Appendix F: Troubleshooting
Reset DSM Appliance and Remove All Data
DSM Installation and Configuration Guide
Copyright 2009 - 2020 Thales Group. All rights reserved.
177
4. You will need to generate the DSM certificate authority (CA) again. This will require a quorum from the original
ACS used to create the Security World.
5. Wait until the system has rebooted. Type
up
at the prompt to return to the main menu.
6. Type
system
to access the System category sub-menu.
7. To generate the CA, type:
0004:system$ security genca
System Response
WARNING: All Agents and Peer node certificates will need to be re-signed after CA and
server certificate regenerated, and the security server software will be restarted
automatically!
Continue? (yes|no)[no]:yes
8. Read the message and enter the required information to generate the CA. Ensure the DSM host name is correct,
press
Enter
:
9. A message displays informing you that a Security World exists and provides you the option to reuse it. This is the
Security World in place at the when the
config reset
command was run. Type
no
to destroy the old Security
World and create a new Security World. Have the new set of cards available for this step. For information about
the ACS and best practices, see
"Administrator Card Set (ACS)" on page 19
. Follow the instructions on the
screen.
There is an existing Security World.
Would you like to reuse it? (yes|no)[no]: no
Enter the total number of cards (N) you would like to use in your Administrator Card Set
(ACS).
Note: The system can handle at most 64 cards but you should not enter more than the number
of available cards in your possession currently.
This value must be at least 2 and no higher than 64: 2
Enter the number of cards (K) required to authorize an action. This number K is known as
the quorum.
Note: The value for K must be less than N. Creating card sets in which K is equal to N is
not allowed because an error on one card would render the whole card set unusable.
This value must be at least 1 and less than 2: 1
17:10:29 WARNING: Module #1: preemptively erasing module to see its slots!
Create Security World:
Module 1: 0 cards of 2 written
Module 1 slot 0: empty
Module 1 slot 2: empty
Module 1 slot 3: empty
Module 1 slot 4: empty
Module 1 slot 5: empty
.
.
.
Module 1 slot 2:- no passphrase specified - overwriting card
Module 1: 1 card of 2 written
Module 1 slot 2: remove already-written card #1
Module 1 slot 2: empty
Module 1 slot 2: unknown card