Chapter 6: Upgrade and Migration
Enabling Remote Administration for Upgraded V6100 Appliances
DSM Installation and Configuration Guide
Copyright 2009 - 2020 Thales Group. All rights reserved.
120
Before you start to replace ACS, you must ensure that you have enough blank cards to create
a complete new AC.
If you start the procedure without enough cards, you will have to cancel the procedure part
way through.
Have a quorum of cards from the current ACS ready. Please wait...
Insert ACS to authorize ACS replacement:
Module 1: 0 of 1 card read
Module 1 slot 0: empty
Module 1 slot 2: empty
Module 1 slot 17: empty
Module 1 completed.
Writing new ACS:
Module 1: 0 of 2 written
Module 1 slot 0: Admin Card #1
Module 1 slot 2: empty
.
.
.
Module 1 slot 17: empty
Module 1 slot 0: empty
Insert/change card in module 1 (or change module mode)
3. Start the remote Administration Client software on your laptop or PC. On the first screen enter the V6100
appliance IP address and click
Connect
.
4. Select the Electronic Serial Number (ESN) of the HSM from the Choose HSM screen, click
Next
.
The Remote Administration Client displays if you have inserted a card into the reader (TVD) or not.
5. Insert a card into the TVD, the Card Inserted column displays
Yes
, click
Next
.
6. Click the green
OK
button on the TVD to confirm the HSM ESN. If you take more than a minute to do this step, an
orange light will blink asking you to abort this step.
7. On the CLI, you will be prompted to overwrite the inserted card, press
Enter
to overwrite the card.
8. Next you will be prompted to enter a passphrase for the card. Enter a passphrase if using one and press enter.
CAUTION
Make a note of this passphrase, if you lose it the card will be unusable.
9. Remove the written card and insert the next card that is part of the quorum.
10. Enter a passphrase if using one and make a note of it.
11. Once you’ve completed writing the cards, you will be prompted to erase the old cards. If you plan on keeping the
old set, do not erase them.
The new cards can be used with the old card reader, however, the old cards cannot be read with the new TVD.