CHAPTER 2:
ProtectServer 3 External
Installation and Configuration
This chapter provides instructions for the installation and configuration of a ProtectServer 3 External
cryptographic services hardware security module (HSM). These steps summarize the overall procedure of
setting up a cryptographic service provider using a ProtectServer 3 External in network mode.
1.
If you wish, review the information in the
.
2.
Ensure that you have the
"ProtectServer 3 External Required Items" on page 21
3.
Mount the ProtectServer 3 External in a standard server rack and connect the smart card reader (see
"Installing the ProtectServer 3 External Hardware" on page 23
).
4.
Review the recommended
"Deployment Guidelines" on page 24
for the security of the product.
5.
Log in to the appliance for the first time and check that the system is operating correctly (see
).
6.
Configure the ProtectServer 3 External network settings (see
"Network Configuration" on page 27
).
7.
Install and configure the ProtectToolkit software (see
"ProtectToolkit 7 Software Installation" on page 68
).
8.
Configure the high-level cryptographic API to allow preferred operating modes. Some of these tasks may
include:
•
establishing a trusted channel or secure messaging system (SMS) between the API and the
ProtectServer 3+ External.
•
establishing communication between the network client and the ProtectServer 3+ External.
This section also contains the following additional information/procedures:
>
"Powering off the ProtectServer 3 External" on page 32
Thales ProtectServer 3 HSM and ProtectToolkit 7 Installation and Configuration Guide
2021-06-30 10:29:48-04:00 Copyright 2009-2021 Thales Group
16
