Sun Oracle Crypto Accelerator 6000 Board, User Manual, Page: 87 / 266

Chapter 3 Administering the Sun Crypto Accelerator 6000 Board 65
1. Start the
scamgr
utility.
2. Type
backup device
/var/tmp/ devconf.bak
An optional filename for the backup file can be supplied on the command line. If
the filename is not supplied, you are prompted for it when the command is
executed.
▼
Back Up a Master Key
This backup is used with a specific keystore, and therefore must be done by a KSO.
This backs up only the master key and other keystore specific settings, but does not
backup the keystore data. This backup is useful for having new boards join an
existing local or centralized keystore, where one board is already fully configured.
Keystores are stored on the host and encrypted in a master key. The master key for
each keystore is stored in the firmware. For another board to use an existing
keystore, the master key for that keystore must be loaded to that board using a
master key backup file. Only the keystore security officer can backup a master key.
1. Start the
scamgr
utility.
2. Type
backup master-key
/opt/backup-directory-name/master.bak .
The path name can be placed on the command line or if omitted,
scamgr
prompts
you for the path name.
Note – If the following command is executed in Multi-Admin mode, authentication
is required by multiple security officers assigned the Multi-Admin role.
3. Set a password for the backup data.
This password encrypts the master key in the backup file.
scamgr{mca
N
@
hostname
,
sec-officer
}> backup device
/var/tmp/devconf.bak
Enter a password to protect the data:
Confirm password:
Backup to /var/tmp/devconf.bak successful.
scamgr{mca
N
@
hostname
,
sec-officer
}> backup master-key
/opt/SUNWconn/mca/backups/master.bak
Enter a password to protect the data:
Confirm password:
Backup to /opt/SUNWconn/mca/backups/master.bak successful.