![background image](http://html1.mh-extra.com/html/3com/3cr990/3cr990_administration-manual_3104117035.webp)
Creating a Recovery Diskette
29
Adding an Activation Key
To add a Policy Server or NIC activation key, follow the steps below.
1
In the Management Console Tools menu, select
License Manager
. The License
Summary window appears.
2
Click
Add Keys
. The Add Activation Key window appears. Enter the Policy Server or
NIC activation key and click
Add
for each activation key you want to add.
3
When you have finished adding activation keys, click
Close
.
Creating a Recovery Diskette
Communication is encrypted between EFW devices and the Policy Server, between the
Management Console and the Policy Server, and between Policy Servers. Policy Servers
identify themselves to each other, to the Management Console, and to their EFW devices
(NICs) using two public/private key pairs generated upon creation of a new EFW domain.
After installing your first policy server in an EFW domain, it is critical to make a copy of
the files named “public.key” and “server.keystore” from your installation. Save this data
indefinitely in a safe, secure location.
In the unlikely event of a disaster, such as a disk crash on all your policy server machines
and a simultaneous loss of all disk backups for these machines, this recovery package
allows you to “clone” your policy server and regain management control of your NICs.
A clean installation of the policy server cannot communicate with your EFW NICs (which is
the intended design, for security reasons).
To create a recovery diskette:
1
Insert a formatted 3.5-inch diskette into the a: drive of the computer hosting the
Policy Server.
2
Save the public.key and server.keystore files to diskette. (These files are located in
Program Files -> 3Com Corporation -> 3Com EFW.)
3
Remove and label the recovery diskette and store it in a secure location for as long as
any EFW NIC remains in the domain for this Policy Server.
NOTE:
You may also use the copy-and-paste method to add activation keys if
you have them in electronic form. To do so, highlight the activation key you
want to add and press Ctrl+c. Then, in the Add Activation Key window, press
Ctrl+v to paste the activation key in the appropriate field. Click
Add
to add the
activation key.
CAUTION:
If you do not create a recovery diskette and you lose all policy server
installation data, you will not be able to recover your NICs. They will continue to
enforce the fallback mode specified in their last EFW policy, indefinitely. These NICs
must be replaced in order to obtain a different policy.
NOTE:
The recovery process using this diskette is described in “Using the
Recovery Diskette” on page 44.