Commissioning; Preparation; Installation - Entrust nShield Security Manual

4. Commissioning

The commissioning process covers installing and configuring an nShield HSM for live
operation. The commissioning process must be conducted by authorized individuals in a
secure environment as described in

4.1. Preparation

Prior to commissioning:
• Perform a threat analysis of your deployment environment or use an existing threat
analysis.
• Review the guidance in this Security Manual and determine the procedures and
configuration required for your systems to meet the threats identified in your threat
analysis. The requirements should be identified in a Security Policy so that all users
understand the controls that are necessary to operate the system securely.
• Any host operating systems should be a current, supported version with the latest
patches applied.
• It is recommended that anti-virus software is installed on the host system and
maintained with automatic updates.
• If KeySafe or a java-based client application is deployed then a version of Java as
advised in the Installation Guide with any available patches should be installed.

4.2. Installation

Entrust supplies standard component bundles that contain many of the necessary
components for your installation and, in addition, individual components for use with
supported applications. To be sure that all component dependencies are satisfied, you
can install either:
• All the software components supplied
• Only the software components you require.
During the installation process, you will be asked to choose which bundles and
components to install.
Your choice depends on a number of considerations, including:
• The types of application that are to use the module
• The amount of disc space available for the installation
• Your policy on installing software. While it may be simpler to choose all software
components, you may have a policy of not installing any software that is not required
nShield® Security Manual
HSM environment controls.
13 of 90