Sun Oracle Crypto Accelerator 6000 Board, Руководство пользователя

Страница: 105 / 266

Chapter 3 Administering the Sun Crypto Accelerator 6000 Board 83
■ load uwk
■
set fsmode
To initiate the direct administration interface, a security officer must press the Enter
key on the direct input device and log in to the system. The following example
shows a security officer logging in to the system and requesting a list of available
commands.
USB Backup Support
When a backup operation is performed on the local interface, the master key is
written to a USB mass storage device rather than a host disk. See
“Direct Input
Devices” on page 7 for details on the USB port and the suggested USB backup
device.
Using the
backup
command through a local interface works the same as accessing
scamgr
remotely unless the board is in FIPS mode. When in FIPS mode, the USB
Wrapping Key (UWK) is required to wrap all data written to the USB device. The
UWK is entered with the local interface and must be entered using split knowledge
procedures. The number of key components must be at least two. The security
officer who initiates the UWK entry must set the UWK.
Press <ENTER> to start
Security Officer Login: so1
Security Officer Password:
sca6000, so1}> ?
Sub-Command
-------------------------
backup
cancel
create
delete
diagnostics
disable
enable
exit
load
logout
quit
rekey
set
show
sca6000, so1}>