payShield 10K Installation and User Guide
©Thales Group
Page 253
All Rights Reserved
Configure Management Port (CM)
Variant
Key Block
Online
Offline
Secure
Authorization:
Not required
Command:
CM
Function:
To configure the Management port, which is an Ethernet port used only for
management of the HSM. If connection to the host is via Ethernet then the
Ethernet host port is used for that purpose. The Management Ethernet port is
used to update the HSM's internal software, updating licensing information,
and for enabling management of a HSM via the payShield Manager.
The new settings come into effect a few seconds after the command has
completed.
It is recommended that the Host Ethernet Ports, the Management Ethernet
Port, and the Auxiliary Ethernet Port are all on different IP subnets from each
other.
Authorization:
The HSM must be in the offline or secure state to run this command.
Inputs:
•
Whether IP address is manually or automatically derived.
o
If manually derived, then the address details must be entered.
o
If using DHCP, then a network name may be entered.
•
Ethernet speed setting.
•
Enable (local or remote) payShield Manager connection?
Outputs:
None.
Errors:
None.
Example 1:
In this example, the management port has its IP address set up manually.
Offline>
CM
<Return>
Management Ethernet Interface:
IP Configuration Method? [D]HCP or [S]tatic (DHCP):
S
<Return>
Enter IP address (192.168.100.200):
192.168.200.90
<Return>
Enter subnet mask (255.255.255.0):
<Return>
Enter Default Gateway Address (192.168.200.1):
<Return>
Enter speed setting for this port:
SPEED OPTIONS:
0 Autoselect
1 10BaseT half-duplex
2 10BaseT full-duplex
3 100BaseTX half-duplex
4 100BaseTX full-duplex
5 1000BaseT half-duplex
6 1000BaseT full-duplex
Speed setting (4):
6
<Return>
Enable payShield Manager connection:
Enable or Disabled? (E):
D
<Return>
Changing the IP address, Network name, or method requires
