Avaya 3050-VM, Руководство пользователя, Страница: 58 / 274

when initializing card 0, the HSM-SO and HSM-USER iKeys for card 1 are not
interchangeable with the HSM-SO and HSM-USER iKeys for card 0.
• One pair of iKeys to be used for initializing HSM card 1.
- The purple HSM Security Officer iKey, embossed with "HSM-SO".
- The blue HSM User iKey, embossed with "HSM-USER".
Label these iKeys and HSM card 1 in a way so that the connection between
them is obvious. If you will use more than one ASA 310-FIPS device in the
cluster, you must also take steps to identify which pair of iKeys is used on which
HSM card on which device in the cluster.
You also need to make sure that you can easily access the USB ports on the HSM
cards, located on the rear of the ASA 310-FIPS device. When an operation requires
inserting an HSM iKey, a flashing LED will direct you to the USB port on the correct
HSM card.
( new setup, continued)
Verify that HSM-SO iKey (purple) is inserted in card 0 (with
flashing LED).
Hit enter when done.
Enter a new HSM-SO password for card 0: <define an HSM-SO password>
Re-enter to confirm:
The HSM-SO iKey has been updated.
Verify that HSM-USER iKey (blue) is inserted in card 0 (with
flashing LED).
Hit enter when done.
Enter a new HSM-USER password for card 0: <define an HSM-USER
password>
Re-enter to confirm:
The HSM-USER iKey has been updated.
Card 0 successfully initialized.
Note:
For more information about iKeys, see The Concept of iKey Authentication on
page 33.
5. Initialize HSM card 1 by inserting the second pair of HSM-SO and HSM-USER
iKeys, and by defining passwords.
Remember to take steps to label each pair of HSM-SO and HSM-USER iKeys and
the HSM card to which each set of iKeys is associated during the initialization.
(newsetup, continued)
Verify that HSM-SO iKey (purple) is inserted in card 1 (with
flashing LED).
Hit enter when done.
Initial Setup
58 User Guide April 2013
Comments? infodev@avaya.com