Yes, you are right. You have to set up all your hosts which access to CHAP enabled storage (SC).You can choose same or different CHAP secret for the fault domain 1 and 2.
I recently ran a pen test on my environment. The result was that at least one iscsi target is configured not to use authentication. The following iSCSI targets allow unauthenticated access -iqn.2002-03.com.compellent:5000d31004731231 The pen test report said to configure authentication on the target and restrict access to authorized initiators. This is to fix the vulnerability.   How do i do this?
At least one iSCSI target is configured not to use authentication.