TSM500i and TsmWeb User Guide (PCI HSM v3) (PR-D2-1037 Rev 1.1)
| Page 29
Zazoo Limited, Co. No 9265606 | Directors: Dr S C P Belamant (French),
Mr H G Kotze, Mr P M Belamant | Company Secretary: Ms C W van Straaten
www.zazooltd.com
3.2
How to change an existing password
When changing a password, it is required that the Officer knows the existing password and for
another Officer to have authenticated themselves (dual access control).
Requirements:
Logged into TSM-WEB and the KCED connected to the TSM500i.
This service can only be performed if the module is in the
Loader
state
and requires both Crypto
Officers to have logged in
Whenever the KCED is connected to the HSM, the Cryptographic Officers must inspect the HSM, the
externally connected device, and the inter-connecting cable for any signs of tampering or insertion
of a bugging device.
Click on “Manage Operators” tab on the
TSM Operators
page.
To change a password, select the appropriate
Operator ID.
Set the “Name” field with the details of crypto officer. Click on
CHANGE PASSWORD
.
Follow the on screen instructions on the KCED. When prompted (twice), enter the new password on
the KCED.
A password must be at least 7 digits in length, using digits in the range 0 to 9.
Make a record of your password and keep in a safe place.
ENSURE THAT YOU FULLY UNDERSTAND THE CONSEQUENCES OF LOSING YOUR PASSWORD!
If all crypto officers forget their passwords, there is NO way to reset the HSM passwords without
ERASING ALL CSPs.
