F5 520, Manual

Page: 37 / 61

Configuring the FIPS 140 Hardware
F5 Networks, Inc., Platform Guide 2 - 7
Configuring multiple FIPS 140 hardware security modules in a
single 520/540
To achieve a faster transaction per second (TPS) rate in a controller, you can
install two hardware security modules (HSMs). You may do this in two
ways:
• Install two security modules and create the security world at the same
time.
• Add a second security module to and existing security world.
Installing two security modules and creating the security world at the same
time
This section describes how to install two security modules and create the
security world at the same time in a single 520/540. This procedure assumes
that you have not established a security world.
Note
Connect a card reader to each of the security modules for this
configuration.
To install both security modules and create the security
world at the same time
To bring two HSMs installed in one 520/540 into the security world, you
need a paper clip or other fine-tipped implement and at least two smart
cards.
1. On each HSM, locate the switch labeled M-O-I (Figure 2.1). Using
a paper clip or your fingernail, move the switch on each HSM to the
I position.
# sw-rest
Key management security system data found.
Modules ready for (re)programming:
Serial no. Firmware version
#1 CBF9-187E-D9ED 1.71.11 built on Mar 21 2001 16:01:57
Please confirm - Program these module(s) into existing KM infrastructure ? yes
Programming module #1. [enter]
Using slot #0, type SmartCard.
Please insert administrator card in module #1. [enter]
Initialisation of module #1 complete.
Figure 2.5 An example session with the sw-rest utility