Vasco IDENTIKEY AG-3 Series Скачать руководство пользователя страница 100

Страница: 100 / 111

Hardware Security Module

In this section we provide instructions on how to set up a Hardware Security Module device. Configuring the HSM
must be completed before initiating the IDENTIKEY Authentication Server Setup Wizard (

5.5

IDENTIKEY

Authentication Server Setup Wizard

IDENTIKEY Appliance Installation and Maintenance

100

Содержание IDENTIKEY AG-3 Series

Страница 1: ...e IDENTIKEY Appliance Installation and Maintenance 1 IDENTIKEY Appliance Installation and Maintenance Guide 3 6 8...

Страница 2: ...terials published in this Site may be downloaded copied transferred disclosed reproduced redistributed or transmitted in any form or by any means electronic mechanical or otherwise for any commercial...

Страница 3: ...iance 15 4 3 Connect to your Network 16 5 First time Configuration 18 5 1 Overview 18 5 2 Access and Log on to the IDENTIKEY Appliance Configuration Tool 20 5 3 Configuration Wizard 23 5 4 Upload Lice...

Страница 4: ...on upgrade 76 8 7 Re licensing for a Change of IP Address or Replacement 77 8 8 Re licensing for an appliance restored to Factory Default 78 9 Update IDENTIKEY Appliance 79 9 1 Overview 79 9 2 Retriev...

Страница 5: ...izard 100 13 Hardware Security Module 102 13 1 SafeNet HSMs 103 14 Support 110 14 1 Overview 110 14 2 If you encounter a problem 110 14 3 Remote Support Connection 111 14 4 Setting up a replacement or...

Страница 6: ...ns 42 Image 24 Product Type Selection 43 Image 25 License Request 44 Image 26 Download License File 45 Image 27 Licensing Wizard Step 3 Upload License 46 Image 28 Licensing Wizard Step 4 License Activ...

Страница 7: ...Backup Manually 91 Image 61 Configuring FTP left or SFTP right for Automatic Backup and Testing Settings 92 Image 62 Configuring Frequency of Automatic Backup 93 Image 63 Configuring and Testing Setti...

Страница 8: ...Contents Index of Tables Table 1 IDENTIKEY Appliance Dimensions 11 Table 2 Settings to connect a workstation or laptop computer to the IDENTIKEY Appliance 61 IDENTIKEY Appliance Installation and Maint...

Страница 9: ...rence only Information is provided in table format for quick reference The IDENTIKEY Appliance Administrator Guide This manual provides in depth guidance for performing common or complicated tasks on...

Страница 10: ...erly grounded before turning on the power Turn the IDENTIKEY Appliance off before you disconnect the power supply To conform to certification restrictions only use a network cable with maximum length...

Страница 11: ...alling the IDENTIKEY Appliance in a server room with air conditioning and UPS Uninterrupted Power Supply If the equipment is built into a server cupboard make sure that there is sufficient ventilation...

Страница 12: ...toring the IDENTIKEY Appliance on a sliding shelf are available for the AG5XXX models only These are not included in the VASCO price list Please consult www supermicro com for compatible chassis rails...

Страница 13: ...network DNS Server IP address es for your network DNS Suffix es optional Proxy Server settings optional IDENTIKEY Appliance Maintenance Reference for a Commercial License only IDENTIKEY Appliance Seri...

Страница 14: ...or connecting the IDENTIKEY Appliance to your network Important Please first read the safety information in Section 2 Safety and Environmental Information and check that all the package contents you n...

Страница 15: ...ance is delivered with two LAN Ethernet interfaces see image above one of which needs to be connected using an appropriate network cable to the network s hub or switch IDENTIKEY Appliance Installation...

Страница 16: ...plugged into one of the LAN Ethernet interfaces and your network hub or switch 4 3 Connect to your Network There are two ways to change the IDENTIKEY Appliance IP address to an address within your ne...

Страница 17: ...a reply is received as shown in the image above everything is OK If a reply is not received indicated by the messages time out or destination host unreachable Check that the workstation s TCP IP setti...

Страница 18: ...Service Center from where a license key can be downloaded After installation and before Licensing the IDENTIKEY Appliance Configuration Tool is accessible for configuration but the IDENTIKEY Authentic...

Страница 19: ...he required files can be downloaded to another computer and transferred to the IDENTIKEY Appliance Note If you want to restore an existing instance of IDENTIKEY Appliance you do not need to undergo al...

Страница 20: ...Appliance IPaddress This URL will point to the IDENTIKEY Appliance Welcome Page from the Welcome Page you access both the IDENTIKEY Appliance Configuration Tool and the Administration Web Interface On...

Страница 21: ...accepted the login page for the Configuration Tool will be displayed 3 Log on using administrator login credentials The default administrative user name and password is IDENTIKEY Appliance Installati...

Страница 22: ...Appliance Configuration Tool is accessed for the first time the IDENTIKEY Appliance automatically detects that this is a first time installation and launches the Configuration Wizard IDENTIKEY Applia...

Страница 23: ...figure the IDENTIKEY Appliance on your network The following screens are available 1 Welcome 2 End User License Agreement 3 Oracle Binary Code License Agreement for Java SE 4 Password change 5 IDENTIK...

Страница 24: ...First time Configuration 5 3 1 Welcome IDENTIKEY Appliance Installation and Maintenance 24 Image 6 Configuration Wizard Step 1 Welcome...

Страница 25: ...e Agreement carefully To accept the terms click in the check box 5 3 3 Oracle Binary Code License Agreement for Java SE Please read the terms of the Oracle Binary Code License Agreement carefully IDEN...

Страница 26: ...First time Configuration To accept the terms select the check box IDENTIKEY Appliance Installation and Maintenance 26 Image 8 Configuration Wizard Step 3 Oracle Binary Code License Agreement...

Страница 27: ...pleted a more secure Administrator User ID will be created Disable the default sysadmin user after completing the IDENTIKEY Authentication Server Setup Wizard as described in the IDENTIKEY Appliance A...

Страница 28: ...First time Configuration 5 3 5 Hostname IDENTIKEY Appliance Installation and Maintenance 28 Image 10 Configuration Wizard Step 5 Hostname...

Страница 29: ...onnection to the VASCO Service Center requires a Default Gateway to be configured and access on TCP port 443 For more information please refer to the Firewall Ports section of the IDENTIKEY Appliance...

Страница 30: ...e Synchronization The address ntp vasco com can be entered for the default time server or another NTP server can be entered IDENTIKEY Appliance Installation and Maintenance 30 Image 12 Configuration W...

Страница 31: ...vation and perform other configurations manually via the IDENTIKEY Appliance Configuration Tool If you changed the IP address during First Time configuration specifically 5 3 6 Network Settings then y...

Страница 32: ...Immediately after completing the First time Configuration Wizard via the Activation Successful screen see Section 5 3 8 Activation Successful After completing the Configuration Wizard via a status sc...

Страница 33: ...ion Note After the second screen in the Licensing wizard you will need to access the VASCO Product Registration website before you can continue with the third screen Tip The circumstances under which...

Страница 34: ...First time Configuration 5 3 11 Welcome IDENTIKEY Appliance Installation and Maintenance 34 Image 15 Licensing Wizard Step 1 Welcome...

Страница 35: ...ire a VASCO License file for your IDENTIKEY Appliance you need to upload the previously mentioned System Info file to the VASCO Product Registration website This file identifies your appliance to VASC...

Страница 36: ...g a Commercial License File To identify your IDENTIKEY Appliance to VASCO for a License file to be issued you need to 1 Browse or follow the link to VASCO s Registration website https sc vasco com reg...

Страница 37: ...ime Configuration 2 If you have read and agree with VASCO s Terms and Conditions select the check box and click I AGREE IDENTIKEY Appliance Installation and Maintenance 37 Image 18 VASCO Terms and Con...

Страница 38: ...for validation You need to click on the link to confirm receipt of the email before you can proceed with product registration In some cases you may also be asked to complete a survey regarding the us...

Страница 39: ...an Evaluation License File To request an evaluation License file to be issued you need to 1 Browse to VASCO s Registration website https sc vasco com registration Select Click here for an evaluation l...

Страница 40: ...First time Configuration IDENTIKEY Appliance Installation and Maintenance 40 Image 21 VASCO s Registration website...

Страница 41: ...First time Configuration 2 Select the IDENTIKEY Authentication Server registration IDENTIKEY Appliance Installation and Maintenance 41 Image 22 VASCO Registration Product Selection...

Страница 42: ...figuration 3 If you have read and agree with VASCO s Terms and Conditions tick the check box and click on I AGREE IDENTIKEY Appliance Installation and Maintenance 42 Image 23 VASCO Registration Terms...

Страница 43: ...organization A description may be entered but is optional 6 Use the Browse button to browse to the System Info file downloaded in section 5 3 12 System Information 7 In the Component field select IDEN...

Страница 44: ...First time Configuration 8 Click on Create Evaluation License IDENTIKEY Appliance Installation and Maintenance 44 Image 25 License Request...

Страница 45: ...First time Configuration 9 Right click to download and save the evaluation License file IDENTIKEY Appliance Installation and Maintenance 45 Image 26 Download License File...

Страница 46: ...to the Licensing wizard and enter or browse to the License file which you downloaded from VASCO s Registration website Click on Next to upload the file IDENTIKEY Appliance Installation and Maintenanc...

Страница 47: ...First time Configuration 5 4 1 License Activation IDENTIKEY Appliance Installation and Maintenance 47 Image 28 Licensing Wizard Step 4 License Activation...

Страница 48: ...rd or uncheck the check box just complete the activation and perform manual configuration in the IDENTIKEY Appliance Configuration Tool The IDENTIKEY Authentication Server Setup Wizard can be launched...

Страница 49: ...nistrator Login HSMs and Secure Auditing 5 5 1 IDENTIKEY Authentication Server Settings 1 Enter the name of the Master Domain to be used and select the Name Conversion criteria At this stage you have...

Страница 50: ...h will end after the specified time in seconds has elapsed Secure Auditing setup will be different depending on whether or not you have HSM enabled If you have HSM enabled encryption settings will be...

Страница 51: ...arding HSMs refer to the IDENTIKEY Appliance Product Guide Before starting ensure that the license for IDENTIKEY Appliance includes Hardware Security Module functionality Refer to 13 Hardware Security...

Страница 52: ...ation Server password strength rules See the IDENTIKEY Appliance Product Guide for more details on the password strength rules 5 6 1 Ready to Configure 1 Once the details have been provided on the IDE...

Страница 53: ...First time Configuration 5 6 2 Configured IDENTIKEY Appliance Installation and Maintenance 53 Image 34 IDENTIKEY Authentication Server Setup Wizard Ready to Configure...

Страница 54: ...port Certificate 1 Browse to VASCO s Registration website https sc vasco com registration Enter the Contract ID and Serial Number provided by VASCO for your IDENTIKEY Appliance and click on Login IDEN...

Страница 55: ...e Configuration 2 If you have read and agreed with VASCO s Terms and Conditions tick the check box and click on I AGREE IDENTIKEY Appliance Installation and Maintenance 55 Image 36 VASCO s Registratio...

Страница 56: ...First time Configuration IDENTIKEY Appliance Installation and Maintenance 56 Image 37 VASCO Terms and Conditions...

Страница 57: ...ick to download the Support Certificate and save it to your network 5 Access the IDENTIKEY Appliance Configuration Tool as explained in 5 2 Access 6 In the IDENTIKEY Appliance Configuration Tool navig...

Страница 58: ...he Support Certificate you have downloaded from the VASCO Product Registration website and click Open The Support Certificate information is displayed IDENTIKEY Appliance Installation and Maintenance...

Страница 59: ...escue with no password The Rescue menu is displayed Connect a workstation or laptop computer to the IDENTIKEY Appliance using a serial null modem cable plugged into a serial port on both devices Setti...

Страница 60: ...2 Settings to connect a workstation or laptop computer to the IDENTIKEY Appliance Field Value Baudrate 115200 bits per second Parity None Data Bits 8 Stop Bit 1 Terminal Type VT100 IDENTIKEY Applianc...

Страница 61: ...ettings Authentication option This facility allows you to create your own Users with associated high strength passwords who have access to the Rescue Tool The Number of Additional Logins field enables...

Страница 62: ...onality Type in the letter referenced in front of a menu option in the Rescue Tool to select the option Pressing Esc returns to the previous menu screen pressing Esc on the main screen exits the Rescu...

Страница 63: ...tting the IDENTIKEY Appliance involves the following steps 1 type r to access the reset options 2 type f for system configuration reset 3 type y for yes to confirm system reset Reboot automatically fo...

Страница 64: ...to change the password refer to section 5 3 Configuration Wizard The new password will be asked immediately a new login to the IDENTIKEY Appliance Configuration Tool is not required to change the pass...

Страница 65: ...an be corrupted One of the following methods of powering off or rebooting the IDENTIKEY Appliance should be used in the following order of preference 1 Use the IDENTIKEY Appliance Configuration Tool S...

Страница 66: ...ration Tool navigate to System Actions 2 Click on the Rescue IDENTIKEY admin User button The IDENTIKEY Appliance Configuration Tool will then request a Username and Password to be used for the reset T...

Страница 67: ...g to DIGIPASS Password this allows authentication with a static password or a DIGIPASS One Time Password e Reset the Back end Authentication policy setting to None to prevent the use of Back end authe...

Страница 68: ...for a Change of IP Address or Replacement When a back up is restored to a different IDENTIKEY Appliance for example in the case of a replacement IDENTIKEY Appliance see 8 7 Re licensing for a Change...

Страница 69: ...tion Tool 2 If re licensing is necessary a link is provided in on the Status screen Click on the link to initiate the Licensing Wizard The Licensing Wizard can also be initiated in the IDENTIKEY Appli...

Страница 70: ...screen after the Welcome screen displays the current licensing information There are therefore six wizard screens 1 Welcome 2 Current License see image below 3 System Information 4 Upload License 5 Li...

Страница 71: ...explained in 5 3 10 Licensing Wizard 8 5 Re licensing for a New License Option or Type Re licensing for a new License option or type other than when upgrading from an Evaluation License requires the...

Страница 72: ...licensing 2 If you have read and agree with VASCO s Terms and Conditions tick the checkbox and click on I AGREE IDENTIKEY Appliance Installation and Maintenance 72 Image 47 VASCO s Registration websi...

Страница 73: ...Re licensing 3 Click on View installation information IDENTIKEY Appliance Installation and Maintenance 73 Image 48 VASCO Terms and Conditions...

Страница 74: ...ion or type On the Upload License screen browse to and upload the License dat file which you downloaded from the VASCO Product Registration website in point 4 above On the License Activation screen cl...

Страница 75: ...r for a backup restored to a different appliance e g for a replacement requires 1 Contact your IDENTIKEY Appliance supplier for release of the appliance from its initial license 2 Accessing the Licens...

Страница 76: ...for re licensing after returning an appliance to Factory Default without restoring a backup requires 1 Contact your IDENTIKEY Appliance supplier for release of the appliance License from the old Conf...

Страница 77: ...ding an update package from VASCO s Registration website On line through a connection to the VASCO Service Center An available update can be downloaded during the Update Wizard On completion of the Up...

Страница 78: ...ation does not permit a connection between your IDENTIKEY Appliance and the VASCO Service Center To retrieve an Update package to be used in off line udpating 1 Browse to VASCO s Registration website...

Страница 79: ...liance 2 Indicate that you have read and agree to the terms and conditions by checking the check box and clickingthe I Agree button IDENTIKEY Appliance Installation and Maintenance 79 Image 51 VASCO T...

Страница 80: ...Update IDENTIKEY Appliance 3 Select the Files Product upgrades option IDENTIKEY Appliance Installation and Maintenance 80 Image 52 Files Product upgrades option...

Страница 81: ...ppliance 4 Click on IDENTIKEY Appliance Off line upgrade packages to expand a list of available update packages IDENTIKEY Appliance Installation and Maintenance 81 Image 53 IDENTIKEY Appliance Off lin...

Страница 82: ...iding entry of information needed to update the IDENTIKEY Appliance 1 Welcome 2 Select Update 3 Available Updates on line process only 4 Download Update on line process only 5 Verify Update 6 Install...

Страница 83: ...Update IDENTIKEY Appliance 9 4 Welcome IDENTIKEY Appliance Installation and Maintenance 83 Image 55 Update Wizard Welcome Screen...

Страница 84: ...o the VASCO Service Center you will need to download an update package from the VASCO Registration website Please see section 9 2 Retrieving off line Update Packages for instructions If you have alrea...

Страница 85: ...e process only Retrieval steps are reported on the screen Any updates available from the VASCO Service Center are listed Click on an update to download it IDENTIKEY Appliance Installation and Maintena...

Страница 86: ...n of this update and rebooting of the IDENTIKEY Appliance Services are temporarily unavailable during reboot Clicking on Cancel cancels the update and closes the wizard 9 9 Install Update Installation...

Страница 87: ...l and allows administrators to upload configuration settings and data which have been backed up from another or the same appliance to the IDENTIKEY Appliance internal database If restored to the same...

Страница 88: ...p To initiate a manual backup requires the following steps 1 In the IDENTIKEY Appliance Configuration Tool click on System and Backup Restore 2 Click on Create backup now Most web browsers will open a...

Страница 89: ...TP server sends an encrypted fingerprint of its public host key to ensure that the SFTP connection is with the correct server Connection is only possible if the fingerprint is known to the IDENTIKEY A...

Страница 90: ...to the documentation for your SFTP server for further instructions 5 Use the Test settings link to test the configuration 6 Click on the Calendar icon by the Schedule field to open the dialog for defi...

Страница 91: ...NTIKEY Appliance Configuration Tool click on System Backup Restore 2 Check the Enabled checkbox in the Scripted Backups section Doing so will enable additional fields 3 Enter the following data a User...

Страница 92: ...nload a backup can be freely chosen and defined on the System Backup screen These credentials are not associated with a User Account in the IDENTIKEY Authentication Server Administration Web Interface...

Страница 93: ...e configured for Custom Encryption see section 10 2 Custom Encryption if you have configured Custom Encryption enter the Pass Phrase if you have not configured Custom Encryption click on Next 3 After...

Страница 94: ...ckup on a replacement IDENTIKEY Appliance is accomplished via the same steps as a regular replacement procedure refer to Section 11 3 Replacement Procedure for the detailed steps IDENTIKEY Appliance I...

Страница 95: ...aded before a backup can be restored following the series of steps explained in section 11 2 Upgrading For both procedures section numbers are indicated where you can find the detailed instructions in...

Страница 96: ...rom your previous appliance will remain valid for a grace period of 30 days re license the replacement appliance following the procedure explained in section 8 7 Re licensing for a Change of IP Addres...

Страница 97: ...pporting full services even when a hard disk fails Two hard disks are housed in two out of three available slots Configuration is supported through a wizard for which a link is automatically provided...

Страница 98: ...nce to the RAID configuration for synchronization Replace synchronization of a disk to the RAID configuration will be stopped by the IDENTIKEY Appliance the disk needs to be physically removed from a...

Страница 99: ...d The hard disk must be physically replaced The wizard returns to the Possible Actions screen and offers the Add action The Add action must be selected for the replacement disk to be added to the RAID...

Страница 100: ...vide instructions on how to set up a Hardware Security Module device Configuring the HSM must be completed before initiating the IDENTIKEY Authentication Server Setup Wizard 5 5 IDENTIKEY Authenticati...

Страница 101: ...e two options i Unsigned Firmware Module The unsigned VACMAN Controller Firmware Module file aal2sdk fm should be copied to the machine on which the HSM administration will take place You will have to...

Страница 102: ...ion slot to which the certificate is being copied 4 Mark the certificate as trusted a At a terminal enter ctcert t l CertificateName s AdminSlotID where CertificateName is the name of the certificate...

Страница 103: ...icate to be trusted and AdminSlotID is the ID of the administration slot to which the certificate has been imported 4 Upload the signed module to the HSM ctconf b CertificateName j aal2sdk fm 13 1 3 C...

Страница 104: ...ust be performed each time a key change occurs and consistency among HSMs is required The exact steps for this procedure will depend on attributes specific to your HSM setup For instructions refer to...

Страница 105: ...and this will be used as an epoch ID An epoch keypair will be generated consisting of an epoch public key and an epoch private key Each Secure Audit entry will contain the epoch public key the epoch...

Страница 106: ...the issuer subject and key usage for this certificate The minimum key usage required is keyusage digitalSignature nonRepudiation The following is an example of the contents of an attributes file label...

Страница 107: ...eviously created You will be prompted to enter the user pin for the specified slot i e slot 0 in this case 2 Extract the public certificate from the device and save it to a pem file ctcert x lMasterAu...

Страница 108: ...oblem f you encounter a problem with a VASCO product please follow the steps below 1 Check whether your problem has already been solved and reported in the Knowledge Base at the following URL http www...

Страница 109: ...is always enabled To open a connection for remote support 1 Access the IDENTIKEY Appliance Configuration Tool 2 In the IDENTIKEY Appliance Configuration Tool navigate to System Support 3 Toggle the E...

Страница 110: ...DENTIKEY Appliance Configuration Tool directly 14 4 Setting up a replacement or new IDENTIKEY Appliance For instructions on setting up a replacement or new IDENTIKEY Appliance please see section 11 Re...

Страница 111: ...69 Licensing Wizard 32 Manual Backup 90 Network Settings 29 Password Change 27 Password Reset 67 Power 11 Powering On 15 Pre installation 14 Re licensing 69 Reboot 66 88 6 3Rescue Tool 62 Access 60 C...

Результаты поиска

Содержание IDENTIKEY AG-3 Series

Отзывы:

Похожие инструкции для IDENTIKEY AG-3 Series

Бренды по названию

Популярные бренды

Vasco IDENTIKEY AG-3 Series, Руководство по установке и обслуживанию

Результаты поиска

Содержание IDENTIKEY AG-3 Series

Отзывы:

Похожие инструкции для IDENTIKEY AG-3 Series

Бренды по названию

Популярные бренды