F5 520, Руководство пользователя

Страница: 40 / 61

Chapter 2
2 - 10
3. At the console, run the sw-rest command.
For an example session with this utility, see Figure 2.7.
4. When prompted, insert the administrator card(s) into the card reader
attached to the HSM you added to the system. Make sure you insert
the card correctly. See Figure 2.4 for details.
5. Return to the back of the controller. On the HSM you added to the
system, move the M-O-I switch to the O position, then press the
reset button.
6. Generate keys as usual by running genconf and then genkey. For
detailed information, see Using the key utilities to generate keys, on
page 2-11.
7. After you generate the keys, your next task depends on what type of
system you are configuring:
• If this is a single unit, after you create the the security world, you
can configure the SSL Accelerator. For more information, see
Additional configuration options, on page 2-14.
• If this is a primary unit in a redundant system, complete the tasks
described in the section Configuring the security world on the
second unit in a redundant system, on page 2-5.
# sw-rest
Key management security system data found.
Modules NOT ready for (re)programming:
Serial no. Reason why module not ready
#1 AE63-178B-1234 Initialisation link not fitted
Modules ready for (re)programming:
Serial no. Firmware version
#2 CBF9-187E-5678 1.71.11 built on Mar 21 2001 16:01:57
Please confirm - Program these modules(s) into existing KM infrastructure? yes
Programming module #2.
Using slot #0, type SmartCard.
Please insert administrator card into module #2. [enter] (fig 4)
Please enter passphrase for this card: ****** [enter]
Initialisation of module #2 complete.
Figure 2.7 An example session with the sw-rest utility