Imported Translations from Zanata

For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I8ccf11408217d9079e4597f908c0be1e3bbb7615

security-guide/source/locale/id/LC_MESSAGES/security-guide.po

@@ -9,11 +9,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Security Guide 0.0.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2017-10-22 08:32+0000\n"
+"POT-Creation-Date: 2017-10-23 07:33+0000\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2017-10-23 03:41+0000\n"
+"PO-Revision-Date: 2017-10-23 11:32+0000\n"
 "Last-Translator: suhartono <cloudsuhartono@gmail.com>\n"
 "Language: id\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
@@ -1079,6 +1079,15 @@ msgstr ""
 msgid "**no share servers mode**"
 msgstr "**no share servers mode**"
 
+msgid "**option**: 'cipher = aes-xts-plain64'"
+msgstr "**option**: 'cipher = aes-xts-plain64'"
+
+msgid "**option**: 'enabled = false'"
+msgstr "**option**: 'enabled = false'"
+
+msgid "**option**: 'key_size = 512'"
+msgstr "**option**: 'key_size = 512'"
+
 msgid "**ro**. Read-only (RO) access."
 msgstr "**ro**. Akses Read-only (RO)."
 
@@ -1242,6 +1251,19 @@ msgstr ""
 msgid ":term:`Secure shell (SSH)<secure shell (SSH)>`"
 msgstr ":term:`Secure shell (SSH)<secure shell (SSH)>`"
 
+msgid ""
+"A **real production use case** that shows the purpose of a share types and "
+"access to them is a situation when you have two back ends: cheap LVM as a "
+"public storage and expensive Ceph as a private storage. In this case you can "
+"grant access to certain tenants and make the access with ``user/group`` "
+"authentication method."
+msgstr ""
+"**real production use case** yang menunjukkan tujuan dari jenis share dan "
+"akses ke mereka adalah situasi saat Anda memiliki dua tujuan: LVM murah "
+"sebagai penyimpanan publik dan Ceph mahal sebagai penyimpanan privat. Dalam "
+"hal ini Anda dapat memberikan akses ke penyewa tertentu dan membuat akses "
+"dengan metode otentikasi  ``user/group`` ."
+
 msgid ""
 "A *bridge* is a component that exists inside more than one security domain. "
 "Any component that bridges security domains with different trust levels or "
@@ -1760,6 +1782,18 @@ msgstr ""
 "share dan mengakses share dari beberapa host oleh beberapa pengguna "
 "sekaligus."
 
+msgid ""
+"A share type is an administrator-defined \"type of service\", comprised of a "
+"tenant visible description, and a list of non-tenant-visible key-value pairs "
+"- extra specifications. The manila-scheduler uses extra specifications to "
+"make scheduling decisions, and drivers control the share creation."
+msgstr ""
+"Jenis share adalah \"type of service\" yang administrator-defined, terdiri "
+"dari deskripsi yang terlihat oleh penyewa, dan daftar non-tenant-visible key-"
+"value pairs - extra specifications. Manila-scheduler menggunakan spesifikasi "
+"tambahan untuk membuat keputusan penjadwalan, dan driver mengendalikan "
+"penciptaan share."
+
 msgid ""
 "A standard OpenStack Networking setup has up to four distinct physical data "
 "center networks:"
@@ -1808,6 +1842,13 @@ msgstr ""
 msgid "A user or group name that is used by a tenant."
 msgstr "Nama pengguna atau grup yang digunakan oleh penyewa."
 
+msgid ""
+"A volume encryption feature in OpenStack supports privacy on a per-tenant "
+"basis. As of the Kilo release, the following features are supported:"
+msgstr ""
+"Fitur enkripsi volume di OpenStack mendukung privasi secara per-penyewa. "
+"Pada rilis Kilo, fitur berikut didukung:"
+
 msgid "AES"
 msgstr "AES"
 
@@ -1902,9 +1943,15 @@ msgstr ""
 "command:`manila access-deny` dan :command:`manila access-list`, Anda dapat "
 "memberi, menolak, dan mendaftar akses ke share tertentu."
 
+msgid "Account and container custom user metadata values"
+msgstr "Account dan container custom user metadata values"
+
 msgid "Account service"
 msgstr "Layanan Account"
 
+msgid "Account, container, and object names"
+msgstr "Account, container, dan object names"
+
 msgid "Acknowledgements"
 msgstr "Ucapan Terima Kasih"
 
@@ -2212,6 +2259,17 @@ msgstr ""
 "November/019233.html <http://lists.openstack.org/pipermail/openstack-"
 "dev/2013-November/019233.html>`_."
 
+msgid "All custom user metadata names"
+msgstr "All custom user metadata names"
+
+msgid ""
+"All custom user object metadata values. For example, metadata sent using ``X-"
+"Object-Meta-`` prefixed headers with PUT or POST requests"
+msgstr ""
+"Semua nilai metadata objek pengguna khusus. Misalnya, metadata dikirim "
+"menggunakan header header ``X-Object-Meta-`` yang diawali dengan permintaan "
+"PUT atau POST"
+
 msgid "All database communications be isolated to a management network"
 msgstr "Semua komunikasi database diisolasi ke jaringan manajemen"
 
@@ -2441,6 +2499,23 @@ msgstr ""
 "Metode otentikasi bergantung pada share driver dan layanan keamanan yang "
 "Anda konfigurasikan dan gunakan."
 
+msgid ""
+"An administrator can create and delete share types, and also manage extra "
+"specifications that give them meaning inside the Shared File Systems "
+"service. Tenants can list the share types and can use them to create new "
+"shares. For details of managing the share types, see `Shared File Systems "
+"API <https://developer.openstack.org/api-ref-share-v2.html#share-type>`_ and "
+"`Share types managing <https://docs.openstack.org/admin-guide/"
+"shared_file_systems_share_types.html>`_ documentation."
+msgstr ""
+"Administrator dapat membuat dan menghapus jenis share, dan juga mengelola "
+"spesifikasi tambahan yang memberi arti di dalam layanan Shared File Systems. "
+"Penyewa dapat mencantumkan jenis share dan dapat menggunakannya untuk "
+"membuat share baru. Untuk detail mengelola jenis share, lihat `Shared File "
+"Systems API <https://developer.openstack.org/api-ref-share-v2.html#share-"
+"type>`_ dan dokumentasi `Share types managing <https://docs.openstack.org/"
+"admin-guide/shared_file_systems_share_types.html>`_."
+
 msgid ""
 "An administrator rather than a share driver manages the bare metal storage "
 "with some net interface insteadof the presence of the share servers."
@@ -2477,6 +2552,20 @@ msgstr ""
 "Terowongan terenkripsi dibuat antara proses libvirtd pada host sumber dan "
 "tujuan."
 
+msgid ""
+"An ephemeral disk encryption feature addresses data privacy. The ephemeral "
+"disk is a temporary work space used by the virtual host operating system. "
+"Without encryption, sensitive user information could be accessed on this "
+"disk, and vestigial information could remain after the disk is unmounted. As "
+"of the Kilo release, the following ephemeral disk encryption features are "
+"supported:"
+msgstr ""
+"Fitur enkripsi disk fana (singkat) membahas privasi data. Disk fana adalah "
+"ruang kerja sementara yang digunakan oleh sistem operasi virtual host. Tanpa "
+"enkripsi, informasi pengguna yang sensitif dapat diakses pada disk ini, dan "
+"informasi sisa bisa tetap ada setelah disk tidak terpasang. Pada rilis Kilo, "
+"fitur enkripsi disk darurat berikut didukung:"
+
 msgid ""
 "An example diagram from the OpenStack Object Storage Administration Guide "
 "(2013)"
@@ -2611,6 +2700,13 @@ msgstr ""
 msgid "Any data assets in transit across that interface"
 msgstr "Aset data apa pun yang transit di antarmuka itu"
 
+msgid ""
+"Any data or metadata not included in the list above are not encrypted, "
+"including:"
+msgstr ""
+"Data atau metadata yang tidak termasuk dalam daftar di atas tidak "
+"dienkripsi, termasuk:"
+
 msgid ""
 "Any domains without a domain-specific configuration file will use options in "
 "the primary ``keystone.conf`` file."
@@ -2847,6 +2943,17 @@ msgstr ""
 "mesin virtual tamu menggunakan protokol Simple Protocol for Independent "
 "Computing Environments (SPICE)."
 
+msgid ""
+"As an example, being an administrator user in admin tenant, you can create a "
+"private share type named ``my_type`` and see it in the list. In the console "
+"examples the logging in and out is omitted, and environment variables are "
+"provided to show the current logged in user."
+msgstr ""
+"Sebagai contoh, sebagai pengguna administrator di penyewa admin, Anda dapat "
+"membuat jenis share privat bernama ``my_type`` dan melihatnya dalam daftar. "
+"Dalam contoh konsol, log in dan out dihilangkan, dan variabel lingkungan "
+"disediakan untuk menunjukkan pengguna yang masuk saat ini."
+
 msgid ""
 "As is the case for VNC, at this time we recommend using SPICE from the "
 "management network in addition to limiting use to few individuals."
@@ -3353,6 +3460,9 @@ msgstr "Block Storage"
 msgid "Block Storage (optional)"
 msgstr "Block Storage (optional)"
 
+msgid "Block Storage performance and backends"
+msgstr "Performa Block Storage dan backend"
+
 msgid "Booleans"
 msgstr "Booleans"
 
@@ -3445,6 +3555,19 @@ msgstr ""
 "database auditing dan mencabut hak akses dari sebuah layanan dan prosesnya "
 "ke database sangat sulit dilakukan."
 
+msgid ""
+"By default, share types are created as public. While creating a share type, "
+"use ``--is_public`` parameter set to ``False`` to make your share type "
+"private which will prevent other tenants from seeing it in a list of share "
+"types and creating new shares with it. On the other hand,  *public* share "
+"types are available to every tenant in a cloud."
+msgstr ""
+"Secara default, jenis share dibuat sebagai publik. Saat membuat jenis share, "
+"gunakan parameter ``--is_public`` yang disetel ke ``False`` untuk menjadikan "
+"tipe share Anda pribadi yang akan mencegah penyewa lain melihatnya di daftar "
+"jenis share dan membuat share baru dengannya. Di sisi lain,  jenis share "
+"*public* tersedia untuk setiap penyewa di awan."
+
 msgid ""
 "By default, the Shared File Systems API service listens only on the port "
 "``8786`` with ``tcp6`` type that supports both IPv4 and IPv6."
@@ -4648,6 +4771,22 @@ msgstr ""
 "Membuat akun pengguna database unik per endpoint layanan OpenStack "
 "(diilustrasikan di bawah)"
 
+msgid ""
+"Creation and usage of encrypted LVM ephemeral disks (note: At this time "
+"OpenStack Compute service only supports encrypting ephemeral disks in the "
+"LVM format)"
+msgstr ""
+"Penciptaan dan penggunaan disk fana LVM yang dienkripsi (catatan: Saat ini "
+"layanan OpenStack Compute hanya mendukung penyandian disk fana dalam format "
+"LVM)"
+
+msgid ""
+"Creation and usage of encrypted volume types, initiated through the "
+"dashboard or a command line interface"
+msgstr ""
+"Penciptaan dan penggunaan tipe volume terenkripsi, dimulai melalui dasbor "
+"atau antarmuka command line."
+
 msgid "Critical"
 msgstr "Critical"
 
@@ -4751,6 +4890,15 @@ msgstr "DSA"
 msgid "Dashboard"
 msgstr "Dasbor"
 
+msgid ""
+"Dashboard indication of volume encryption status. Includes indication that a "
+"volume is encrypted, and includes the encryption parameters such as "
+"algorithm and key size"
+msgstr ""
+"Indikasi status enkripsi volume Dashboard. Termasuk indikasi bahwa volume "
+"dienkripsi, dan termasuk parameter enkripsi seperti algoritma dan ukuran "
+"kunci"
+
 msgid ""
 "Dashboard provides tools for developers to avoid creating XSS "
 "vulnerabilities, but they only work if developers use them correctly. Audit "
@@ -4844,6 +4992,9 @@ msgstr "Aset data harus mencakup pernyataan di mana aset tersebut bertahan."
 msgid "Data classification"
 msgstr "Klasifikasi Data"
 
+msgid "Data encryption"
+msgstr "Enkripsi data"
+
 msgid "Data formats and transformations"
 msgstr "Format dan transformasi data"
 
@@ -5465,6 +5616,13 @@ msgstr ""
 msgid "Enable ``OS-FEDERATION`` extension:"
 msgstr "Aktifkan ekstensi ``OS-FEDERATION``:"
 
+msgid ""
+"Enable encryption and select parameters such as encryption algorithm and key "
+"size"
+msgstr ""
+"Aktifkan enkripsi dan pilih parameter seperti algoritma enkripsi dan ukuran "
+"kunci"
+
 msgid "Enable the Identity service virtual host:"
 msgstr "Aktifkan virtual host layanan Identity:"
 
@@ -5480,6 +5638,20 @@ msgstr "Migrasi langsung terenkripsi"
 msgid "Encryption / decryption"
 msgstr "Enkripsi / Dekripsi"
 
+msgid ""
+"Encryption of data at rest is implemented by middleware that may be included "
+"in the proxy server WSGI pipeline. The feature is internal to a swift "
+"cluster and not exposed through the API. Clients are unaware that data is "
+"encrypted by this feature internally to the swift service; internally "
+"encrypted data should never be returned to clients through the swift API."
+msgstr ""
+"Enkripsi data saat istirahat diimplementasikan oleh middleware yang mungkin "
+"disertakan dalam pipeline WSGI server proxy. Fitur ini bersifat internal ke "
+"cluster cepat dan tidak terpapar melalui API. Klien tidak menyadari bahwa "
+"data dienkripsi oleh fitur ini secara internal ke layanan cepat; Data yang "
+"dienkripsi secara internal tidak boleh dikembalikan ke klien melalui API "
+"cepat."
+
 msgid "End entity"
 msgstr "End entity"
 
@@ -5581,6 +5753,15 @@ msgstr ""
 msgid "Ephemeral disk encryption"
 msgstr "Enkripsi disk sesaat"
 
+msgid ""
+"Ephemeral disk encryption is supported by back-end key storage for enhanced "
+"security (for example, an HSM or a KMIP server can be used as a barbican "
+"back-end secret store)"
+msgstr ""
+"Enkripsi disk ephemeral didukung oleh penyimpanan kunci back-end untuk "
+"keamanan yang ditingkatkan (misalnya, server HSM atau KMIP dapat digunakan "
+"sebagai penyimpanan  rahasia back-end barbican)"
+
 msgid ""
 "Eric Lopez is Senior Solution Architect at VMware's Networking and Security "
 "Business Unit where he helps customers implement OpenStack and VMware NSX "
@@ -6194,6 +6375,17 @@ msgstr ""
 msgid "For more information on RabbitMQ SSL configuration see:"
 msgstr "Untuk informasi lebih lanjut tentang konfigurasi SSL RabbitMQ lihat:"
 
+msgid ""
+"For more information on the deployment, operation, or implementation of "
+"Object Storage encryption, see the swift Developer Documentation on `Object "
+"Encryption <https://docs.openstack.org/swift/latest/overview_encryption."
+"html>`_."
+msgstr ""
+"Untuk informasi lebih lanjut tentang penerapan, pengoperasian, atau "
+"penerapan enkripsi Obyek Penyimpanan, lihat Dokumentasi Pengembang yang "
+"cepat pada  `Object Encryption <https://docs.openstack.org/swift/latest/"
+"overview_encryption.html>`_."
+
 msgid ""
 "For more information on the rootwrap project, please see the official "
 "documentation: `https://wiki.openstack.org/wiki/Rootwrap <https://wiki."
@@ -7895,6 +8087,9 @@ msgstr ""
 "memecahkan enkripsi yang digunakan, namun mampu melihat dan memanipulasi "
 "pesan saat diproses oleh sistem."
 
+msgid "Interface with the Key management service through a secure wrapper"
+msgstr "Interface dengan layanan manajemen Key melalui pembungkus yang aman"
+
 msgid "Interfaces"
 msgstr "Antarmuka"
 
@@ -8293,6 +8488,13 @@ msgstr ""
 msgid "Key length"
 msgstr "Key Length (panjang kunci)"
 
+msgid ""
+"Key management service will support data isolation by providing ephemeral "
+"disk encryption keys on a per-tenant basis"
+msgstr ""
+"Layanan manajemen Key akan mendukung isolasi data dengan menyediakan kunci "
+"enkripsi disk sesaat pada basis per-penyewa"
+
 msgid "Keystone"
 msgstr "Keystone"
 
@@ -9001,6 +9203,9 @@ msgstr "Model jaringan dan keamanan"
 msgid "Network connectivity of physical servers"
 msgstr "Konektivitas jaringan server fisik"
 
+msgid "Network data"
+msgstr "Network data"
+
 msgid ""
 "Network intrusion detection tools complement the host-based tools. OpenStack "
 "doesn't have a specific network IDS built-in, but OpenStack Networking "
@@ -9215,6 +9420,21 @@ msgstr ""
 "OpenStack. File ``/etc/keystone/keystone.conf`` memetakan atribut LDAP ke "
 "atribut Identitas."
 
+msgid ""
+"Note that there may be a key size limitation from the backend key manager "
+"that could require the use of 'key_size = 256', which would only provide an "
+"AES key size of 128-bits. XTS requires it's own \"tweak key\" in addition to "
+"the encryption key AES requires. This is typically expressed as a single "
+"large key. In this case, using the 512-bit setting, 256 bits will be used by "
+"AES and 256 bits by XTS. (see NIST_)"
+msgstr ""
+"Perhatikan bahwa mungkin ada batasan ukuran kunci dari manajer kunci backend "
+"yang memerlukan penggunaan 'key_size = 256', yang hanya akan memberikan "
+"ukuran kunci AES 128-bit. XTS membutuhkan \"tweak key\" itu sendiri selain "
+"kunci enkripsi yang dibutuhkan AES. Hal ini biasanya dinyatakan sebagai satu "
+"kunci besar. Dalam kasus ini, dengan menggunakan pengaturan 512-bit, 256 bit "
+"akan digunakan oleh AES dan 256 bit oleh XTS. (lihat NIST_)"
+
 msgid ""
 "Note this command only adds the ability to communicate over SSL and is non-"
 "exclusive. Other access methods that may allow unencrypted transport should "
@@ -9301,6 +9521,9 @@ msgstr ""
 "Sekarang kita bisa me-mount share di host dengan alamat IP ``10.254.0.4`` "
 "dan memiliki permission ``rw`` untuk share:"
 
+msgid "Object Content-Type values"
+msgstr "Object Content-Type values"
+
 msgid "Object Reuse"
 msgstr "Object Reuse"
 
@@ -9310,6 +9533,17 @@ msgstr "Object Service"
 msgid "Object Storage"
 msgstr "Object Storage"
 
+msgid ""
+"Object Storage (swift) supports the optional encryption of object data at "
+"rest on storage nodes. The encryption of object data is intended to mitigate "
+"the risk of users’ data being read if an unauthorized party were to gain "
+"physical access to a disk."
+msgstr ""
+"Object Storage (swift) mendukung enkripsi opsional data objek saat istirahat "
+"pada node penyimpanan. Enkripsi data objek dimaksudkan untuk mengurangi "
+"risiko data pengguna dibaca jika pihak yang tidak berwenang memperoleh akses "
+"fisik ke disk."
+
 msgid "Object Storage account terminology"
 msgstr "Terminologi akun Object Storage"
 
@@ -9343,6 +9577,9 @@ msgstr ""
 msgid "Object Storage network architecture with a management node (OSAM)"
 msgstr "Object Storage network architecture with a management node (OSAM)"
 
+msgid "Object Storage objects"
+msgstr "Object Storage objects"
+
 msgid ""
 "Object Storage uses a WSGI model to provide for a middleware capability that "
 "not only provides general extensibility, but is also used for authentication "
@@ -9359,6 +9596,10 @@ msgstr ""
 "API atau sertifikat x.509 sisi klien. Penyedia kustom dapat diintegrasikan "
 "dalam menggunakan middleware kustom."
 
+msgid ""
+"Object content. For example, the content of an object PUT request’s body"
+msgstr "Isi objek. Misalnya, isi dari objek PUT request body"
+
 msgid ""
 "Object security should focus on access control and encryption of data in "
 "transit and at rest. Other concerns may relate to system abuse, illegal or "
@@ -9372,6 +9613,9 @@ msgstr ""
 msgid "Object service"
 msgstr "Layanan Object"
 
+msgid "Object size"
+msgstr "Object size"
+
 msgid "Objectives"
 msgstr "Tujuan"
 
@@ -9393,6 +9637,17 @@ msgstr ""
 "aman dan mudah diakses untuk memverifikasi sidik jari utama host SSH (SSH "
 "host key fingerprint) menjadi rentan untuk penyalahgunaan dan eksploitasi."
 
+msgid ""
+"Often, data encryption relates positively to the ability to reliably destroy "
+"tenant and per-instance data, simply by throwing away the keys. It should be "
+"noted that in doing so, it becomes of great importance to destroy those keys "
+"in a reliable and secure manner."
+msgstr ""
+"Seringkali, enkripsi data berhubungan secara positif dengan kemampuan untuk "
+"menghancurkan data penyewa dan per-instance dengan mudah, cukup dengan "
+"membuang kunci. Perlu dicatat bahwa dengan berbuat demikian, menjadi sangat "
+"penting untuk menghancurkan kunci tersebut dengan cara yang andal dan aman."
+
 msgid ""
 "On Linux virtual machines, the application profile above can be used in "
 "conjunction with a tool like `audit2allow <http://wiki.centos.org/HowTos/"
@@ -10142,6 +10397,20 @@ msgstr ""
 "gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf> `__ untuk "
 "mengenalkan berbagai jenis awan ini karena mereka berlaku untuk OpenStack."
 
+msgid ""
+"OpenStack is designed to support multitenancy and those tenants will most "
+"probably have different data requirements. As a cloud builder or operator, "
+"you must ensure your OpenStack environment addresses data privacy concerns "
+"and regulations. In this chapter we will address data residency and disposal "
+"as it pertains to OpenStack implementations."
+msgstr ""
+"OpenStack dirancang untuk mendukung multitenancy dan tenant (penyewa) "
+"tersebut kemungkinan besar memiliki persyaratan data yang berbeda. Sebagai "
+"pembangun atau operator awan, Anda harus memastikan lingkungan OpenStack "
+"Anda menangani masalah dan persyaratan privasi data. Dalam bab ini kita akan "
+"membahas residensi data dan pembuangan karena berkaitan dengan implementasi "
+"OpenStack."
+
 msgid ""
 "OpenStack is innovative in many ways however the process used to audit an "
 "OpenStack deployment is fairly common. Auditors will evaluate a process by "
@@ -10418,6 +10687,9 @@ msgstr ""
 "dirusak. Dalam semua kasus, kemampuan kriptografi ini memerlukan semacam "
 "*key material* agar bisa beroperasi."
 
+msgid "Opportunities to encrypt data for users are present:"
+msgstr "Kesempatan mengenkripsi data untuk pengguna sekarang:"
+
 msgid "Option ROM code"
 msgstr "Opsi kode ROM"
 
@@ -10653,6 +10925,21 @@ msgstr "Password di File Config"
 msgid "Paste and middleware"
 msgstr "Tempel dan middleware"
 
+msgid ""
+"Per-instance or per-object encryption is preferable over, in descending "
+"order, per-project, per-tenant, per-host, and per-cloud aggregations. This "
+"recommendation is inverse to the complexity and difficulty of "
+"implementation. Presently, in some projects it is difficult or impossible to "
+"implement encryption as loosely granular as even per-tenant. We recommend "
+"implementors make a best-effort in encrypting tenant data."
+msgstr ""
+"Enkripsi per-instance atau per-object lebih disukai, dalam urutan menurun, "
+"agregat per-project, per-tenant, per-host, dan per-cloud. Rekomendasi ini "
+"bertentangan dengan kompleksitas dan kesulitan pelaksanaannya. Saat ini, "
+"dalam beberapa proyek sulit atau tidak mungkin menerapkan enkripsi seperti "
+"granulasi longgar bahkan  per-tenant. Sebaiknya pelaksana melakukan upaya "
+"terbaik dalam mengenkripsi data penyewa."
+
 msgid "Perfect forward secrecy"
 msgstr "Kerahasiaan maju yang sempurna"
 
@@ -12004,6 +12291,19 @@ msgstr ""
 msgid "Share servers mode"
 msgstr "Share servers mode"
 
+msgid "Share type access control"
+msgstr "Bagikan jenis kontrol akses"
+
+msgid ""
+"Share types can be created as *public* and *private*. This is the level of "
+"visibility for the share type that defines whether other tenants can or "
+"cannot see it in a share types list and use it to create a new share."
+msgstr ""
+"Jenis share dapat dibuat sebagai *public* dan *private*. Ini adalah tingkat "
+"visibilitas untuk tipe share yang menentukan apakah penyewa lain dapat atau "
+"tidak dapat melihatnya dalam daftar jenis share dan menggunakannya untuk "
+"membuat share baru."
+
 msgid "Shared File Systems"
 msgstr "Shared File Systems (sistem file bersama)"
 
@@ -12175,6 +12475,16 @@ msgstr "Simple Protocol for Independent Computing Environments (SPICE)"
 msgid "Simple crypto plugin"
 msgstr "Plugin kripto sederhana"
 
+msgid ""
+"Since share types due to their extra specifications help to filter or choose "
+"back ends before users create a share, using access to the share types you "
+"can limit clients in choice of specific back ends."
+msgstr ""
+"Karena jenis share menggunakan spesifikasi tambahan mereka membantu "
+"menyaring atau memilih kembali sebelum pengguna membuat share, dengan "
+"menggunakan akses ke jenis share Anda dapat membatasi klien dalam pilihan "
+"tujuan akhir tertentu."
+
 msgid ""
 "Since the HDFS shared file system protocol uses NFS access it also can be "
 "configured to authenticate via IP address."
@@ -12343,6 +12653,9 @@ msgstr ""
 "Komponen pendukung, seperti load-balancers, reverse proxy, DNS atau layanan "
 "DHCP"
 
+msgid "Supports encrypted backups if the original volume is encrypted"
+msgstr "Mendukung backup terenkripsi jika volume asli dienkripsi"
+
 msgid "Swift"
 msgstr "Swift"
 
@@ -12370,6 +12683,9 @@ msgstr "Persyaratan dokumentasi sistem"
 msgid "System inventory"
 msgstr "Inventarisasi sistem"
 
+msgid "System metadata"
+msgstr "System metadata"
+
 msgid "System roles and types"
 msgstr "Peran dan tipe sistem"
 
@@ -12433,6 +12749,9 @@ msgstr ""
 "bagian ini `The Auth System <https://docs.openstack.org/swift/latest/"
 "overview_auth.html>`_ dari dokumentasi Object Storage (swift)."
 
+msgid "Tenant data privacy"
+msgstr "Privasi data penyewa"
+
 msgid "Tenants"
 msgstr "Tenants"
 
@@ -13696,6 +14015,16 @@ msgstr ""
 "Shared File Systems, Anda dapat membuat sistem file bersama dan mengelola "
 "propertinya, seperti visibilitas, aksesibilitas dan kuota penggunaan."
 
+msgid ""
+"The Shared File Systems service allows an administrator to grant or deny "
+"access to the *private* share types for tenants. It is also possible to get "
+"information about access for a specified private share type."
+msgstr ""
+"Layanan Shared File Systems memungkinkan administrator untuk memberikan atau "
+"menolak akses ke tipe share *private* untuk penyewa. Hal ini juga "
+"memungkinkan untuk mendapatkan informasi tentang akses untuk jenis share "
+"pribadi tertentu."
+
 msgid ""
 "The Shared File Systems service allows to grant or deny access to different "
 "entities of the service for other clients."
@@ -14054,6 +14383,13 @@ msgstr ""
 "aset Identity yang paling berharga, yang bisa digunakan untuk mendapatkan "
 "hak istimewa admin awan."
 
+msgid ""
+"The administrator can grant access to the private share type for the demo "
+"tenant with the tenant ID equal to df29a37db5ae48d19b349fe947fada46:"
+msgstr ""
+"Administrator dapat memberikan akses ke jenis share privat untuk penyewa "
+"demo dengan ID penyewa sama dengan df29a37db5ae48d19b349fe947fada46:"
+
 msgid ""
 "The amount of information that can be gathered about a system and its users "
 "should be minimized."
@@ -14207,6 +14543,13 @@ msgid ""
 msgstr ""
 "Komponen Object Storage dikelompokkan ke dalam kelompok primer berikut:"
 
+msgid ""
+"The compute configuration, ``nova.conf``, has the following default "
+"parameters within the \"[ephemeral_storage_encryption]\" section"
+msgstr ""
+"Konfigurasi komputasi, ``nova.conf``, memiliki parameter default berikut di "
+"bagian \"[ephemeral_storage_encryption]\""
+
 msgid ""
 "The compute nodes are the least trusted of the services in OpenStack because "
 "they host tenant instances. The ``nova-conductor`` service has been "
@@ -14484,6 +14827,9 @@ msgstr ""
 "tidak ada dalam :term:`CRL` dan juga harus dapat memverifikasi tanggal "
 "kadaluarsa sertifikat."
 
+msgid "The entity tag (ETag) of objects that have non-zero content"
+msgstr "The entity tag (ETag) dari objek yang memiliki konten tidak nol"
+
 msgid ""
 "The ephemeral disk encryption feature addresses data privacy. The ephemeral "
 "disk is a temporary work space used by the virtual host operating system. "
@@ -14556,6 +14902,9 @@ msgstr ""
 "Pilihan kompilator berikut direkomendasikan untuk GCC saat mengkompilasi "
 "QEMU:"
 
+msgid "The following data are encrypted while at rest in swift:"
+msgstr "Data berikut dienkripsi saat istirahat dengan cepat:"
+
 msgid ""
 "The following diagram presents a conceptual view of how the Data processing "
 "service fits into the greater OpenStack ecosystem."
@@ -14663,6 +15012,23 @@ msgstr ""
 "tinjauan keamanan atas sebuah proyek selesai, berikut ini diketahui dan "
 "didokumentasikan:"
 
+msgid ""
+"The importance of encrypting data on behalf of tenants is largely related to "
+"the risk assumed by a provider that an attacker could access tenant data. "
+"There may be requirements here in government, as well as requirements per-"
+"policy, in private contract, or even in case law in regard to private "
+"contracts for public cloud providers. It is recommended that a risk "
+"assessment and legal consul advised before choosing tenant encryption "
+"policies."
+msgstr ""
+"Pentingnya mengenkripsi data atas nama penyewa sebagian besar terkait dengan "
+"risiko yang diasumsikan oleh penyedia bahwa penyerang dapat mengakses data "
+"penyewa. Mungkin ada persyaratan di sini di pemerintahan, serta persyaratan "
+"per-kebijakan, kontrak pribadi, atau bahkan dalam kasus hukum berkaitan "
+"dengan kontrak pribadi untuk penyedia awan publik. Dianjurkan agar penilaian "
+"risiko dan konsul hukum disarankan sebelum memilih kebijakan enkripsi "
+"penyewa."
+
 msgid ""
 "The information security management system preserves the confidentiality, "
 "integrity, and availability of information by applying a risk management "
@@ -14875,6 +15241,19 @@ msgstr ""
 "gunakan nilai wildcard. Jika tidak, setiap protokol Federated akan ditangani "
 "oleh Shibboleth."
 
+msgid ""
+"The option exists for implementers to encrypt tenant data wherever it is "
+"stored on disk or transported over a network, such as the OpenStack volume "
+"encryption feature described below. This is above and beyond the general "
+"recommendation that users encrypt their own data before sending it to their "
+"provider."
+msgstr ""
+"Pilihan ada bagi pelaksana untuk mengenkripsi data penyewa dimanapun "
+"disimpan di disk atau diangkut melalui jaringan, seperti fitur enkripsi "
+"volume OpenStack yang dijelaskan di bawah ini. Ini di atas dan di luar "
+"rekomendasi umum bahwa pengguna mengenkripsi data mereka sendiri sebelum "
+"mengirimkannya ke penyedia mereka."
+
 msgid ""
 "The parameter ``max_request_body_size`` defines the maximum body size per "
 "request in bytes. If the maximum size is not defined, the attacker could "
@@ -15731,6 +16110,22 @@ msgstr "Contoh ini menunjukkan diagram arsitektur barbican:"
 msgid "This example shows the sVirt category identifier:"
 msgstr "Contoh ini menunjukkan pengenal kategori sVirt:"
 
+msgid ""
+"This field sets the cipher and mode used to encrypt ephemeral storage. AES-"
+"XTS is recommended by NIST_ specifically for disk storage, and the name is "
+"shorthand for AES encryption using the XTS encryption mode. Available "
+"ciphers depend on kernel support. At the command line, type 'cyrptsetup "
+"benchmark' to determine the available options (and see benchmark results), "
+"or go to */proc/crypto*"
+msgstr ""
+"Bidang ini mengatur cipher dan mode yang digunakan untuk mengenkripsi "
+"penyimpanan singkat. AES-XTS direkomendasikan oleh NIST_ specifically untuk "
+"penyimpanan disk, dan namanya adalah singkatan untuk enkripsi AES "
+"menggunakan mode enkripsi XTS. Tersedia ciphers yang bergantung pada "
+"dukungan kernel. Pada command line, ketik 'cyrptsetup benchmark' untuk "
+"menentukan pilihan yang tersedia (dan lihat hasil benchmark), atau masuk ke "
+"*/proc/crypto*."
+
 msgid ""
 "This filter will create an instance based on external details such as in a "
 "specific IP range, across availability zones, or on the same host as another "
@@ -16051,6 +16446,13 @@ msgstr ""
 "dimiliki masing-masing peran, walaupun, pada kenyataannya, kami memahami "
 "bahwa berbagai peran seringkali dipegang oleh individu yang sama."
 
+msgid ""
+"Thus now users in demo tenant can see the private share type and use it in "
+"the share creation:"
+msgstr ""
+"Jadi sekarang pengguna di penyewa demo dapat melihat jenis share pribadi dan "
+"menggunakannya dalam pembuatan share:"
+
 msgid ""
 "Thus, as an administrator, you can configure a back end to use specific "
 "authentication service via network and it will store users. The "
@@ -16095,6 +16497,13 @@ msgstr ""
 "Identifiable Information (PII)*.\" Panduan ini melangkah melalui proses "
 "perlindungan:"
 
+msgid ""
+"To deny access for a specified project, use :command:`manila type-access-"
+"remove <share_type> <project_id>` command."
+msgstr ""
+"Untuk menolak akses untuk proyek tertentu, gunakan perintah :command:`manila "
+"type-access-remove <share_type> <project_id>` ."
+
 msgid ""
 "To disable the nova-conductor, place the following into your ``nova.conf`` "
 "file (on your compute hosts):"
@@ -16226,6 +16635,10 @@ msgstr ""
 "proyek, menugaskan pengguna ke penyewa / proyek, dan menentukan kuota sumber "
 "daya berdasarkan per penyewa / proyek."
 
+msgid "To use ephemeral disk encryption, set **option**: 'enabled = true'"
+msgstr ""
+"Untuk menggunakan enkripsi disk fana, setel **option**: 'enabled = true'"
+
 msgid ""
 "To utilize Federation, create the following in the Identity service: "
 "Identity Provider, Mapping, Protocol."
@@ -16813,9 +17226,21 @@ msgstr "Virtual hardware (QEMU)"
 msgid "Volume Wiping"
 msgstr "Volume Wiping"
 
+msgid "Volume data contained within iSCSI packets is encrypted"
+msgstr "Data volume yang terkandung dalam paket iSCSI dienkripsi"
+
 msgid "Volume encryption"
 msgstr "Enkripsi volume"
 
+msgid ""
+"Volume encryption is supported by back-end key storage for enhanced security "
+"(for example, a Hardware Security Module (HSM) or a KMIP server can be used "
+"as a barbican back-end secret store)"
+msgstr ""
+"Enkripsi volume didukung oleh penyimpanan kunci back-end untuk keamanan yang "
+"ditingkatkan (misalnya, Hardware Security Module (HSM) atau server KMIP "
+"dapat digunakan sebagai penyimpanan rahasia back-end barbican)"
+
 msgid "Vulnerability awareness"
 msgstr "Kesadaran akan kerentanan"
 
@@ -17846,6 +18271,15 @@ msgstr ""
 "Dengan driver yang mendukung otentikasi protokol NFS melalui alamat IP "
 "adalah satu-satunya opsi yang didukung."
 
+msgid ""
+"With the Key management service, when an ephemeral disk is no longer needed, "
+"simply deleting the key may take the place of overwriting the ephemeral disk "
+"storage area"
+msgstr ""
+"Dengan layanan manajemen Key, ketika disk fana tidak lagi dibutuhkan, cukup "
+"hapus kunci yang mungkin menggantikan penimpaan area penyimpanan disk "
+"sementara"
+
 msgid ""
 "With unique kernel-level architecture and National Security Agency (NSA) "
 "developed security mechanisms, KVM provides foundational isolation "
@@ -18474,6 +18908,13 @@ msgstr "``VLAN``"
 msgid "``VXLAN``"
 msgstr "``VXLAN``"
 
+msgid ""
+"``demo`` user in ``demo`` tenant can list the types and the private share "
+"type named ``my_type`` is not visible for him."
+msgstr ""
+"Pengguna ``demo`` di penyewaan ``demo`` dapat mendaftar jenis dan jenis "
+"share privat bernama ``my_type`` tidak terlihat untuknya."
+
 msgid ""
 "``firewall_driver`` must be set to ``nova.virt.firewall.NoopFirewallDriver`` "
 "so that nova-compute does not perform iptables-based filtering itself."