TSM500i and TsmWeb User Guide (PCI HSM v3) (PR-D2-1037 Rev 1.1)
| Page 17
Zazoo Limited, Co. No 9265606 | Directors: Dr S C P Belamant (French),
Mr H G Kotze, Mr P M Belamant | Company Secretary: Ms C W van Straaten
www.zazooltd.com
2.7.4
Using TSM-WEB for the first time
Enter the username (admin) and your newly assigned password and click
Login
.
Click
TSM
from the side menu, wait for the
TSM management
page to load, then click on
TSM Status Report
which will retrieve a detailed status report from the TSM500i. Read the report to identify any problems.
If the Access control mode is
BL:TAMPERED_ROLE_NONE
then it means that the TSM500i is in the tampered
state. If the HSM is tampered on arrival at the point of first deployment, it should be returned to the
Manufacturer.
If the Access control mode is
BL:ERROR
then it indicates that the TSM500i has detected a hardware fault. If the
problem is persistent after power-cycling, the unit must be returned to the Manufacturer.
TSM-WEB will automatically log the user off after a default of 10 minutes of inactivity.
This timeout period can be configured via
Preference Manager
page on TSM-WEB.
When using TSM-WEB on a TSM500i-NSS, you will always be required to enter a password.
When using a TSM500i-PCIe, a password is not required when using TSM-WEB on the host
computer, but is required if TSM-WEB is accessed from a remote computer.
Refer to sections 2.7.3 and 2.11 for details on how to setup a TSM-WEB admin password and
further user passwords.
2.7.5
Accessing TSM-WEB through a different subnet
In some instances it may be necessary to access TSM-WEB interface through a firewall or from a different
subnet. Ports 80 and 443 will have to be enabled for incoming connections on the firewall if you need to
access TSM-WEB through the firewall.
When your client computer is on a different subnet to the TSM500i-NSS needs to have a default gateway
specified. The default gateway needs a route entry that will correctly direct return network traffic from
TSM500i-NSS to the remote computer you are using.
Click
Network Settings
from the side menu, wait for the
Network settings
page to load, edit set the default
gateway to the IP address of the default gateway, where your TSM500i-NSS is installed, and
click
Change Settings
.
