOTE   The Fluctuation sensitivity is used to determine the calculated nth deviation of the standard deviation to specify the range of the data points in which the crypto operations can occur. Thus, 1 std, 2 std, and 3 std denotes the margins of error (or confidence intervals) at different confidence levels.

Device Level Events

It consists of the events occurred at device level.

Device Level Events Notification Message
Device is deleted <name_of_device> was deleted from CCC by <user>.
Connection to a device is lost

CCC lost its connection to <name_of_device>. Please log in to restore the connection to this device. See Troubleshooting Device Connection in the CCC documentation for more information.

NOTE   A toggle switch is provided for setting the notification for the lost device connection. The CCC user can enable the toggle switch to be notified when a device connection is lost.

Crypto Command Center Events

It consists of the crypto command center events.

Crypto Command Center Events Notification Message
Crypto Command Center is deactivated

The CCC instance hostname: <hostname> was deactivated. While in the deactivated state all CCC functionality is disabled. To resume functionality an Administrator user must restore the connection to the root-of-trust HSM. See Root of Trust Activation and Deactivation in the CCC User Guide for more information.

NOTE   The Crypto Command Center is deactivated email notification is enabled by default.

NOTE   In the event that the CCC server goes offline, and the instance becomes deactivated, the notification email will not be sent because the server is not accessible. We recommend using a server monitoring system to monitor the health of the CCC server instances.

To enable or disable event notification types

1.Click on the Monitoring & Reports tab, and select Notifications in the navigation frame.

2.Enable or disable the corresponding event notification toggle switch.