Step 4 – Nortel Networks NN46120-104 User Manual

Page 66

Advertising
background image

66

Initial Setup

(

join

setup, continued)

Verify that HSM-SO iKey (purple) is inserted in card 0

(with flashing LED). <insert the HSM-SO iKey specific

for this HSM card>

Hit enter when done.

Enter a new HSM-SO password for card 0: <define an

HSM-SO password>

Re-enter to confirm:

The HSM-SO iKey has been updated.

Verify that HSM-USER iKey (blue) is inserted in card 0

(with flashing LED). <insert the HSM-USER iKey specific

for this HSM card>

Hit enter when done.

Enter a new HSM-USER password for card 0: <define an

HSM-USER password>

Re-enter to confirm:

The HSM-USER iKey has been updated.

Card 0 successfully initialized.

Note: For more information about iKeys, see

“The Concept of

iKey Authentication” (page 30)

.

4

Initialize HSM card 1 by inserting the second pair of HSM-SO
and HSM-USER iKeys, and by defining passwords.

Remember to take steps to label each pair of HSM-SO and
HSM-USER iKeys and the HSM card to which each set of
iKeys is associated during the initialization. Because each
ASA 310-FIPS device in the cluster will have two HSM cards,
you must also take steps to identify to which ASA 310-FIPS
device each pair of iKeys are associated. Your labeling must
ensure that the connection is obvious between a pair of
HSM-SO/HSM-USER iKeys, the HSM card that was initialized by
using those iKeys, and the ASA 310-FIPS device holding that
particular HSM card.

(

join

setup, continued)

Verify that HSM-SO iKey (purple) is inserted in card 1

(with flashing LED). <insert the HSM-SO iKey specific

for this HSM card>

Hit enter when done.

Enter a new HSM-SO password for card 1: <define a new

HSM-SO password, or use the same HSM-SO password as for

card 0>

Re-enter to confirm:

The HSM-SO iKey has been updated.

Verify that HSM-USER iKey (blue) is inserted in card 1

(with flashing LED). <insert the HSM-USER iKey specific

for this HSM card>

Hit enter when done.

Nortel VPN Gateway

User Guide

NN46120-104

02.01

Standard

14 April 2008

Copyright © 2007-2008 Nortel Networks

.

Advertising