1. Manuals
  2. Brands
  3. Curtiss-Wright Manuals
  4. Voice Recorder
  5. CNS4 CSfC
  6. User manual

Curtiss-Wright CNS4 CSfC User Manual

Common airborne recorder csfc encrypted data storage
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
 
CNS4 CSfC
Common Airborne Recorder
CSfC Encrypted Data Storage
User Guide
Part Number: DDOC0108-000-A2

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the CNS4 CSfC and is the answer not in the manual?

Questions and answers

Summary of Contents for Curtiss-Wright CNS4 CSfC

  • Page 1   CNS4 CSfC Common Airborne Recorder CSfC Encrypted Data Storage User Guide Part Number: DDOC0108-000-A2...
  • Page 2 This Page Intentionally Left Blank...
  • Page 3 The content revision level remains unchanged for chapters / appendices impacted only by nomen- clature change (implemented by revision A2). The Curtiss-Wright CNS4 CSfC DDOC0108-000-A2 User Guide is made up of the following individual chapters / appendices: Chapter / Appendix...
  • Page 4 Pressing more than one key at the same time. Pressing more than one key in sequence. xx,yy Variable in error messages and text. jobfile.dat File names.  Denotes the result of an action or procedure. Hyperlink. Controls on equipment. STOP CNS4 CSfC...

  • Page 5: Table Of Contents

    CNS4 CSfC User Guide Table of Contents Table of Contents Introduction 1.1 Purpose ..............................1-1 1.2 Scope ................................ 1-1 1.3 Quality Assurances............................ 1-2 1.4 Related Information ........................... 1-2 1.5 Technical Support............................1-2 1.6 Ordering Process............................1-3 Overview 2.1 Description..............................2-1 2.1.1 Chassis ............................
  • Page 6 CNS4 CSfC User Guide Table of Contents 5.3.1 CNS4 ............................... 5-1 5.4 Hardware Layer ............................5-1 5.5 Software Layer ............................5-1 5.6 Partition Disks............................5-1 5.6.1 Erase All Partitions / All Slots ......................5-1 5.6.2 Check Drive Status ......................... 5-1 5.6.3 Create Single Partition on FSM0 .....................
  • Page 7 CNS4 CSfC User Guide Table of Contents 6.3 Update ............................... 6-9 6.3.1 CNS4 Operating System Update ....................6-9 6.3.2 ILE Module Firmware ........................6-10 6.4 Encryption..............................6-11 6.4.1 Zeroize ............................6-11 6.4.2 Hardware Encryption Layer ......................6-12 6.4.2.1 LE Account - Internal / External Key Storage ..............6-12 6.4.2.2 Internal Security Mode ......................
  • Page 8 CNS4 CSfC User Guide Table of Contents 7.34 wipe ............................... 7-14 7.35 wrap............................... 7-15 7.36 writecfg ..............................7-15 Troubleshooting 8.1 LED Indicators ............................8-1 8.2 Error Codes ............................... 8-1 Simple Network Management Protocol 9.1 SNMP MIB..............................9-3 Remove / Replace 10.1 ILE Module - Install / Remove .......................
  • Page 9 CNS4 CSfC User Guide List of Figures List of Figures Figure 1.1 CNS4 CSfC CAR LRU........................1 - 1 Figure 2.1 CNS4 Assembly..........................2 - 2 Figure 2.2 FSM-C Module Block Diagram ......................2 - 3 Figure 2.3 FSM-C Module..........................2 - 4 Figure 2.4...
  • Page 10 CNS4 CSfC User Guide List of Tables List of Tables Table 6.1 Ethernet Interfaces ..........................6-3 Table 6.2 Security Modes............................ 6-12 Table 7.1 Sysconfig Flags and Options......................... 7-1 Table 8.1 LED Indicators ............................8-1 Table 8.2 Error Code List ............................8-1 Table B.1...

  • Page 11: Introduction

    Introduction Purpose The purpose of this manual is to describe the Curtiss-Wright CNS4 CSfC Common Airborne Recorder (CAR) Line Replaceable Unit (LRU) and to guide users through the process of unpacking, installing, configuring, and using the unit. The CNS4 CSfC (Figure 1.1) requires the use of multiple Flash Storage Modules-Carriers (FSM-C) and an In-Line Encryptor (ILE) to operate.

  • Page 12: Quality Assurances

    Our quality commitment begins with product concept and continues after receipt of the purchased product. Curtiss-Wright Controls, Inc., Electronic Systems' Quality Management System is accredited to the latest revision of the aerospace standard, AS9100 Quality Management Systems - Requirements for Aviation, Space, and Defense Organizations.

  • Page 13: Ordering Process

    DTN_support@curtisswright.com • Fax: (937) 252-1465 • World Wide Web address: www.cwcdefense.com Ordering Process To learn more about Curtiss-Wright Defense Solutions' products or to place an order, please use the following contact information. • E-mail: DTN_support@curtisswright.com • World Wide Web address: http://www.cwcdefense.com/...

  • Page 14: Overview

    Cables / Connectors section for additional information regarding the interface connectors and associated cables. The subassembly also has a set of utility connectors used for manufacturing and service activities. Contact Curtiss-Wright for more information about end-user utilization of these connectors.

  • Page 15: Figure 2.1 Cns4 Assembly

    ILE Backplane ILE Module eUSB Flash Module Storage Backplane Ethernet Connectors Main Carrier Subassembly Power/ RS-232 Connector Power Supply Subassembly Main Carrier Subassembly Battery Memory Module Utility Connectors COM Express Module DDOC0108-0002 CNS4 CSfC 2 - 2 Overview Revision 1.0...

  • Page 16: Fsm-C Module

    An additional eject lever is provided to assist with removing the module. After removal, the FSM-C module can be transported in an ESD-safe carrying case. CNS4 CSfC 2 - 3 Overview Revision 1.0...

  • Page 17: Ile Module

    EQUIPMENT DAMAGE. Use ESD precautions when handling a ILE module. Failure to properly handle ILE modules can result in damage. The CNS4 uses the Curtiss-Wright FIPS 140-2 certifiable ILE module for hardware encryption. For CSfC, the ILE module works in conjunction with software encryption present on each FSM-C module.

  • Page 18: Figure 2.4 Ile Module Block Diagram

    C module 0, B to 1, C to 2, and D to 3. As a result a single DEK can be assigned to all installed FSM-C modules or a separate DEK can be assigned to each FSM-C module. CNS4 CSfC 2 - 5 Overview Revision 1.0...

  • Page 19: Cns4 Features

    Internet Small Computer System Interface, (iSCSI) • Network File System (NFS) • Secure Shell Protocol (SSH) • Simple Network Management Protocol (SNMP) • Power / RS-232 Port • Solid-state Storage • Thermal Overtemp Sensors CNS4 CSfC 2 - 6 Overview Revision 1.0...

  • Page 20: Protocols

    ILE hardware layer. The hardware layer contains a Pre-Shared Key (PSK) which is generated at initial equipment power-on at the manufacturer and provided separately by Curtiss-Wright. The PSK cannot be read out of the ILE module.

  • Page 21: Hardware Layer Account Log In

    User-Generated Generate HMAC (Nonce HMAC and Specific-User Token Key) If Comparison Passes, Compare User HMAC User is Logged In and Hardware Crypto If Comparison Fails, Layer HMAC User is Denied Access DDOC0108-0012 CNS4 CSfC 2 - 8 Overview Revision 1.0...

  • Page 22: Software Layer Encryption

    Subsequent use of the FSM-C module is dependent upon the proper encryption key / passphrase being entered using the Command Line Interface (CLI). Failure to enter the proper information will result in the FSM-C module being inaccessible for data storage or use. CNS4 CSfC 2 - 9 Overview...

  • Page 23: Controls And Indicators

    The ILE module (Figure 3.2) has three LED status indicators: P, F, and S. During normal operation, P and S will be ON; F will be off. The illumination level of the LEDs is preset and non-adjustable. CNS4 CSfC 3 - 1 Controls and Indicators Revision 0.0...

  • Page 24: Fsm-C Module Controls / Indicators

    S (GREEN). This LED turns ON whenever the FSM-C module is active (reading / writing data). The REMOVAL REQUEST button is disabled in this configuration. Figure 3.3 FSM-C Module Controls / Indicators DDOC0108-0027 Power LED Status LED Removal Request Fault LED Button CNS4 CSfC 3 - 2 Controls and Indicators Revision 0.0...

  • Page 25: Installation

    All components should be free from any dents, cracks, or damage. • All connectors pins should be present, straight, and undamaged. Figure 4.1 Anti-Tamper Label Locations Tamper-Proof Seal Locations FSM-C Module ILE Module DDOC0108-0017 CNS4 CSfC 4 - 1 Installation Revision 1.0...

  • Page 26: Mounting

    User Guide DDOC0108-000-A2 If either the CNS4 chassis or associated modules were damaged in shipping or the enclosure was breached, immediately notify Curtiss-Wright Defense Solutions or your supplier. Mounting Mounting environment considerations should include operating temperature limits, humidity, and vibration limits. Other considerations should include clearance for mounting hardware, cables, and safe installation or removal of the CNS4 from its mounting structure.

  • Page 27: Install (Arinc Tray)

    2. Disconnect power / RS-232 cable from front panel power connector. 3. Disconnect Ethernet cables from front panel connectors GBE0 through GBE3. 4. Rotate mounting knobs to release CNS4 from ARINC tray. CNS4 CSfC 4 - 3 Installation Revision 1.0...

  • Page 28: Cables

    All connections to the CS4 are on the front panel (Figure 4.5). Be sure the external 28VDC power supply is off when making connections. Figure 4.5 CNS4 Connectors Power / RS-232 Ethernet Connector Connectors DDOC0108-0021 CNS4 CSfC 4 - 4 Installation Revision 1.0...

  • Page 29: Power / Rs-232 Cable

    The 10-pin connector (P1) mates to CNS4 GBE0 through GBE2. • The RJ-45 port (P2) accepts a normal Ethernet cable RJ-45 plug. Figure 4.7 Ethernet Lab Cable Ethernet Connector RJ-45 Port DDOC0108-0019 CNS4 CSfC 4 - 5 Installation Revision 1.0...

  • Page 30: Quick Start

    Refer to paragraph 6.4.3 Software Encryption for information. Partition Disks 5.6.1 Erase All Partitions / All Slots Commands: sysconfig –e sysconfig --wipe 5.6.2 Check Drive Status Command: sysconfig Example: cns> sysconfig sysconfig] DiskConfig CNS4 CSfC 5 - 1 Quick Start Revision 1.0...

  • Page 31: Create Single Partition On Fsm0

    Part0: name=fsm0-d01 swe=no [!swcrypt] OK 5.6.4 Create Single Partition on FSM1 Command: sysconfig --part fsm1-d0 1 100% -w Example: cns> sysconfig --part fsm0-d0 1 100% -w [sysconfig] Partition_disk: status=OK [!sysconfig] OK CNS4 CSfC 5 - 2 Quick Start Revision 1.0...

  • Page 32: Create Single Partition On Fsm2

    Partitions: numPartitions=3 Part0: name=fsm0-d0 size=2000246MB pSize=100.00% dp=1 numServ=1 sName=Unconfigured swe=no Part1: name=fsm1-d0 size=2000246MB pSize=100.00% dp=1 numServ=1 sName=Unconfigured swe=no Part2: name=fsm2-d0 size=2000246MB pSize=100.00% dp=1 numServ=1 sName=Unconfigured swe=no -- Device Partitions --- [!sysconfig] OK CNS4 CSfC 5 - 3 Quick Start Revision 1.0...

  • Page 33: Create Single Partition On Fsm3

    The first # in the command is the # partitions to assign as NAS drives. The subsequent #s are the partitions #'s, in a list… Command: sysconfig --nas 4 0 1 2 3 CNS4 CSfC 5 - 4 Quick Start Revision 1.0...

  • Page 34: Create Software Encryption Containers On Fsm2 And Fsm3

    4. On a PC with Linux OS, type scp keyfile3.txt admin@192.168.0.1:/keyfiles/ to move keyfile3 to CNS4 keyfile director. Create Containers FSM2 cns> swcrypt --init 2 --key-file /keyfiles/keyfile2.txt [swcrypt] cmd=init Part=2 status=OK [!swcrypt] OK CNS4 CSfC 5 - 5 Quick Start Revision 1.0...

  • Page 35: Open Software Encryption Containers On Fsm2 And Fsm3

    --open 2 --pass Example cns> swcrypt --open 2 --pass [swcrypt] cmd=open Part=2 Enter passphrase for /dev/sdb1: Verify passphrase: status=OK [!swcrypt] OK Check Status cns> sysconfig [sysconfig] DiskConfig: Individual_disks: numDisk=4 Disk0: name=fsm0-d0 size=2000GB CNS4 CSfC 5 - 6 Quick Start Revision 1.0...

  • Page 36: Method 2

    Part1: name=fsm1-d0 size=2000244MB pSize=100.00% dp=1 numServ=1 sName=fsm_nas1 fmt=no mnt=0 enb=0 swe=no Part2: name=fsm2-d0 size=2000244MB pSize=100.00% dp=1 numServ=1 sName=fsm_nas2 fmt=no mnt=0 enb=0 swe=open Part3: name=fsm3-d0 size=2000244MB pSize=100.00% dp=1 numServ=1 sName=fsm_nas3 fmt=no mnt=0 enb=0 swe=open CNS4 CSfC 5 - 7 Quick Start Revision 1.0...

  • Page 37: Format / Mount Nas Partitions

    Part2: name=fsm2-d0 size=2000244MB pSize=100.00% dp=1 numServ=1 sName=fsm_nas2 fmt=ext4 mnt=1 enb=0 swe=open Part3: name=fsm3-d0 size=2000244MB pSize=100.00% dp=1 numServ=1 sName=fsm_nas3 fmt=ext4 mnt=1 enb=0 swe=open --- Device Partitions --- NAS on partition 0 1 2 3 [!sysconfig] OK CNS4 CSfC 5 - 8 Quick Start Revision 1.0...

  • Page 38: Unformat Nas Partitions

    Check SWE Status: cns> swcrypt [swcrypt] Partitions: 4 Part0: name=fsm0-d01 swe=no Part1: name=fsm1-d01 swe=no Part2: name=fsm2-d01 swe=open Part3: name=fsm3-d01 swe=open [!swcrypt] OK 5.11 Close Software Encryption Containers Command swcrypt --close all CNS4 CSfC 5 - 9 Quick Start Revision 1.0...

  • Page 39: Erase Software Encryption Containers

    Part=3 status=OK [!swcrypt] OK Check Status cns> sysconfig [sysconfig] DiskConfig: Individual_disks: numDisk=4 Disk0: name=fsm0-d0 size=2000GB Disk1: name=fsm1-d0 size=2000GB Disk2: name=fsm2-d0 size=2000GB Disk3: name=fsm3-d0 size=2000GB Raid_disks: numDisk=0 Raid_volumes: numDisk=0 Partitions: numPartitions=4 CNS4 CSfC 5 - 10 Quick Start Revision 1.0...

  • Page 40: Ile Account Logout

    7. If NFS is disabled type serv --nfs 1. 8. If CIFS is disabled type serv --cifs 1. 9. Open a File Explorer window. 10. Enter the IP address of the CNS4 / NAS partition In the address bar. CNS4 CSfC 5 - 11 Quick Start Revision 1.0...

  • Page 41: Access From Linux As Nas Device

    Example mkdir /fsm0 mount -t nfs 192.168.0.1:/fsm_shares/fsm_nas0 /fsm0 5.16 External Key Passing Example NOTE External key passing requires the use of the Curtiss-Wright supplied PSK. 1. Zeroize the ILE. cns> cm_key -z [cm_key] status=OK [!cm_key] 2. Create Account on ILE.
  • Page 42 6. Generate User Authentication Token (UAT). cns> cm_crypto -t 57a1d98f7a6ada0a60d04c87194fe3a0ae334a73ad6a00a70f2abebd2452dfe53a51d68d 1a3282b10051e8fb05e36de9b738b8f4e142b59f2f081cd1fd73f9b0 -k 7b4398e2f5d89257b54656101d9d0ed335f54a74e8121ae48dc7775f785707d4 [cm_crypto] text=0x57a1d98f7a6ada0a60d04c87194fe3a0ae334a73ad6a00a70f2abebd2452dfe53 a51d68d1a3282b10051e8fb05e36de9b738b8f4e142b59f2f081cd1fd73f9b0 key=0x7b4398e2f5d89257b54656101d9d0ed335f54a74e8121ae48dc7775f785707d4 hmac_output=0xd6dac2ae685ce4adb776e0a27a69a0632ffe0ba8461c1d29b51388ae7b 69937a [!cm_crypto] 7. Login using the UAT. cns> cm_login --hmac d6dac2ae685ce4adb776e0a27a69a0632ffe0ba8461c1d29b51388ae7b69937a [cm_login] challenge_hmac=0xd6dac2ae685ce4adb776e0a27a69a0632ffe0ba8461c1d29b51388a e7b69937a status=OK [!cm_login] CNS4 CSfC 5 - 13 Quick Start Revision 1.0...
  • Page 43 -c a062009e59d3623dd9f1059ea61deb3e9bbd1c6c9e8e62d85c710a461018db633937c955 85110bb8 -k e7f1d995bf53556836490b5dea45ec1261a5d1a2e515f003286152fada7c2321 [cm_crypto] ciphertext=0xa062009e59d3623dd9f1059ea61deb3e9bbd1c6c9e8e62d85c710a46101 8db633937c95585110bb8 key=0xe7f1d995bf53556836490b5dea45ec1261a5d1a2e515f003286152fada7c2321 keyunwrap_output=0x04170bc4b683ce47a6bbd473d3514a9f9f25cf3dcf0afe1b9a72d 35f71405837 [!cm_crypto] 12. Send KEK Acknowledge after successful HMAC verification and decryption of KEK. cns> cm_key -a [cm_key] status=OK [!cm_key] CNS4 CSfC 5 - 14 Quick Start Revision 1.0...
  • Page 44 -e 38c69b9a3d1f84e5bdc86500b5454ea390405c12a6249edc387167e43ce62acac4813c33 b69f8893 -m a257cc5fd5bc0132e9fdf36ecf5da5a5d99ce3df0c470dc97c189bae7e3cb5ea -s 0 [cm_key] encrypted_dek=0x38c69b9a3d1f84e5bdc86500b5454ea390405c12a6249edc387167e4 3ce62acac4813c33b69f8893 generated_mac=0xa257cc5fd5bc0132e9fdf36ecf5da5a5d99ce3df0c470dc97c189bae 7e3cb5ea status=OK [!cm_key] 16. Confirm state. cns> cm_state [cm_state] ile_firmware_version=0.1 ile_id_number=666 ile_state=keys_loaded encryptors_loaded=0 current_user=user key_location=eeprom key_gen_method=external privilege_level=crypto_officer [!cm_state] CNS4 CSfC 5 - 15 Quick Start Revision 1.0...

  • Page 45: Operation

    Keyed for GBE0 Ethernet Patch Cable GBE0 Ethernet Ports Keyed for GBE1 GBE1 Similar to GBE0 Ethernet Patch Cable Keyed for GBE2 GBE2 Similar to GBE0 Ethernet Patch Cable Not Used GBE3 DDOC0108-0025 CNS4 CSfC 6 - 1 Operation Revision 1.0...

  • Page 46: Basic Operation

    (CLI) using the RS-232 port. Serial port accesses is recommended for initial configuration of the CNS4. The terminal emulation program should be set to 115200 bps, 8 bits, no parity, one stop bit, and no flow control. CNS4 CSfC 6 - 2 Operation...

  • Page 47: Terminal Emulation

    Figure 6.2 PuTTY Terminal Emulator DDOC0108-0032 3. Configure PuTTY as follows: • Serial line: COM1 • Speed: 115200 • Connection type: Serial 4. Click Open button.  A terminal screen should activate. CNS4 CSfC 6 - 3 Operation Revision 1.0...

  • Page 48: Ethernet

     A terminal screen should activate. 5. Click Enter button.  A login prompt should activate. 6. Log into CLI as follows: a. At the login prompt type admin. b. At the password prompt type istrator. CNS4 CSfC 6 - 4 Operation Revision 1.0...

  • Page 49: Account Management

    Before any attempt to configure or reconfigure the storage system be sure the NAS services are stopped and unmounted. Use CLI command serv --nas 0 to stop NAS service. • Use CLI command sysconfig -u all to unmount drives. • CNS4 CSfC 6 - 5 Operation Revision 1.0...

  • Page 50: Creating A Raid

    Individual_disks: numDisk=4 Disk0: name=fsm0-d0 size=2000GB Raid_disks: numDisk=0 Raid_volumes: numDisk=0 Partitions: numPartitions=1 Part0: name=fsm0-d0 size=2000246MB pSize=100.00% dp=1 numServ=1 sName=fsm_nas0 fmt=no mnt=0 enb=0 swe=no --- Device Partitions --- NAS on partition 0 [!sysconfig] OK CNS4 CSfC 6 - 6 Operation Revision 1.0...

  • Page 51: Format Partitions

    5.0 VDC Nominal Low Limit: 4.60 VDC High Limit: 5.50 VDC 12 VDC Nominal Low Limit: 11.0 VDC High Limit: 13.0 VDC Temperature Normal: 35 to 60 ºC High: 90 ºC Low: -40 ºC CNS4 CSfC 6 - 7 Operation Revision 1.0...

  • Page 52: Built-In Test

    If any item is outside of tolerance range, the CNS4 S0 LED will illuminate. In addition, the ibit report will show the error. Refer to paragraph 11.2.19 log and paragraph 11.2.15 ibit for more information. CNS4 CSfC 6 - 8 Operation...

  • Page 53: Pbit

    The following files are required to update the CNS4 operating system: NOTE Contact Curtiss-Wright to obtain any available / applicable update files The files below refer to Curtiss-Wright provided files for performing operating system update. The year, month, day, and ver_#_## are variables that will reflect the update file date and version.

  • Page 54: Ile Module Firmware

    The following files are required to update the ILE firmware: NOTE Contact Curtiss-Wright to obtain any available / applicable update files The files below refer to Curtiss-Wright provided files for performing ILE firmware update. The ver_# is a variable that will reflect the update file version.

  • Page 55: Encryption

    Type mkdir -p /tmp/nas_tmp/. b. Type mount.nfs 192.168.0.1:/fsm_shares/fsm_nas0/ /tmp/nas_tmp/ NOTE The files below refer to Curtiss-Wright provided files. The year, month, day, and ver_#_## are variables that will reflect the update file date and version. 4. Type cp ile_csfc_ver_#.bin signature_ile_csfc_ver_#.bin /tmp/nas_tmp/ 5.

  • Page 56: Hardware Encryption Layer

    DEK Storage Location: is how and where the DEK is stored. The user selects one of three storage options for the DEK (Not stored, SRAM, or EEPROM) when using the Internal or External Mode. CNS4 CSfC 6 - 12 Operation...

  • Page 57: Internal Security Mode

    (referred to as Key Encryption Key [KEK]). Use of a KEK provides extra security when the DEK is transferred. • Storage. Where the key will be stored; None (not stored), EEPROM or SRAM. CNS4 CSfC 6 - 13 Operation Revision 1.0...

  • Page 58: Ile Login

    Key transfer is applicable only if external mode has been selected. The command example below transfers the PSK and DEK: • from the user's equipment to CNS4 ILE 0 (0=first encryptor of four within the ILE). • in plain text (non-encrypted transfer). CNS4 CSfC 6 - 14 Operation Revision 1.0...

  • Page 59: Software Encryption

    The last seven passphrases cannot be reused. NOTE Keyfiles should not be used in high threat environments. After the passphrase has been decided upon, it can be: • typed in when prompted. • saved a keyfile. CNS4 CSfC 6 - 15 Operation Revision 1.0...
  • Page 60 Part1: name=fsm1-d01 swe=no Part2: name=fsm2-d01 swe=open Part3: name=fsm3-d01 swe=closed [!swcrypt] OK Additional information regarding command associated with the software encryption layer is available in paragraph 11.2.25 swcrypt and the Quick Start section CNS4 CSfC 6 - 16 Operation Revision 1.0...

  • Page 61: System Configuration

    --verb Generate verbose output --version Show software version --wipe Wipe RAID and partition data from all disks --wrap <1, 0> Word wrap text to screen --writecfg Write system configuration to disks CNS4 CSfC 7 - 1 System Configuration Revision 0.0...

  • Page 62: All

    Part4: name=fsm_raida size=342794MB pSize=17.00% dp=5 numServ=1 \sName=iSCSI0_L0 enb=0 Part5: name=fsm_raida size=342794MB pSize=17.00% dp=6 numServ=1 \sName=iSCSI1_L0 enb=0 Device_partitions: numServ=5 NAS: num_part=2 part=0 part=1 FC0: num_part=1 part=2 FC1: num_part=1 part=3 iSCSI0: num_part=1 part=4 iSCSI1: num_part=1 part=5 Image_files: [!sysconfig] OK CNS4 CSfC 7 - 2 System Configuration Revision 0.0...

  • Page 63: File

    # # - <# #> two or more NAS disk volumes all - all NAS disk volumes Example cns> sysconfig --format all [sysconfig] FSM_NAS0: cmd=format status=OK FSM_NAS1: cmd=format status=OK [!sysconfig] OK CNS4 CSfC 7 - 3 System Configuration Revision 0.0...

  • Page 64: Free

    # # - <# #> two or more NAS disk volumes all - all NAS disk volumes Example cns> sysconfig --fsck all [sysconfig FSM_NAS0: cmd=fsck status=OK FSM_NAS1: cmd=fsck status=OK [!sysconfig] OK CNS4 CSfC 7 - 4 System Configuration Revision 0.0...

  • Page 65: Fsep

    /dev/fsm0-d0 /dev/fsm0-d1 /dev/fsm0-d2 /dev/fsm0-d3 [!sysconfig] OK 7.10 getNfsOpt Purpose Get current NFS export flags Command sysconfig --getNfsOpt Flag Modifiers Explanation Not Applicable Example cns> sysconfig --getNfsOpt [sysconfig] nfs_export_flags=rw,sync,no_root_squash,anonuid=1000,anongid=1000 status=OK [!sysconfig] OK CNS4 CSfC 7 - 5 System Configuration Revision 0.0...

  • Page 66: Help

    Assign a service to a specific partition Command sysconfig --iscsiX <# parts> <part #> Flag Modifiers Explanation <#parts> Number of partitions to use with the device. <part #> Partition number (can have multiple partitions) CNS4 CSfC 7 - 6 System Configuration Revision 0.0...

  • Page 67: Ismounted

    --mount <#|# #|all> Flag Modifiers Explanation # - single NAS disk volume number # # - <# #> two or more NAS disk volumes all - all NAS disk volumes CNS4 CSfC 7 - 7 System Configuration Revision 0.0...

  • Page 68: Multi

    Part4: name=fsm_raida size=342794MB pSize=17.00% dp=5 numServ=1 \sName=iSCSI0_L0 enb=0 Part5: name=fsm_raida size=342794MB pSize=17.00% dp=6 numServ=1 \sName=iSCSI1_L0 enb=0 Device_partitions: numServ=3 NAS: num_part=2 part=0 part=1 iSCSI0: num_part=1 part=3 iSCSI1: num_part=1 part=4 Image_files: Vol0: numFiles=2 file1.img 60927MB file0.img 31875MB [!sysconfig] OK CNS4 CSfC 7 - 8 System Configuration Revision 0.0...

  • Page 69: Numfreedisks

    <num parts> - Number of partitions to create on the disk. (1 to n) <part sizes> - List of partition sizes. Can be specified as percent of disk or sizes in MiB, MB, GiB, GB, TiB or TB. CNS4 CSfC 7 - 9 System Configuration...

  • Page 70: Raid

    Purpose Display status of each RAID in the system Command sysconfig --raidStatus Flag Modifiers Explanation Not Applicable CNS4 CSfC 7 - 10 System Configuration Revision 0.0...

  • Page 71: Remove

    7.26 scan Purpose Delete and then scan for FSM connections Command sysconfig --scan Flag Modifiers Explanation Not Applicable Example cns> sysconfig --scan [sysconfig] cmd=scan, deleting_all_FSM_entries status=OK cmd=scan, scanning_for_FSM_disks status=OK [!sysconfig] OK CNS4 CSfC 7 - 11 System Configuration Revision 0.0...

  • Page 72: Setnfsopt

    For iSCSI target device you should see iSCSIX_LY where X is the Ethernet port used and Y is the device. If the iSCSI device is an active device the enb f lag will be set to one. CNS4 CSfC 7 - 12 System Configuration Revision 0.0...

  • Page 73: Trim

    --trim <# | ## | all> Flag Modifiers Explanation # - single NAS disk volume number # # - <# #> two or more NAS disk volumes all - all NAS disk volumes CNS4 CSfC 7 - 13 System Configuration Revision 0.0...

  • Page 74: Umount

    VER: cmd=sysconfig version=17 date=01/April/2018 status=OK VER: lib=function version=18 date=01/April/2018 status=OK [!sysconfig] OK 7.34 wipe Purpose Wipe RAID and partition data from all disks Command sysconfig --wipe Flag Modifiers Explanation Not Applicable CNS4 CSfC 7 - 14 System Configuration Revision 0.0...

  • Page 75: Wrap

    Write system configuration to disks. Usually used as a modifier to --part or --raid flag Command sysconfig --part fsm0-d0 2 100Gib 900Gib --writecfg Flag Modifiers Explanation Not Applicable Example cns> sysconfig --raid1 fsm0-d0 fsm0-d1 2 50% 50% --writecfg [sysconfig] Create_raid: status=OK Partition_disk: status=OK [!sysconfig] OK CNS4 CSfC 7 - 15 System Configuration Revision 0.0...

  • Page 76: Troubleshooting

    If any of the errors shown in Table 8.2 appear in the CLI, the unit will be locked. The only course of action for the user is to cycle power or zeroize the ILE. If the error does not clear and normal operation is not restored, contact Curtiss-Wright Customer Support at (800) 252-5601 for assistance or E-mail DTN_support@curtisswright.com.
  • Page 77 ENCRYPTION Encryptor key mode config error 0x0A12 ENCRYPTION Encryptor keyload error 0x0A13 ENCRYPTION Encryptor xwall config error 0x0A14 ENCRYPTION Invalid enova slot 0x0A10 ENCRYPTION Chip_A BIST error 0x0A20 ENCRYPTION Chip_B BIST error CNS4 CSfC 8 - 2 Troubleshooting Revision 0.0...
  • Page 78 Permission denied 0x1009 Invalid key generation method 0x100A Invalid state 0x100B Exceeded ILE login attempts 0x100C EDC check failed 0x100D Duplicate username 0x100E Unrecognized command x3001 FUPDATE Transfer failed x3002 FUPDATE Invalid checksum CNS4 CSfC 8 - 3 Troubleshooting Revision 0.0...
  • Page 79 SECURITY Tamper event 0x0C40 SECURITY Tamper event 0x0C50 SECURITY Tamper event 0x0C60 SECURITY Tamper event 0x0C70 SECURITY Tamper event 0x0C80 SECURITY Tamper event 0x0009 HOST Communications error 0x0000 Not Applicable Status OK CNS4 CSfC 8 - 4 Troubleshooting Revision 0.0...

  • Page 80: Simple Network Management Protocol

    System Time (11) FTP (3) TFTP (4) Reboot (12) TFTP (4) HTTP (5) Shutdown (13) HTTP (5) Telnet (6) Telnet (6) SNMP (7) SNMP (7) All (8) All (8) DDOC0108-0042 CNS4 CSfC 9 - 1 Simple Network Management Protocol Revision 0.0...
  • Page 81 -v 2c -c cns -mCWCDS-CNS-MIB 10.19.6.4 cnsSnmp.4.1.0 s "100" CWCDS-CNS-MIB::cnsS0.0 = STRING: 100 Example 4: SET ETH0 IP – cnsSnmp.5.1.1 snmpset -v 2c -c cns -mCWCDS-CNS-MIB 10.19.6.4 cnsSnmp.5.1.1.0 s 192.168.1.22 CWCDS-CNS-MIB::cnsIpEth0.0 = STRING: 192.168.1.22 CNS4 CSfC 9 - 2 Simple Network Management Protocol Revision 0.0...

  • Page 82: Snmp Mib

    "Output of command: health" ::= { cnsSnmp 1 } cnsIBIT OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-only STATUS current DESCRIPTION "Output of command: ibit" ::= { cnsSnmp 2 } CNS4 CSfC 9 - 3 Simple Network Management Protocol Revision 0.0...
  • Page 83 DEFVAL { "" } ::= { cnsSnmp 13 } cnsFSMDiskStatus OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-only STATUS current DESCRIPTION "Output of command: fsmdiskstatus" ::= { cnsSnmp 3 } CNS4 CSfC 9 - 4 Simple Network Management Protocol Revision 0.0...
  • Page 84 ::= { cnsLED 1 } cnsS1 OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Read LED status. Set S1 duty cycle." DEFVAL { "" } ::= { cnsLED 2 } CNS4 CSfC 9 - 5 Simple Network Management Protocol Revision 0.0...
  • Page 85 ::= { cnsEth0 3 } cnsDhcpClientIdEth0 OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Read eth0 status. Set eth0 DHCPClient ID." DEFVAL { "" } ::= { cnsEth0 4 } CNS4 CSfC 9 - 6 Simple Network Management Protocol Revision 0.0...
  • Page 86 OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Read eth1 status. Set eth1 DHCP Client ID." DEFVAL { "" } ::= { cnsEth1 4 } CNS4 CSfC 9 - 7 Simple Network Management Protocol Revision 0.0...
  • Page 87 OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Read eth2 status. Set eth2 DHCP Client ID." DEFVAL { "" } ::= { cnsEth2 4 } CNS4 CSfC 9 - 8 Simple Network Management Protocol Revision 0.0...
  • Page 88 OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Read eth3 status. Set eth3 DHCP Client ID." DEFVAL { "" } ::= { cnsEth3 4 } CNS4 CSfC 9 - 9 Simple Network Management Protocol Revision 0.0...
  • Page 89 SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Used to start (1) and stop (0) the TFTP server." DEFVAL { "" } ::= { cnsLiveServices 4 } CNS4 CSfC 9 - 10 Simple Network Management Protocol Revision 0.0...
  • Page 90 SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Used to start (1) and stop (0) the NFS server on boot." DEFVAL { "" } ::= { cnsBootServices 2 } CNS4 CSfC 9 - 11 Simple Network Management Protocol Revision 0.0...
  • Page 91 SYNTAX OCTET STRING (SIZE (1..4096)) MAX-ACCESS read-write STATUS current DESCRIPTION "Used to start (1) and stop (0) all the services on boot." DEFVAL { "" } ::= { cnsBootServices 8 } CNS4 CSfC 9 - 12 Simple Network Management Protocol Revision 0.0...

  • Page 92: Remove / Replace

    1. Remove ILE module from static safe container. 2. Align ILE module rails with the chassis slides and carefully push module into chassis. Ensure module connector fully seats in ILE backplane connector. CNS4 CSfC 10 - 1 Remove / Replace...

  • Page 93: Fsm-C Module - Install / Remove

    4. Grasp eject lever and carefully pull FSM-C module from CNS4 chassis. 5. Place FSM-C module in a static-safe container and close cover. Figure 10.2 FSM-C Module Replacement Slide Rail Eject Lever Wedgelock Lever DDOC0108-0008 CNS4 CSfC 10 - 2 Remove / Replace Revision 2.0...

  • Page 94: Install

    3. Remove six screws, battery cover, and gasket from CNS4 chassis (Figure 4-7). 4. Remove battery from battery holder. 5. Discard battery. Figure 10.3 Chassis Battery Replacement Tightening Sequence Battery Gasket Battery Cover DDOC0108-0031 CNS4 CSfC 10 - 3 Remove / Replace Revision 2.0...

  • Page 95: Install

    5. Use 10 screws to secure battery cover in place. Tighten screws to 8.0 in-lb (0.9 Nm) using pattern shown in Figure 4-8. 6. Install ILE tamper label. Refer to paragraph 4.2 Inspection for label locations. Refer to Ordering Information section for tamper label information. CNS4 CSfC 10 - 4 Remove / Replace Revision 2.0...

  • Page 96: Ile Module Battery Replacement

    8. Use a permanent marker to write Install and Replacement dates on label. 9. Install ILE module in CNS4. Refer to paragraph 10.1 ILE Module - Install / Remove for additional information. CNS4 CSfC 10 - 5 Remove / Replace...

  • Page 97: Command Line Interface

    ........Sets / shows encryption key management (key creation, usage, encryption). cm_log........Shows / clears ILE log files. cm_login ........ Allows users to login / use ILE. cm_state......... Shows current user / encryption key information. 11.2 Commands CNS4 CSfC 11 - 1 Command Line Interface Revision 0.0...
  • Page 98 -u john -p aBcDeFg1 -m e -k e [cm_create_account] user_token=0xc9ed6c3bbc3de43110d4e5b67da39ea4d1d79d1fb269d25759b38a25db0a8552c72 158ebc19e7e60 token_hmac=0x8ba8729d3a22bc6787b404a13f7cbec190ce5f64fc0e770c8710f60318274259 status=OK [!cm_create_account] Example 3. Create a user account with username marty, password gHpErCf7 cns> cm_create_account -u marty -p gHpErCf7 [cm_create_account] user_token=0xa77650375de646873a61d4c18954d2c4aaf35cd2af59bd9f0646b5a55223011a token_hmac=0xbd7147c5119728ffea5aa2d517c3c747242ab8ad2e3259561a59d9dbe8e43248 status=OK [!cm_create_account] CNS4 CSfC 11 - 2 Command Line Interface Revision 0.0...
  • Page 99 -c aa6db2ebee5438665f49d4b228942a2a53b78552b7f16be37c77508b596bdc5998e5ba844947227f -k 0000000000000000000000000000000000000000000000000000000000001234 [cm_crypto] ciphertext=0xaa6db2ebee5438665f49d4b228942a2a53b78552b7f16be37c77508b596bdc5998e 5ba844947227f Key=0x0000000000000000000000000000000000000000000000000000000000001234 keyunwrap_output=0xb68dc04ac3ade0e9f883eded13a9a90e7b86d7b6a4c22c4d26b7344e8ce2e [!cm_crypto] Example 2. Perform AES256 KeyWrap cns> cm_crypto -p c213a1e6d0cc9f61d2e7777d0c1a3b5cb70a3342e70252ae0773cb326cf17da9 - k 0c56d2e4fa740fcf92119502f8ca88378190dbfb63c545909a26d478c6f595d0 [cm_crypto] plaintext=c213a1e6d0cc9f61d2e7777d0c1a3b5cb70a3342e70252ae0773cb326cf17da9 key=0c56d2e4fa740fcf92119502f8ca88378190dbfb63c545909a26d478c6f595d0 keywrap_output=0xe9ed6d1cd711600f8c7f8eea6f22d9199bf85698b86ac2a5f6bf3a8c5e5359a7b9c79b4d3a1 bb39e [!cm_crypto] CNS4 CSfC 11 - 3 Command Line Interface Revision 0.0...
  • Page 100 The update files must be placed on the root of fsm_nas0 on the CNS4.Refer to paragraph 6.3.2 ILE Module Firmware for more details. NOTE Curtiss-Wright will be the only entity who provides ILE firmware updates. Options: -h, --help......Help -v, --version ......Show version information -f ..........
  • Page 101 [cm_key] status=OK [!cm_key] Example 2. Send a KEK Acknowledge to the FIPS Encryptor after the HMAC has been verified and KEK has been decrypted cns> cm_key -a [cm_key] status=OK [!cm_key] CNS4 CSfC 11 - 5 Command Line Interface Revision 0.0...
  • Page 102 Example 5. Reset KEK to PSK cns> cm_key -r [cm_key] status=OK [!cm_key] Example 6. Load next desired slot (examples uses slot 3) cns> cm_key -d 1111222233334444555566667777888899990000AAAABBBBCCCCDDDDEEEEFFFF -p 098765432109876543210987654321AB098765432109876543210987654321CD -s 3 [cm_key] status=OK [!cm_key] CNS4 CSfC 11 - 6 Command Line Interface Revision 0.0...
  • Page 103 (0x0960):[VOLT] - low battery warning (0x080f):[I2C] - checksum failed (0x1009):[ILE] - invalid keygen method (0x100a):[ILE] - invalid state [!cm_log] Example 2 cns> cm_log [cm_log] status=OK [!cm_log] Example 3 cns> cm_log -c [cm_log] status=OK [!cm_log] CNS4 CSfC 11 - 7 Command Line Interface Revision 0.0...
  • Page 104 [!cm_login] Example 2. Complete the login process by submitting the HMAC-SHA256 cns> cm_login --hmac 30fc2e0ced04edb0942b8cae01dc0692e61bfedf172404da45edbaab72fb0791 [cm_login] challenge_hmac=0x30fc2e0ced04edb0942b8cae01dc0692e61bfedf172404da45edbaab72fb079 status=OK [!cm_login] Example 3. Logout current user cns> cm_login -o [cm_login] status=OK [!cm_login] CNS4 CSfC 11 - 8 Command Line Interface Revision 0.0...
  • Page 105 -h, --help......Help -v, --version ......Show version information Example 1 cns> cm_state [cm_state] ile_firmware_version=0.1 ile_id_number=789 ile_state=initialized [!cm_state] Example 2 cns> cm_state [cm_state] ile_firmware_version=0.1 ile_id_number=789 ile_state=keys_loaded encryptors_loaded=0,1,2,3 current_user=john key_location=eeprom key_gen_method=internal privledge_level=user {!cm_state] CNS4 CSfC 11 - 9 Command Line Interface Revision 0.0...
  • Page 106 ......Reports name of BOOTP entry / hostname of client mac=<mac> ......Reports MAC address of BOOTP client id=<str> ....... Reports client ID of BOOTP client tftp=<file> ......Reports BOOTP file name CNS4 CSfC 11 - 10 Command Line Interface Revision 0.0...
  • Page 107 -A -b mypc -m 20:50:A4:FC:6B:B5 -f 192.168.3.55 -t /fsm_shares/ fsm_nas0/bootfile [dhcpconfig] BOOTP: status=<sts> [!dhcpconfig] <summary> Example 5. Delete BOOTP client cns> dhcpconfig -D -b mypc [dhcpconfig] BOOTP: status=<sts> [!dhcpconfig] <summary> CNS4 CSfC 11 - 11 Command Line Interface Revision 0.0...
  • Page 108 /dev/fsm0-d0 | 2000GB | 3.0Gb/s | PART /dev/fsm1-d0 | 1024GB | 3.0Gb/s | RAIDa | /dev/fsm2-d0 | 1024GB | 3.0Gb/s | RAIDa | /dev/fsm3-d0 | 1000GB | 3.0Gb/s | PART [!diskcfg] OK CNS4 CSfC 11 - 12 Command Line Interface Revision 0.0...
  • Page 109 [!diskcfg] OK Example 4 cns> diskcfg -l [diskcfg] fsm1-d0: fsmName=/dev/fsm1-d0 sz=512GB link=1.5Gb/s type=PART fsm1-d1: fsmName=/dev/fsm1-d1 sz=512GB link=1.5Gb/s type=RAIDa fsm1-d2: fsmName=/dev/fsm1-d2 sz=512GB link=1.5Gb/s type=RAIDa fsm1-d3: fsmName=/dev/fsm1-d3 sz=512GB link=1.5Gb/s type=RAIDa [!diskcfg] OK CNS4 CSfC 11 - 13 Command Line Interface Revision 0.0...
  • Page 110 [!fsmdiskstatus] OK Example 2 cns> fsmdiskstatus [fsmdiskstatus] FSM_1: status=NRDY [!fsmdiskstatus] OK Example 3 cns> fsmdiskstatus --sw --fsep "#" [fsmdiskstatus] # FSM_NAS0: # psize=2048G # mounted=0 # status=OK # [!fsmdiskstatus] OK CNS4 CSfC 11 - 14 Command Line Interface Revision 0.0...
  • Page 111 -f fsm0-d0 -E [fsmpurge] fsm0-d0: cmd=purge type=enhanced_erase status=OK [!fsmpurge] OK Example 4 cns> fsmpurge -f fsm0-d0 -E -C [fsmpurge] fsm0-d0: cmd=purge type=enhanced_erase status=OK Elapsed time 00:06:39 [!fsmpurge] OK CNS4 CSfC 11 - 15 Command Line Interface Revision 0.0...
  • Page 112 --fsm fsm0-d0 -N --verb [fsmpurge] Device Name: /dev/fsm0-d0 Password: Model name: 'TRITON HC' Serial Number: 201602080001 Firmware rev:NV.R1000 Perform normal erase. Start Erase Elapsed time 00:01:53 Erase Complete [!fsmpurge] OK CNS4 CSfC 11 - 16 Command Line Interface Revision 0.0...
  • Page 113 Use of this command requires the user to first contact Curtiss-Wright Defense Solutions to identify and obtain the needed update files (specific instructions for individual situations may also be provided).
  • Page 114 The update process takes approximately 25 minutes. A notification will be presented upon completion of the field update ([!fupdate] OK). The user may power cycle the unit after completion of the update to store the updated image. CNS4 CSfC 11 - 18 Command Line Interface...
  • Page 115 <status> ..........Status <enum> (OK, NA, ERR "<str>"). INVALID ..........<status>. INVALID ..........Command parameter(s) invalid .<status> ..........Status <str> (ERR "<str>"). ERROR ..........<status>. ERROR ..........Command parameter(s) invalid. <status> ..........Status <str> (ERR "<str>"). CNS4 CSfC 11 - 19 Command Line Interface Revision 0.0...
  • Page 116 | 4.93V | 3.29V | | FSM3 | 23 C | 4.92V | 3.30V | |---------------------------------------------------------| ETH_0: ip=192.168.1.22 link=1000Mb/s status=OK ETH_1: ip=192.168.2.22 link=1000Mb/s status=OK ETH_2: ip=192.168.3.22 link=1000Mb/s status=OK ETH_3: ip=10.19.6.4 link=1000Mb/s status=OK [!health] OK CNS4 CSfC 11 - 20 Command Line Interface Revision 0.0...
  • Page 117 -h cns> help cm_create_account cm_crypto cm_field_update cm_key cm_log cm_login cm_state dhcpconfig diskcfg fsmdiskstatus fsmpurge fupdate health help ibit ipconfig istarget ledcntrl password reboot serial_config serv shutdown swcrypt sysconfig sysdate CNS4 CSfC 11 - 21 Command Line Interface Revision 0.0...
  • Page 118 Summary status for the line. Enumerated types: <s> ........Subtest status. 1=pass, 0=fail <sts> ........Status message (OK, ERR "<str>") <str> ........Text string <summary> ......Command status summary (OK, ERR) CNS4 CSfC 11 - 22 Command Line Interface Revision 0.0...
  • Page 119 Summary status for the given line. Enumerated types: <lnk> Link speed (10, 100, 1000, down) <ip> ........IPv4 dotted-decimal address (Ex: 10.19.6.6), netmask (Ex: 255.255.255.0), gateway (Ex: 10.19.0.0), or 'NA' for "Not available" CNS4 CSfC 11 - 23 Command Line Interface Revision 0.0...
  • Page 120 Example 5. Configure (enable) boot configuration of eth1 cns> ipconfig -e eth1 -O yes [ipconfig] IP: status=<sts> [!ipconfig] <summary> Line Identifier IP......... Configuration status line Fields status=<sts>......Summary status for the given line. CNS4 CSfC 11 - 24 Command Line Interface Revision 0.0...
  • Page 121 ERROR ....... <status> ERROR ....... Critical error has occurred <status> ......Status <str> (ERR "<str>") Example 1 cns> istarget --start [istarget] iSCSI0_L0: iqn=iqn.2015-05.net.cwnas.iscsi:gbe0 is_tgt_en=1 status=OK iSCSI1_L0: iqn=iqn.2015-05.net.cwnas.iscsi:gbe1 is_tgt_en=1 status=OK [!istarget] OK CNS4 CSfC 11 - 25 Command Line Interface Revision 0.0...
  • Page 122 [!istarget] OK Example 6 cns> istarget --getBlocksize [istarget] WARNING: status=WRN str="Blocksize:4096 != Active Size:512. Need to restart target" Target_block_size=4096 [!istarget] OK Example 7 cns> istarget --getBlocksSize [istarget] Target_block_size=512 [!istarget] OK CNS4 CSfC 11 - 26 Command Line Interface Revision 0.0...
  • Page 123 LED: s2=0 d2=75 status=OK [!ledctrl] OK Example 3 cns> ledctrl -l s1 -d 50 [ledctrl] LED: status=OK [!ledctrl] OK Example 4 cns> ledctrl -l s6 [ledctrl] INVALID: status=ERR str="invalid parameter." [!ledctrl] ERR CNS4 CSfC 11 - 27 Command Line Interface Revision 0.0...
  • Page 124 LOG........Log export status line. Fields status=<sts>......Summary status for the line. Enumerated Types <sts> ........Status message (OK, ERR "<str>"). <str> ........Text string. <summary> ......Command status summary (OK, ERR). CNS4 CSfC 11 - 28 Command Line Interface Revision 0.0...
  • Page 125 <status> ......Status <str> (ERR "<str>") Example 1 cns> password -u admin -p My_Secr_Pass_Word#1 [password] PASS: status=OK [!password] OK Example 2 cns> password -u admin [password] INVALID: status=ERR str="invalid parameter." [!password] ERR CNS4 CSfC 11 - 29 Command Line Interface Revision 0.0...
  • Page 126 INVALID ......Command parameter(s) invalid <status> ......Status <str> (ERR "<str>") ERROR <status> ERROR ....... Critical error has occurred <status> ......Status <str> (ERR "<str>") Example cns> reboot [reboot] REBOOT: status=OK [!reboot] OK CNS4 CSfC 11 - 30 Command Line Interface Revision 0.0...
  • Page 127 -fsep should be the first argument Example 1 cns> serial_config --baud 115200 [serial_config] Set_config: baud=9600 Char=8 Parity=n Stop=1 XON_XOFF=Disabled [!serial_config] OK Example 2 cns> serial_config -i [serial_config] Baud_rate=9600 Char_size=8 Parity=none Stop_bits=1 XON_XOFF=Disabled [!serial_config] O CNS4 CSfC 11 - 31 Command Line Interface Revision 0.0...
  • Page 128 ......Dynamic Host Configuration Protocol service state. snmp=<s> ......Simple Network Management Protocol service state. iscsi=<s> ......SCSI service state. mnt=<s> ......Mount NAS partitions. status=<sts> ....... Summary status for the line. CNS4 CSfC 11 - 32 Command Line Interface Revision 0.0...
  • Page 129 [!serv] ERR Line Identifier LIVESET ......Indicates change to operational state of server. Fields <serv>=<s> ......Indicator of which server is being started/stopped. status=<sts>......Status for action (OK, ERR "<str>"). CNS4 CSfC 11 - 33 Command Line Interface Revision 0.0...
  • Page 130 INVALID ......Command parameter(s) invalid <status> ......Status <str> (ERR "<str>") ERROR <status> ERROR ....... Critcal error has occurred <status> ......Status <str> (ERR "<str>") Example cns> shutdown [shutdown] SHUTDOWN: status=OK [!shutdown] OK CNS4 CSfC 11 - 34 Command Line Interface Revision 0.0...
  • Page 131 [--allow-discards ] ....Allow the use of discard (TRIM) requests for device. User will be prompted for a passphrase when --key-file or --pass flag are not present. This is the most secure mode. CNS4 CSfC 11 - 35 Command Line Interface...
  • Page 132 [!swcrypt] OK Example 4 cns> swcrypt --open 1 [swcrypt] cmd=open Part=1 Enter passphrase for /dev/md127p2: status=OK [!swcrypt] OK Example 5 cns> swcrypt --close 1 [swcrypt] cmd=close Part=1 status=OK [!swcrypt] OK CNS4 CSfC 11 - 36 Command Line Interface Revision 0.0...
  • Page 133 [swcrypt] Partitions: 4 Part0: name=fsm_raida1 swe=closed Part1: name=fsm_raida2 swe=closed Part2: name=fsm_raida3 swe=closed Part3: name=fsm_raida4 swe=closed [!swcrypt] OK Example 8 cns> swcrypt --delfile /keyfiles/pw.txt [swcrypt] cmd=delfile, deleting file=/keyfiles/pw.txt status=OK [!swcrypt] OK CNS4 CSfC 11 - 37 Command Line Interface Revision 0.0...
  • Page 134 --fsep "<char>" ......Specify field separation character for single line machine output. when used --sw or --fsep should be the first argument. --wipe, -E .........Wipe raid and partition data from all disks. --writecfg, -W ......Write system configuration to disks. CNS4 CSfC 11 - 38 Command Line Interface Revision 0.0...
  • Page 135 <status> ......Status <str> (ERR "<str>") Example 1 cns> sysdate -d 04/01/2018 -t 00:00:01 [sysdate] DATE: status=OK [!sysdate] OK Example 2 cns> sysdate [sysdate] DATE: date=04/01/2018 time=00:00:01 status=OK [!sysdate] OK CNS4 CSfC 11 - 39 Command Line Interface Revision 0.0...

  • Page 136: Figure A.1 Cns4 Envelope/ Mounting Dimensions

    Dimensions are in inches and (millimeters). Figure A.1 CNS4 Envelope/ Mounting Dimensions. 13.12 (333.1) 12.61 (320.4) 7.62 7.31 (193.5) (185.55) 0.13 12.62 (320.5) 0.25 (3.18) (6.35) 13.00 (330.2) 10.13 (257.2) 7.75 (196.7) 9.37 (238.0) DDOC0108-00034 CNS4 CSfC A - 1 Specifications Revision 0.0...
  • Page 137 User Guide DDOC0108-000-A2 NOTE Dimensions are in inches and (millimeters). Figure A.1 CNS4 Envelope / Mounting Dimensions (Continued). 0.40 0.40 (10.16) (10.16) 0.373 (9.462) 0.373 (9.462) 13.11 (333.0) 13.87 (352.3) 2.94 DDOC0108-0038 (74.55) CNS4 CSfC A - 2 Specifications Revision 0.0...

  • Page 138: A.2 Physical Dimensions / Weight

    0.02g2/Hz at 80 to 300Hz ..................X, Y, and Z Axes 0.003g2/Hz at 2000Hz .................... X, Y, and Z Axes The Curtiss-Wright CNS4 was evaluated with respect to MIL-STD-461F electromagnetic interference (EMI) requirements. Testing was performed in accordance with the Standard.

  • Page 139: Table B.1 Power / Rs-232 Lab Cable Pinout

    DB9 connector pin 3 RS-232 Receive DB9 connector pin 2 RS-232 Ground RS-232 GND DB9 connector pin 5 Zeroize Zeroize White Wire Chassis Ground CH_GND White Wire Reserved White Wire CNS4 CSfC B - 1 Cables / Connectors Revision 0.0...

  • Page 140: Table B.2 Ethernet Lab Cable Pinout

    White / Orange BI_DA- MDI0_M Orange BI_DB+ MDI1_P White / Green BI_DB- MDI1_M Green BI_DC+ MDI2_P White / Blue BI_DC- MDI2_M Blue BI_DD+ MDI3_P White / Brown BI_DD- MDI3_M Brown Not Connected CNS4 CSfC B - 2 Cables / Connectors Revision 0.0...

  • Page 141: Figure 2.5 Ile Module

    Power / RS-232 Lab Cable (36-Inch Long) 801-008-16NF8-135A GBE0 Ethernet Lab Cable (12-Inch Long) 801-008-16NF7-10SA GBE1 Ethernet Lab Cable (12-Inch Long) 801-008-16NF7-10SB GBE2 Ethernet Lab Cable (12-Inch Long) 801-008-16NF7-10SC GBE3 Ethernet Lab Cable (12-Inch Long) Not Used CNS4 CSfC C - 1 Ordering Information Revision 1.0...

Table of Contents