Use the following checklist when planning the security configuration for a production, distributed AIStor Server. Required steps Identity and access management Step Details Group policies Define group policies either on MinIO AIStor or the selected 3rd party Identity Provider (LDAP/Active Directory or OpenID Connect) Individual access policies Define individual access policies on MinIO AIStor or the selected 3rd party Identity Provider Identity provider configuration Configure MinIO AIStor to use the selected 3rd party Identity Provider Firewall access Port Details S3 API listen port Grant firewall access for TCP traffic to the Object Store S3 API Listen Port (Default: 9000) Console port Grant firewall access for TCP traffic to the AIStor Server console port (Recommended Default: 9443) Encryption-at-rest MinIO AIStor supports Server-Side Encryption using MinIO KMS:

Use the following checklist when planning the security configuration for a production, distributed AIStor Server. Required steps Identity and access management Step Details Group policies Define group policies either on MinIO AIStor or the selected 3rd party Identity Provider (LDAP/Active Directory or OpenID Connect) Individual access policies Define individual access policies on MinIO AIStor or the selected 3rd party Identity Provider Identity provider configuration Configure MinIO AIStor to use the selected 3rd party Identity Provider Firewall access Port Details S3 API listen port Grant firewall access for TCP traffic to the Object Store S3 API Listen Port (Default: 9000) Console port Grant firewall access for TCP traffic to the AIStor Server console port (Recommended Default: 9443) Encryption-at-rest MinIO AIStor supports Server-Side Encryption using MinIO KMS: