2 SafeNet Luna Remote PED Installation and Configuration
Note:
To operate in Local PED-USB mode, the PED must be connected directly to the HSM
card's USB port, and not one of the other USB connection ports on the appliance.
On power-up, the Luna PED automatically detects the active interface that it is plugged into, and defaults to the
appropriate mode after the first command is sent to it. The Luna PED waits in either Remote PED-USB mode (if the
PED is connected to a USB port) or in its Scanning state (if the PED is connected to an SCP port) until a command
is received from the HSM.
–
If the PED is directly connected to the HSM via USB port, it enters Local PED-USB mode.
–
If the PED is directly connected to the HSM via SCP port, it enters Local PED-SCP mode.
b.
For SafeNet Luna Network HSM only, log in as "admin" to the appliance (SSH session or local serial
connection).
c.
For SafeNet Luna Network HSM, issue the LunaSH command
hsm ped vector init
; or for SafeNet
PCIe HSM or SafeNet USB HSM, issue the LunaCM command
ped vector init
.
d.
When prompted, insert a blank (orange-labelled) PED key into the PED for imprinting; or re-use an already-
imprinted orange PED key.
e.
Bring the imprinted (orange) Remote PED key to your workstation, along with a Remote-capable PED.
The HSM can now be shipped to its remote locale.
You can perform other maintenance at this time, if convenient, but only the foregoing steps were required to be done
locally - all future configuration and administration can be performed remotely.
To use the Remote PED:
Once an HSM has been imprinted with a Remote PED Key (RPK) vector, you can begin administering remotely, while
also authenticating remotely from any workstation that has PED Server software and driver, a remote-capable PED,
and an orange PED Key with the correct RPK (that you just imprinted in the previous steps).
1.
On the PED power supply, slide the release catch as shown by the heavy arrow, and lift the pin protector (thinner
arrow) from the power supply:
2.
Choose a plug style that is appropriate for your country and place it in the power supply, top end first, then snap the
SafeNet Luna Network HSM Installation Guide
Release 7.0 007-013576-002 Rev. A June 2017 Copyright 2001-2017 Gemalto All rights reserved.
29
