Entrust nShield 5c Installation Manual page 44

See the nShield nShield 5c User Guide for more about the RFS and its contents.
The nShield nShield 5c must be able to connect to TCP port 9004 of the RFS. If
necessary, modify the firewall configuration to allow this connection on either the RFS
itself, or on a router between the RFS and the nShield nShield 5c, or both.
Obtain the following information about the nShield nShield 5c before you set up an RFS
for the first time:
• The IP address.
The following nShield nShield 5c information can be obtained automatically (or
manually):
• The electronic serial number (ESN).
• The hash of the
clients. It is generated when the nShield nShield 5c is first initialized from factory
state.
If your network is secure and you know the IP address of the nShield nShield 5c, you can
anonkneti
use the utility to obtain the ESN and hash of the
following command on the client computer. For guidance on network security, see the
nShield Security Manual.
anonkneti <Unit IP>
In this command, <Unit IP> is the IP address of the nShield nShield 5c, which could be
one of the following:
• An IPv4 address, for example 123.456.789.123.
• An IPv6 address, for example fc00::1.
• A link-local IPv6 address, for example, fe80::1%eth0.
• A hostname.
The command returns output in the following form:
A285-4F5A-7500 2418ec85c86027eb2d5959fef35edc5e1b3b698f
In this example output,
2418ec85c86027eb2d5959fef35edc5e1b3b698f
Alternatively, you can find this information on the nShield nShield 5c startup screen. Use
the touch wheel to scroll to the appropriate information.
When you have the necessary information, set up an RFS and nShield nShield 5c in the
following order:
nShield® 5c Installation Guide
K
key (HK ). The
NETI NETI
A285-4F5A-7500
is the ESN and
K
key authenticates the nShield nShield 5c to
NETI
K
NETI
K
is the hash of the
key by giving the
key.
NETI
44 of 77