F5 6900, Platform Manual

Page: 59 / 126

Configuring and Maintaining a FIPS Security Domain
Platform Guide: 6900 and 8900 6 - 3
When you are prompted for the security domain name, you must type the
security domain name you created on the first unit.
After you initialize the HSMs in both units, you can log into each unit and
run the Configuration utility.
Running the Configuration utility
After you complete the initialization of the HSMs and create a security
domain on the redundant system, you need to run the Configuration utility.
The Configuration utility provides the ability to license the system,
configure the management interface, configure failover, and create a base
network configuration. After you configure failover and run the
fipscardsync utility, every time you synchronize the configuration of the
redundant system you are synchronizing card and key information for the
FIPS security domain. The following section describes how to run the
fipscardsync utility.
For details about running the Configuration utility and creating a base
network configuration, see the
BIG-IP Quick Start Instructions . These
instructions are included in the BIG-IP Resource Kit shipped with each unit.
You can also access these instructions at
https://support.f5.com .
Running the fipscardsync utility to synchronize the
FIPS HSMs
After you set up the system with the Configuration utility, you can
synchronize the FIPS HSMs with the
fipscardsync utility. Synchronizing
the HSMs provides the ability to exchange keys. To run the fipscardsync
utility, type the following command at the console.
fipscardsync peer
After you synchronize the HSMs, you can create a traffic management
configuration.
The remainder of this chapter describes additional FIPS system maintenance
tasks, including:
• Managing FIPS keys
• Planning for system recovery
• Recovering FIPS information after a system failure